Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142994.roa
File:                     AS142994.roa (raw, json)
Hash identifier:          v9OR/+NFqELH94zyTNmMwMeLs43SJqx0+qMh4mAGO2g=
Subject key identifier:   FB:F6:8B:C7:48:48:93:47:0F:83:D9:60:27:EC:BB:23:AB:1C:BA:2A
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       39B9F8E0496910E510F7A1AD11EBBE3D784BEDF5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142994.roa
Signing time:             Fri 22 May 2026 07:24:47 +0000
ROA not before:           Fri 22 May 2026 07:19:47 +0000
ROA not after:            Fri 21 May 2027 07:24:47 +0000
asID:                     142994
IP address blocks:        240a:a158::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b9:f8:e0:49:69:10:e5:10:f7:a1:ad:11:eb:be:3d:78:4b:ed:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:19:47 2026 GMT
            Not After : May 21 07:24:47 2027 GMT
        Subject: CN=FBF68BC7484893470F83D96027ECBB23AB1CBA2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:1c:86:bb:b4:79:dd:fd:14:28:98:22:3b:
                    24:e4:9a:69:42:5c:b1:85:75:9a:c9:bd:f8:84:64:
                    6d:6b:49:d8:05:0f:b3:87:19:5b:0c:e7:1a:20:64:
                    f7:dc:0e:f7:88:64:76:99:0e:2d:16:b3:08:fc:27:
                    7b:a0:c9:7f:b4:eb:a4:05:1a:1a:56:e6:f9:d5:a5:
                    8f:b9:0d:fc:aa:40:97:61:0f:25:0d:65:09:ab:2d:
                    6d:91:eb:40:82:52:23:2b:97:6f:f9:1c:a7:d5:11:
                    e3:dd:66:ef:52:cd:74:d5:86:d0:ed:b2:7f:d4:ef:
                    93:38:79:76:ec:d0:f3:9e:f8:cc:cf:f6:69:29:7d:
                    73:4e:6d:75:c8:86:72:e8:05:68:c0:b9:fe:6b:53:
                    80:94:0c:5d:fd:9f:49:77:e3:77:a4:7b:84:b2:c5:
                    b7:ff:da:87:90:73:a4:aa:ce:9e:ba:43:f3:1c:7e:
                    5d:3b:ed:2a:41:e7:a5:54:74:f3:20:e1:8f:ac:74:
                    9b:09:e5:6b:e0:04:d5:1f:3c:bc:5f:91:d4:6b:7a:
                    77:ff:bb:af:86:e4:3b:e0:0a:fc:91:78:d8:a1:80:
                    c1:61:71:3d:0b:96:0d:dc:a8:ee:67:0a:4b:5d:97:
                    9d:05:0c:f8:74:06:c7:90:60:ea:85:e0:d8:fd:44:
                    63:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F6:8B:C7:48:48:93:47:0F:83:D9:60:27:EC:BB:23:AB:1C:BA:2A
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142994.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a158::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:1a:73:dc:a8:23:39:88:f0:11:f9:eb:70:ed:8a:1e:fc:b2:
         83:08:ce:6e:48:14:fe:4d:af:c4:7e:01:94:ff:ae:58:c1:88:
         74:be:c3:e5:f0:f8:01:47:a6:45:83:aa:4c:0e:37:8b:e5:e0:
         cc:d3:6d:37:62:7d:b4:3a:64:21:ed:90:53:a7:64:fa:2d:f3:
         0c:c3:fd:b3:fe:36:f0:0b:7a:e9:a8:c6:f3:d7:20:8c:46:a1:
         7d:39:32:1e:83:36:e3:34:98:99:0d:22:75:89:cf:2b:01:45:
         52:b4:ac:1c:e2:1c:e5:21:30:c4:c0:db:f5:41:1e:be:b3:4c:
         8a:40:79:f2:1e:d6:24:58:30:6e:2c:f6:40:1e:0c:04:a4:ca:
         7f:ff:fb:ba:68:47:62:41:b3:76:fd:88:95:d1:91:b2:cc:df:
         cb:96:6d:e4:ab:5b:6f:11:33:1b:dc:32:d1:25:f2:7a:91:78:
         1f:86:e9:0f:e7:73:0a:c8:bf:c9:51:4b:c9:1c:0c:50:65:6a:
         8b:33:90:5e:88:a0:95:50:b0:11:74:d2:e7:59:63:58:40:71:
         07:b1:b0:1d:5b:9e:1c:ee:72:79:f5:81:d5:a6:f4:ba:09:45:
         8a:21:aa:d0:80:ff:51:dc:91:8a:1f:05:3a:e7:31:af:70:dd:
         91:e2:08:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----