Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142986.roa
File:                     AS142986.roa (raw, json)
Hash identifier:          3NZoyIkpE/iaE5u8rQnTqwxtbMqyfNWh9WDzrdkI1HM=
Subject key identifier:   AD:12:D5:FD:08:5C:19:C9:4A:52:64:C8:18:7F:C2:D6:AA:0F:EB:9B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4A1E7B59C876560BFAFE007142368C7A57D681C5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142986.roa
Signing time:             Fri 22 May 2026 01:50:08 +0000
ROA not before:           Fri 22 May 2026 01:45:08 +0000
ROA not after:            Fri 21 May 2027 01:50:08 +0000
asID:                     142986
IP address blocks:        240a:a150::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1e:7b:59:c8:76:56:0b:fa:fe:00:71:42:36:8c:7a:57:d6:81:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:08 2026 GMT
            Not After : May 21 01:50:08 2027 GMT
        Subject: CN=AD12D5FD085C19C94A5264C8187FC2D6AA0FEB9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:64:19:33:b2:cd:52:fe:54:f0:45:6d:6f:
                    47:44:97:eb:5a:2b:4f:37:b3:cc:57:32:50:dd:27:
                    03:be:43:3a:b1:00:70:56:c8:0f:f4:35:f3:ef:ea:
                    42:be:f7:9f:11:a3:97:2c:a8:99:ec:19:ca:64:3f:
                    d8:ee:ed:bf:1e:9f:b6:66:ca:68:e0:2b:63:ec:ff:
                    76:00:23:50:84:21:46:bb:e4:27:1e:12:01:0f:ac:
                    bd:d8:a6:c5:5d:34:e7:a6:d1:b8:5a:46:cf:65:1d:
                    d8:ce:89:b3:b1:a8:60:f8:3a:af:8d:07:17:a3:a9:
                    43:02:14:2d:c2:8a:6a:67:92:c2:a9:8b:0d:9f:8a:
                    2e:6d:88:e8:2f:74:43:3c:55:ec:30:f5:1c:32:20:
                    3a:1c:24:35:ff:b1:fe:dc:48:59:a3:fa:9a:48:47:
                    cd:58:31:f5:20:5f:b2:72:22:81:c6:71:47:95:c6:
                    cb:d9:47:44:f9:20:56:a8:93:f3:1a:6d:05:79:27:
                    77:39:e4:c0:2a:ce:9d:ad:77:32:8a:f7:43:40:fc:
                    ea:0b:72:25:2b:ce:e4:f3:ed:dd:ef:16:5f:09:56:
                    75:a7:cd:6a:66:65:e6:7e:a6:5f:9a:d4:28:38:38:
                    3d:f7:f9:a8:52:95:38:48:fa:9d:c4:1b:3a:1f:c7:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:12:D5:FD:08:5C:19:C9:4A:52:64:C8:18:7F:C2:D6:AA:0F:EB:9B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142986.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a150::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:af:55:4f:63:9f:67:cd:bc:f6:fb:60:22:b1:3c:1e:10:c8:
         87:e0:32:e4:ea:40:bc:10:07:95:88:24:3f:d0:22:1c:90:01:
         b9:c3:e5:e8:b8:07:a7:f6:0b:00:4c:ff:34:07:bf:eb:a8:6b:
         f4:cb:7e:81:0a:fb:17:b0:56:5b:5a:15:bf:4e:2d:3f:a5:5b:
         9e:d3:a1:c9:78:42:66:0c:0d:d7:05:58:2c:04:1f:40:df:63:
         bb:21:5b:38:e4:b3:d2:c1:af:b3:c5:9e:5f:73:34:b8:42:33:
         11:05:e8:25:ac:aa:07:72:69:15:2e:a6:b5:44:b6:ef:0a:2c:
         26:90:7e:d5:2b:97:81:14:9a:f7:4d:6f:0a:10:5b:13:09:88:
         4a:9d:a8:86:bd:54:ca:73:66:e3:81:59:10:50:77:a5:58:05:
         57:68:5a:ee:28:5b:c8:63:7a:d9:17:56:fa:f4:23:26:b8:d6:
         c3:f8:0a:1e:43:f6:54:24:ec:1d:1c:37:b7:ba:fa:56:55:99:
         ff:d1:b1:3d:12:6f:84:5c:34:4c:2c:3b:dd:c9:77:5d:4b:0c:
         b1:05:97:2d:f0:85:16:84:59:5e:a8:bf:ed:4c:34:7e:f0:88:
         27:6f:7f:b9:1a:aa:38:9f:5e:62:1d:95:fe:00:7d:b7:b9:d0:
         a8:53:78:d2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSh57Wch2Vgv6/gBxQjaMelfWgcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MDhaFw0yNzA1MjEwMTUwMDhaMDMxMTAvBgNV
BAMTKEFEMTJENUZEMDg1QzE5Qzk0QTUyNjRDODE4N0ZDMkQ2QUEwRkVCOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UGQZM7LNUv5U8EVtb0dEl+ta
K083s8xXMlDdJwO+QzqxAHBWyA/0NfPv6kK+958Ro5csqJnsGcpkP9ju7b8en7Zm
ymjgK2Ps/3YAI1CEIUa75CceEgEPrL3YpsVdNOem0bhaRs9lHdjOibOxqGD4Oq+N
BxejqUMCFC3CimpnksKpiw2fii5tiOgvdEM8Veww9RwyIDocJDX/sf7cSFmj+ppI
R81YMfUgX7JyIoHGcUeVxsvZR0T5IFaok/MabQV5J3c55MAqzp2tdzKK90NA/OoL
ciUrzuTz7d3vFl8JVnWnzWpmZeZ+pl+a1Cg4OD33+ahSlThI+p3EGzofx8/7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUrRLV/QhcGclKUmTIGH/C1qoP65swHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhUDANBgkqhkiG9w0BAQsFAAOCAQEAma9V
T2OfZ8289vtgIrE8HhDIh+Ay5OpAvBAHlYgkP9AiHJABucPl6LgHp/YLAEz/NAe/
66hr9Mt+gQr7F7BWW1oVv04tP6VbntOhyXhCZgwN1wVYLAQfQN9juyFbOOSz0sGv
s8WeX3M0uEIzEQXoJayqB3JpFS6mtUS27wosJpB+1SuXgRSa901vChBbEwmISp2o
hr1UynNm44FZEFB3pVgFV2ha7ihbyGN62RdW+vQjJrjWw/gKHkP2VCTsHRw3t7r6
VlWZ/9GxPRJvhFw0TCw73cl3XUsMsQWXLfCFFoRZXqi/7Uw0fvCIJ29/uRqqOJ9e
Yh2V/gB9t7nQqFN40g==
-----END CERTIFICATE-----