Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142078.roa
File:                     AS142078.roa (raw, json)
Hash identifier:          KQD4OZD1OaurM8Uyu91Ok2uttBQtM/+400flIhS1u7U=
Subject key identifier:   2D:08:66:2E:FB:15:28:6F:88:59:86:8D:38:88:E6:E6:80:48:08:EC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       57599955D63DD062C42C9FACF7C2223F15362787
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142078.roa
Signing time:             Fri 22 May 2026 06:05:24 +0000
ROA not before:           Fri 22 May 2026 06:00:24 +0000
ROA not after:            Fri 21 May 2027 06:05:24 +0000
asID:                     142078
IP address blocks:        2001:253:212::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:59:99:55:d6:3d:d0:62:c4:2c:9f:ac:f7:c2:22:3f:15:36:27:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:24 2026 GMT
            Not After : May 21 06:05:24 2027 GMT
        Subject: CN=2D08662EFB15286F8859868D3888E6E6804808EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e0:64:1d:57:1f:d5:47:35:8e:5f:55:41:c1:
                    e7:76:2f:b4:2a:fd:a6:ba:f8:60:6c:33:6f:dd:b0:
                    85:9b:1d:73:45:ed:fa:04:b1:88:f2:b5:c3:39:7d:
                    c1:1b:20:13:d7:a3:29:2a:74:f5:25:70:e2:ad:dd:
                    08:b0:62:9c:cb:7d:db:4d:b6:7b:1d:11:c9:b6:c5:
                    fe:7c:ce:48:ca:56:32:ad:35:e6:e8:0f:9b:2b:5e:
                    83:0c:85:74:31:57:bc:82:3a:12:56:6d:94:b2:5a:
                    aa:9c:97:a9:d2:12:2c:09:09:65:dd:5e:7e:b6:7c:
                    f4:41:54:ed:44:f7:fc:25:d0:27:69:ff:01:f6:fb:
                    aa:c2:ee:94:5f:87:44:b1:12:12:df:8d:ea:e6:1c:
                    fc:bb:23:f2:f8:b4:7a:cb:61:03:7e:c8:ee:58:28:
                    cd:50:59:87:49:b4:e3:96:fd:38:48:0c:a7:ba:06:
                    0b:59:a6:7f:c1:35:99:4d:e9:9b:91:48:09:b5:68:
                    fa:55:97:a6:ae:66:ee:f8:df:7f:9d:e5:7f:63:90:
                    43:e0:e2:46:6f:ec:7b:86:53:df:ae:3f:25:9f:ad:
                    8d:67:fe:ed:09:dd:e2:20:e0:1e:65:f5:7f:20:67:
                    36:dd:ad:2e:c6:9d:a6:07:e5:0c:91:dc:77:eb:12:
                    0a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:08:66:2E:FB:15:28:6F:88:59:86:8D:38:88:E6:E6:80:48:08:EC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142078.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:253:212::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:6b:7a:c4:c6:ea:f1:17:4d:b7:5d:68:48:1c:ee:af:21:b5:
         19:6e:83:f5:92:8c:9c:1d:55:df:8c:67:ce:4f:06:49:b4:1d:
         98:62:70:fb:6a:bc:a3:d6:34:31:42:58:7c:43:12:f3:5e:4f:
         d8:04:c7:c2:e7:39:95:1f:a3:67:d9:ec:db:a5:01:67:22:f9:
         c8:9e:27:2b:97:c4:9c:d0:1e:b7:80:a4:76:a6:51:56:e3:26:
         bd:c7:58:c2:12:7c:45:4c:07:c8:c5:91:9a:71:df:7b:32:5d:
         09:c2:80:ed:4a:cd:3c:f8:7c:d5:75:f6:1b:0d:fc:fc:bd:24:
         65:d8:b7:01:50:79:e5:72:aa:22:84:5f:75:c3:25:40:14:f0:
         95:9a:07:59:6a:af:a0:53:79:eb:3d:c2:27:30:fe:8f:31:6e:
         ab:8c:99:43:5d:c5:08:77:70:d6:27:dd:3d:2d:57:f2:df:18:
         7a:d7:59:97:3d:40:6f:61:25:bd:43:8d:fb:e7:b1:57:ae:8e:
         25:74:5e:00:d2:55:2d:06:dc:b3:ef:7d:cc:29:96:e3:9c:55:
         46:d5:a7:36:a6:72:83:c6:5e:2b:cf:44:11:a5:67:36:51:b2:
         25:10:06:cb:14:6b:07:83:d2:9c:69:5e:0c:3d:0d:3c:92:11:
         66:19:23:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:30 2026 by rpki-client