Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142082.roa
File:                     AS142082.roa (raw, json)
Hash identifier:          SAuchV+GceiJArUiLeaIRT7dd0krw2PsnA9c/JU/MhM=
Subject key identifier:   4D:FC:4E:CC:8E:B5:14:24:BD:6B:0F:9D:7B:43:C2:F2:37:1D:EA:C3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       34E387F3312FA79124AB16BA6E3400E5C00CE506
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142082.roa
Signing time:             Tue 26 May 2026 01:13:07 +0000
ROA not before:           Tue 26 May 2026 01:08:07 +0000
ROA not after:            Tue 25 May 2027 01:13:07 +0000
asID:                     142082
IP address blocks:        2001:253:216::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e3:87:f3:31:2f:a7:91:24:ab:16:ba:6e:34:00:e5:c0:0c:e5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 01:08:07 2026 GMT
            Not After : May 25 01:13:07 2027 GMT
        Subject: CN=4DFC4ECC8EB51424BD6B0F9D7B43C2F2371DEAC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:a6:b7:84:e7:bb:c1:f9:ad:85:51:82:f8:
                    6a:26:56:a8:24:fb:9a:5e:f2:a9:f5:b5:a8:d9:8e:
                    fd:77:bb:6b:9f:50:a2:ad:48:6f:d2:b3:61:c7:05:
                    8a:44:41:3e:6a:09:83:63:d3:31:d8:76:c7:40:83:
                    b0:69:5d:a2:30:a8:c3:ba:25:ae:23:f3:fe:25:f9:
                    0a:f9:cc:fb:96:c3:00:3a:41:5e:0e:f8:82:d3:82:
                    34:14:d5:9f:83:fe:97:ff:9a:fd:29:5a:41:d9:a4:
                    f8:6e:68:04:c9:73:5e:f6:f4:b6:a8:69:18:eb:54:
                    58:bc:da:1a:15:17:bf:eb:42:cd:f3:26:8e:a4:2f:
                    0c:6e:73:8c:62:cb:2a:20:18:db:75:9b:90:a9:27:
                    9c:b7:f5:1d:6f:3c:7d:8d:e5:0d:77:e2:10:9e:3b:
                    c8:51:13:02:6d:90:01:aa:88:a5:3f:e8:e4:af:41:
                    72:93:91:d5:8e:93:80:5c:0e:a8:89:14:ee:09:ee:
                    76:76:22:b4:fc:07:87:07:4a:9b:d7:fc:83:a4:fd:
                    eb:db:c1:ca:fb:fb:ab:f2:8a:ea:1a:65:6c:75:05:
                    79:d0:33:8b:15:e7:99:8c:43:ea:5d:ca:d0:c5:21:
                    ee:9d:21:a5:43:58:fd:3d:39:2f:84:89:12:32:8f:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FC:4E:CC:8E:B5:14:24:BD:6B:0F:9D:7B:43:C2:F2:37:1D:EA:C3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142082.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:253:216::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:04:8e:3d:be:5f:7d:4c:05:08:ae:e4:40:4f:fa:a5:cb:b1:
         9d:90:31:00:cd:8a:29:ec:cf:d3:3b:71:17:a5:4c:24:b0:df:
         67:02:91:25:96:53:4e:9c:8b:ca:89:d6:84:c4:07:87:83:78:
         e4:65:bb:13:0b:f1:5f:c4:ee:18:1d:dd:3c:00:ff:2b:b1:6b:
         11:00:a0:2c:a4:36:37:fb:9b:a3:5c:4e:c6:d0:7f:42:24:a6:
         89:88:31:56:d8:a9:9f:e9:74:9a:ec:47:73:83:98:b1:0b:91:
         3a:ec:9d:eb:eb:cb:74:76:b5:d8:52:07:ed:8e:70:b7:fd:88:
         b0:b3:5e:bb:6b:07:33:fa:16:26:cf:4d:a0:8f:37:4c:31:43:
         ad:af:97:01:01:fc:d7:b9:06:de:7e:ad:6f:d4:7b:2f:15:6c:
         30:8b:e0:0f:39:51:43:69:df:18:16:0d:6d:c4:95:4e:92:45:
         8f:78:1a:3c:bd:52:6a:99:11:e8:bb:3d:f1:86:8b:f6:b3:08:
         f1:5e:b3:cb:cc:43:1e:8d:ec:a5:90:99:ff:db:02:0c:0e:b6:
         9a:20:66:60:7d:2d:a2:39:ef:fe:c4:b8:a2:2b:69:f0:fe:1b:
         60:85:c8:dc:e7:67:c6:85:67:87:2d:28:cc:64:12:3e:3d:c9:
         d2:ad:c6:69
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIUNOOH8zEvp5Ekqxa6bjQA5cAM5QYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MDdaFw0yNzA1MjUwMTEzMDdaMDMxMTAvBgNV
BAMTKDRERkM0RUNDOEVCNTE0MjRCRDZCMEY5RDdCNDNDMkYyMzcxREVBQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRKa3hOe7wfmthVGC+GomVqgk
+5pe8qn1tajZjv13u2ufUKKtSG/Ss2HHBYpEQT5qCYNj0zHYdsdAg7BpXaIwqMO6
Ja4j8/4l+Qr5zPuWwwA6QV4O+ILTgjQU1Z+D/pf/mv0pWkHZpPhuaATJc1729Lao
aRjrVFi82hoVF7/rQs3zJo6kLwxuc4xiyyogGNt1m5CpJ5y39R1vPH2N5Q134hCe
O8hREwJtkAGqiKU/6OSvQXKTkdWOk4BcDqiJFO4J7nZ2IrT8B4cHSpvX/IOk/evb
wcr7+6vyiuoaZWx1BXnQM4sV55mMQ+pdytDFIe6dIaVDWP09OS+EiRIyj0PhAgMB
AAGjggHFMIIBwTAdBgNVHQ4EFgQUTfxOzI61FCS9aw+de0PC8jcd6sMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyMDgyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAECUwIWMA0GCSqGSIb3DQEBCwUAA4IBAQCA
BI49vl99TAUIruRAT/qly7GdkDEAzYop7M/TO3EXpUwksN9nApElllNOnIvKidaE
xAeHg3jkZbsTC/FfxO4YHd08AP8rsWsRAKAspDY3+5ujXE7G0H9CJKaJiDFW2Kmf
6XSa7Edzg5ixC5E67J3r68t0drXYUgftjnC3/Yiws167awcz+hYmz02gjzdMMUOt
r5cBAfzXuQbefq1v1HsvFWwwi+APOVFDad8YFg1txJVOkkWPeBo8vVJqmRHouz3x
hov2swjxXrPLzEMejeylkJn/2wIMDraaIGZgfS2iOe/+xLiiK2nw/htghcjc52fG
hWeHLSjMZBI+PcnSrcZp
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:55 2026 by rpki-client