Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142093.roa
File:                     AS142093.roa (raw, json)
Hash identifier:          DKaRGHxqvViTIncZCDrcUrc2aPRXLkvp0TgthsmYfuM=
Subject key identifier:   48:99:FC:C3:73:94:07:FA:14:80:45:4E:5D:14:E4:38:FC:0C:AD:E5
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3B21374A3227CE084E6F74F6FFE5762FE6ECE43E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142093.roa
Signing time:             Mon 25 May 2026 01:51:20 +0000
ROA not before:           Mon 25 May 2026 01:46:20 +0000
ROA not after:            Mon 24 May 2027 01:51:20 +0000
asID:                     142093
IP address blocks:        2001:253:227::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:21:37:4a:32:27:ce:08:4e:6f:74:f6:ff:e5:76:2f:e6:ec:e4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:46:20 2026 GMT
            Not After : May 24 01:51:20 2027 GMT
        Subject: CN=4899FCC3739407FA1480454E5D14E438FC0CADE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7c:89:c3:dc:71:d4:5f:a1:80:5a:76:02:7e:
                    b7:b0:28:a9:71:a0:55:41:d3:fc:ba:ff:a9:22:40:
                    8e:3d:fb:b8:c1:e4:9c:32:bf:21:2d:93:2b:b6:77:
                    43:ab:30:67:93:a4:67:c4:b0:b6:d0:92:4b:5a:44:
                    09:94:f3:e4:7f:0d:b0:47:9a:8f:24:0f:bd:f9:94:
                    c1:f3:d8:ed:f5:ea:79:ac:25:d2:de:39:7d:c9:d2:
                    b6:50:b5:fe:9f:b2:f6:30:dd:d4:68:13:59:e3:ae:
                    40:c1:ed:c9:1f:4f:16:d4:ff:f1:68:a8:10:6f:6a:
                    67:6f:a0:13:67:54:45:dd:14:5f:d0:04:4c:bd:02:
                    d7:71:bf:9f:2c:d1:db:1b:3d:e3:56:c8:36:26:4e:
                    50:9f:20:61:ab:0c:94:84:7e:44:ca:a4:bd:f7:59:
                    61:d0:49:18:90:86:ca:94:21:fa:73:5f:4a:6f:ce:
                    45:53:d8:24:01:3f:d3:06:da:82:55:3c:81:3a:04:
                    59:05:d4:36:e3:db:6b:89:e0:da:4e:f8:e1:b3:e0:
                    25:38:8c:a6:e7:af:1e:dc:94:3a:3d:6a:6d:be:e4:
                    b7:ac:2e:e9:38:05:26:2a:1d:65:68:86:e9:2c:d5:
                    27:1b:f4:96:46:c9:7e:af:80:eb:9c:2f:5a:07:14:
                    ce:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:99:FC:C3:73:94:07:FA:14:80:45:4E:5D:14:E4:38:FC:0C:AD:E5
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142093.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:253:227::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:dc:78:77:5c:bd:8c:e1:45:7f:1e:1b:1f:39:ec:11:da:77:
         a5:a6:19:aa:de:cf:44:c6:32:57:8d:37:92:90:9c:d9:38:01:
         1c:50:fa:8f:1c:52:15:46:38:66:9a:58:f7:4b:5b:a6:c9:0e:
         5b:63:55:01:33:08:45:43:50:99:c1:b5:12:2f:2a:cc:3a:e9:
         7e:40:4b:9d:d1:2a:c4:2e:00:23:16:3f:fd:7c:2b:59:04:23:
         80:e7:78:4e:98:79:30:2e:29:0b:59:73:52:61:e1:7a:a3:c5:
         9c:3b:fc:d9:5e:dc:fd:66:21:d4:c9:a2:4e:10:52:56:ef:c4:
         5b:14:8c:0a:93:ca:59:cc:61:7e:fb:6f:ea:e6:06:52:b7:dd:
         06:21:c3:df:4d:7a:d5:69:87:bb:1e:bf:e3:6c:d6:88:2e:b8:
         8c:d6:8f:0a:67:0a:6c:3f:ab:aa:b2:2a:69:2f:df:52:ae:fe:
         6b:c4:46:4d:7b:47:fe:f9:e7:22:c1:36:c5:46:5c:e0:66:98:
         06:cd:64:0d:3f:37:57:b8:cb:ac:6e:08:9c:eb:62:86:ba:11:
         b5:e7:8e:7c:35:f4:14:24:a3:0f:cb:76:e5:df:ad:3d:b5:20:
         b0:15:31:78:b0:0a:24:9c:69:21:4d:de:ae:86:bc:af:d6:a2:
         49:17:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:16 2026 by rpki-client