Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142079.roa
File:                     AS142079.roa (raw, json)
Hash identifier:          9LOYvoMhUi4Qc5ZH3LAc99+I9lWHtHyqM1W1oc2mUao=
Subject key identifier:   A9:55:04:5C:49:DD:8C:9A:A3:EA:BC:F7:CE:F0:D4:23:86:58:9A:8B
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       77FA2CD6C77B6979BEFFD39ABB60670642E0BCA9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142079.roa
Signing time:             Fri 22 May 2026 06:27:58 +0000
ROA not before:           Fri 22 May 2026 06:22:58 +0000
ROA not after:            Fri 21 May 2027 06:27:58 +0000
asID:                     142079
IP address blocks:        2001:253:213::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fa:2c:d6:c7:7b:69:79:be:ff:d3:9a:bb:60:67:06:42:e0:bc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:58 2026 GMT
            Not After : May 21 06:27:58 2027 GMT
        Subject: CN=A955045C49DD8C9AA3EABCF7CEF0D42386589A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:be:cf:2c:67:61:d3:38:12:7f:d8:38:be:
                    7f:7c:1b:22:8f:6a:ac:4b:cf:54:b0:0d:79:c9:a8:
                    5d:93:af:27:38:d0:8c:9e:8d:3e:06:bc:09:fc:e8:
                    8f:a3:0f:9f:5b:45:cd:1a:c5:20:e9:57:f5:6c:d6:
                    67:7c:c3:1a:93:ab:af:fa:ef:b8:49:b1:7d:b8:c1:
                    20:e8:66:8a:e0:e6:0d:c0:43:bf:92:e2:47:6f:fb:
                    b9:86:c0:7b:e3:11:72:e4:a7:4f:4c:4d:8d:c3:3c:
                    cf:88:ae:7d:18:aa:ad:ba:58:2b:31:a6:5f:12:45:
                    45:92:48:25:ff:24:e3:2b:a1:65:dd:2f:0b:a4:de:
                    65:bc:e6:d6:48:3a:79:d6:70:df:24:a0:f0:75:e0:
                    4f:ce:af:33:9a:0d:b6:6c:ac:69:93:1a:c3:94:11:
                    61:c5:0d:84:ac:6e:87:57:09:56:4a:ea:e8:4e:cc:
                    6c:b3:82:6f:13:a0:dd:d1:e4:4e:05:6d:1a:36:78:
                    05:61:55:0b:ba:11:b6:01:81:5f:31:22:70:eb:a2:
                    eb:9f:01:e9:be:3c:72:e0:4c:7e:74:67:fc:5d:74:
                    d6:83:23:c3:f6:ce:98:68:22:72:59:1b:15:e9:87:
                    18:23:0c:85:64:15:2f:5f:20:28:43:9f:69:97:99:
                    26:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:55:04:5C:49:DD:8C:9A:A3:EA:BC:F7:CE:F0:D4:23:86:58:9A:8B
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:253:213::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:04:aa:60:c5:83:71:27:90:23:08:5a:61:53:e1:8c:c1:6f:
         03:ca:41:d8:06:0a:d1:6b:84:f3:61:09:b8:8e:66:fd:15:10:
         f8:dd:09:b4:a5:22:45:91:c1:97:93:4e:92:62:2a:eb:ca:60:
         ac:ac:f2:d2:4c:4a:43:d3:44:a7:36:78:f4:f3:0b:72:17:3b:
         99:d6:37:af:f6:02:17:59:70:d4:4b:81:31:04:81:d9:15:b0:
         09:98:ad:2e:24:ff:e1:52:35:c0:1b:73:fb:96:93:b8:f6:c9:
         d0:64:10:0a:a8:54:3d:df:84:9e:e7:69:c2:ef:db:73:cb:59:
         86:a6:ca:00:28:75:0e:a5:47:5e:d3:c7:17:af:fc:b7:c8:91:
         54:fb:ea:55:0c:68:57:05:8f:1e:cf:f6:49:79:29:aa:4d:de:
         f3:ea:b8:82:ed:70:a4:72:ce:77:7c:9b:0c:2d:29:49:97:d5:
         72:cd:9e:aa:9e:21:da:7d:8b:06:73:a8:78:f7:12:7b:52:47:
         d7:d3:01:68:4e:52:4b:3d:c8:eb:86:4d:98:14:66:82:c0:8e:
         aa:b5:0c:26:c6:04:19:ae:54:28:a7:b9:83:a6:be:1f:e4:40:
         f6:e5:00:a8:0c:bb:ac:f2:0e:26:43:9b:1c:98:18:19:df:3d:
         af:42:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:19 2026 by rpki-client