Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142075.roa
File:                     AS142075.roa (raw, json)
Hash identifier:          4XGCA5+4F1tleZ9y9X9QDJmXULJ+lNTE4zGuU4KWhH0=
Subject key identifier:   86:D1:4F:7E:40:6D:DD:DB:7E:71:43:F7:36:81:7B:EC:99:E9:03:90
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       30748A15A03D9B46896DD634749D7DCDF5B9C23B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142075.roa
Signing time:             Fri 22 May 2026 04:08:33 +0000
ROA not before:           Fri 22 May 2026 04:03:33 +0000
ROA not after:            Fri 21 May 2027 04:08:33 +0000
asID:                     142075
IP address blocks:        2001:253:209::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:74:8a:15:a0:3d:9b:46:89:6d:d6:34:74:9d:7d:cd:f5:b9:c2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:03:33 2026 GMT
            Not After : May 21 04:08:33 2027 GMT
        Subject: CN=86D14F7E406DDDDB7E7143F736817BEC99E90390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:64:20:11:50:cf:b2:26:a8:e0:d6:b4:58:
                    8b:50:f1:11:be:d1:f0:08:99:6c:55:0a:b6:e8:4c:
                    95:7e:4f:f3:d4:8a:e7:aa:1d:33:25:d3:62:3a:1c:
                    8d:76:d4:8a:e1:c1:3c:ec:f7:a7:2a:a1:fc:74:f1:
                    ff:0e:c0:2b:2c:87:2c:d3:f0:6f:3d:85:0d:56:ca:
                    09:fa:ce:f2:a2:30:b2:ac:dd:c2:3c:a8:cb:93:b2:
                    98:c6:5b:36:be:ce:d3:4d:e4:2b:6a:87:ea:ed:46:
                    1c:8a:09:5a:89:52:bf:29:be:a6:8c:07:45:85:63:
                    01:44:96:d4:f7:96:d0:a6:40:5a:79:82:9a:5b:3b:
                    3f:25:c3:48:51:56:05:19:06:6d:a4:61:63:9d:0c:
                    c2:4f:9a:82:77:29:14:ca:31:3b:5b:e8:14:7a:0a:
                    f5:d2:cd:ea:14:6b:9a:fc:5c:be:2a:12:a7:dc:b1:
                    91:17:d1:86:b0:40:e1:0b:ee:57:f7:e2:b8:09:09:
                    64:66:d7:8d:a8:fd:c6:0c:cb:42:bf:38:05:e6:b4:
                    37:63:98:bc:d8:6c:d4:fe:10:ce:6e:1e:e4:d9:71:
                    ba:b6:cd:8e:ef:f1:f8:95:fb:db:36:be:3e:14:e2:
                    fd:97:80:cd:6e:d1:43:1e:c5:94:37:cc:7f:88:f8:
                    4f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D1:4F:7E:40:6D:DD:DB:7E:71:43:F7:36:81:7B:EC:99:E9:03:90
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:253:209::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:11:65:4a:ee:2e:b0:d7:1d:3d:18:b8:5a:41:4f:80:2f:57:
         fb:b2:6e:a7:09:4c:5b:e0:5e:c2:16:0b:72:a5:76:ab:d8:3f:
         43:74:59:4d:44:cb:3c:07:37:5d:0c:4e:ef:ee:12:1c:7d:62:
         ca:7e:60:67:04:b8:f4:a9:db:c4:ad:19:c6:d1:b0:0c:2b:c9:
         32:66:66:2d:ed:70:e5:96:c7:37:f0:aa:af:a7:ed:39:0c:d8:
         53:e6:2d:b8:5a:6c:3b:11:22:4c:2a:36:ce:53:c8:a0:dc:44:
         c5:b8:ff:f1:73:82:81:53:66:20:c4:cd:9f:1b:22:75:84:f7:
         17:97:24:44:35:0e:4d:1b:5f:63:50:fe:47:88:ca:13:c0:b9:
         41:55:44:5d:6a:69:47:79:35:71:57:fc:56:79:cc:9b:f2:e6:
         98:ef:0c:72:04:1e:f9:5d:50:ad:a1:15:43:43:2f:51:a1:3f:
         69:80:b3:5e:b9:7d:9b:e7:2b:34:45:3d:13:a4:aa:d2:2b:9d:
         d5:df:8c:fb:e1:ab:c1:c2:99:c9:d8:14:ca:c3:f0:4c:2b:5f:
         69:59:e8:1e:4f:57:3d:94:64:16:fa:80:5d:b9:c2:7b:7b:7c:
         9e:2d:26:7c:b9:3c:99:f7:0e:b1:8c:f4:7a:4f:bf:f8:7f:75:
         b4:1d:a1:56
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIUMHSKFaA9m0aJbdY0dJ19zfW5wjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMzNaFw0yNzA1MjEwNDA4MzNaMDMxMTAvBgNV
BAMTKDg2RDE0RjdFNDA2REREREI3RTcxNDNGNzM2ODE3QkVDOTlFOTAzOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbWQgEVDPsiao4Na0WItQ8RG+
0fAImWxVCrboTJV+T/PUiueqHTMl02I6HI121IrhwTzs96cqofx08f8OwCsshyzT
8G89hQ1Wygn6zvKiMLKs3cI8qMuTspjGWza+ztNN5Ctqh+rtRhyKCVqJUr8pvqaM
B0WFYwFEltT3ltCmQFp5gppbOz8lw0hRVgUZBm2kYWOdDMJPmoJ3KRTKMTtb6BR6
CvXSzeoUa5r8XL4qEqfcsZEX0YawQOEL7lf34rgJCWRm142o/cYMy0K/OAXmtDdj
mLzYbNT+EM5uHuTZcbq2zY7v8fiV+9s2vj4U4v2XgM1u0UMexZQ3zH+I+E8jAgMB
AAGjggHFMIIBwTAdBgNVHQ4EFgQUhtFPfkBt3dt+cUP3NoF77JnpA5AwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyMDc1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAECUwIJMA0GCSqGSIb3DQEBCwUAA4IBAQAW
EWVK7i6w1x09GLhaQU+AL1f7sm6nCUxb4F7CFgtypXar2D9DdFlNRMs8BzddDE7v
7hIcfWLKfmBnBLj0qdvErRnG0bAMK8kyZmYt7XDllsc38Kqvp+05DNhT5i24Wmw7
ESJMKjbOU8ig3ETFuP/xc4KBU2YgxM2fGyJ1hPcXlyRENQ5NG19jUP5HiMoTwLlB
VURdamlHeTVxV/xWecyb8uaY7wxyBB75XVCtoRVDQy9RoT9pgLNeuX2b5ys0RT0T
pKrSK53V34z74avBwpnJ2BTKw/BMK19pWegeT1c9lGQW+oBducJ7e3yeLSZ8uTyZ
9w6xjPR6T7/4f3W0HaFW
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:56 2026 by rpki-client