Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142077.roa
File:                     AS142077.roa (raw, json)
Hash identifier:          v2l3fzwpvtQ9deva56bQN1C1yOMde40uRD1CNRm8mlg=
Subject key identifier:   46:40:0B:DB:4E:99:C6:94:7F:A7:87:EF:AA:20:64:E5:59:DE:80:00
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       27DD41AC246632F715BFAFF6C2A968DDBFC2994F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142077.roa
Signing time:             Mon 25 May 2026 01:38:37 +0000
ROA not before:           Mon 25 May 2026 01:33:37 +0000
ROA not after:            Mon 24 May 2027 01:38:37 +0000
asID:                     142077
IP address blocks:        2001:253:211::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:dd:41:ac:24:66:32:f7:15:bf:af:f6:c2:a9:68:dd:bf:c2:99:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:33:37 2026 GMT
            Not After : May 24 01:38:37 2027 GMT
        Subject: CN=46400BDB4E99C6947FA787EFAA2064E559DE8000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:c4:b7:32:30:95:aa:9d:36:71:08:7e:8b:
                    2a:99:8a:52:8b:cc:20:c1:fa:27:3f:72:21:13:85:
                    13:f5:bb:51:29:60:22:5a:54:73:81:bf:ab:08:2e:
                    6d:d6:29:8a:f8:42:37:38:cc:80:17:ae:a0:bc:78:
                    68:ce:0e:61:07:f5:dd:99:54:3f:59:88:bc:cf:6c:
                    46:8b:df:44:b2:b1:9f:a0:7a:51:94:c6:1d:38:d0:
                    51:26:c9:d1:6a:25:33:7f:13:63:37:d5:83:4d:b4:
                    f8:33:74:ce:ef:df:82:7e:0f:fe:00:22:e3:ec:4a:
                    f2:4d:79:12:fc:4f:27:38:d9:4c:fe:f9:7a:0e:2e:
                    73:5f:6f:db:6e:ee:a7:c0:3c:a1:d7:db:00:fe:98:
                    e7:2f:0b:cc:e6:a9:17:0b:fe:ca:bf:75:66:70:77:
                    41:2b:45:5d:9d:5c:f8:c6:5b:f9:86:2e:7e:3c:75:
                    49:d4:4a:f9:09:28:a0:d4:84:1d:9b:f2:fb:ea:1c:
                    ba:f7:62:0e:a9:e0:a6:3b:dd:a8:8c:f7:15:13:bc:
                    7b:7f:64:7e:16:a3:ab:5b:17:f6:0a:9d:d9:d1:22:
                    b5:e8:2f:b9:e1:d0:a8:54:21:64:06:3d:4a:2a:a6:
                    f7:80:22:77:00:43:57:92:c8:34:af:ce:bd:1e:8e:
                    58:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:40:0B:DB:4E:99:C6:94:7F:A7:87:EF:AA:20:64:E5:59:DE:80:00
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142077.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:253:211::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:b8:6d:dd:ee:3d:9c:b7:52:cf:66:38:3d:58:b3:10:e3:97:
         5e:49:54:37:09:e0:96:91:b9:1e:87:20:e1:0b:96:4e:df:74:
         43:c3:57:2c:b9:8d:6c:ce:a4:0f:80:35:dc:62:89:c7:a5:64:
         69:2e:88:ba:c3:e3:11:e7:02:1d:d0:d9:b5:5b:33:73:c8:5f:
         55:47:24:2b:e3:67:2b:35:ee:ff:fa:8f:d3:50:6c:55:bc:5f:
         72:45:b8:21:0f:18:0d:21:40:5c:1d:4c:33:ce:85:63:a2:49:
         fa:26:51:99:c2:35:75:f2:e2:b8:8a:af:55:5e:84:4f:e0:c7:
         e3:75:66:99:dd:8a:31:5d:8a:54:f5:b0:c1:86:82:ec:33:af:
         76:e5:33:3d:85:7c:f1:80:f1:55:7e:d3:31:1e:3e:63:aa:e4:
         3e:7a:f5:e2:d4:ea:1b:33:5f:c9:af:06:76:a3:96:67:10:9c:
         04:9e:17:d6:cb:e0:01:df:ba:50:bc:7c:94:1d:88:75:53:39:
         93:5f:a2:54:d2:60:33:27:5d:83:75:9f:d5:a1:6c:73:b3:6d:
         67:27:56:de:f3:c1:f4:04:ed:59:61:ca:8e:c9:8d:8c:6f:04:
         9b:65:7c:bf:27:f4:55:73:1b:15:33:3a:43:66:df:67:f8:90:
         a4:d0:48:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:32 2026 by rpki-client