Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142096.roa
File:                     AS142096.roa (raw, json)
Hash identifier:          AyimH3tANXUZ+1SMwD0+trFBstmoueII9P+p1YubjNE=
Subject key identifier:   14:0F:EC:45:A2:C3:E1:7C:37:54:04:F0:CD:F9:83:2A:6D:7C:D8:44
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       05C0404F9E396762E26BE33233EB0385C39C7042
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142096.roa
Signing time:             Fri 22 May 2026 07:41:11 +0000
ROA not before:           Fri 22 May 2026 07:36:11 +0000
ROA not after:            Fri 21 May 2027 07:41:11 +0000
asID:                     142096
IP address blocks:        2001:253:230::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c0:40:4f:9e:39:67:62:e2:6b:e3:32:33:eb:03:85:c3:9c:70:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:36:11 2026 GMT
            Not After : May 21 07:41:11 2027 GMT
        Subject: CN=140FEC45A2C3E17C375404F0CDF9832A6D7CD844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:1c:bd:ac:c1:3e:15:e6:c6:08:65:d2:7d:
                    f4:e8:72:82:4b:e0:42:81:46:7a:3b:2c:96:d2:18:
                    16:c5:c2:61:93:66:85:50:c7:18:8c:6b:00:d5:c4:
                    c7:1f:1c:9d:06:ad:48:97:d3:eb:5b:da:04:ee:b0:
                    a0:b8:41:0e:81:95:88:22:78:ac:98:34:7a:99:fc:
                    e1:cc:f7:30:d5:4b:8e:3b:8d:fb:6c:9c:3c:36:51:
                    bd:db:37:bc:41:0c:fe:ef:d8:b1:a2:6f:79:12:aa:
                    36:b3:8f:e0:39:69:3b:bd:07:8e:59:e6:6a:07:44:
                    2f:29:dc:3e:fd:5b:df:45:a2:53:24:da:b3:7e:32:
                    c2:9e:86:cc:a9:39:c7:f8:88:b5:a8:c5:53:23:2c:
                    e5:3e:42:10:f5:f2:91:9c:6e:31:7b:1a:35:df:cd:
                    19:53:56:95:b5:39:1c:37:a6:0a:4c:4b:e6:5f:26:
                    26:65:1e:bb:db:74:d9:b8:f0:8b:5a:8f:1d:73:b3:
                    d3:e4:e7:18:cb:bc:d1:7f:5a:b5:54:13:48:70:0d:
                    de:5f:e1:c7:ca:69:26:3b:00:66:21:fb:14:fe:fc:
                    86:ad:27:be:14:31:04:fc:09:c2:5a:8e:17:27:d8:
                    e3:c5:cb:69:11:37:e0:a0:8e:33:61:db:08:cf:7e:
                    ce:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0F:EC:45:A2:C3:E1:7C:37:54:04:F0:CD:F9:83:2A:6D:7C:D8:44
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142096.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:253:230::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:30:cb:5b:3b:dd:98:78:77:c1:03:03:cc:2a:04:5a:e6:49:
         df:53:8f:35:90:89:07:e6:c6:a3:52:38:99:79:57:c0:a6:41:
         20:da:65:a5:b2:af:03:66:6f:05:32:eb:a6:f6:aa:f0:07:74:
         f0:38:5c:4f:53:83:9f:8b:ca:18:2d:3d:aa:b4:e3:c9:82:33:
         e4:38:f3:d3:cb:27:d2:78:89:5a:4b:cf:30:e4:25:8a:a7:28:
         9b:65:df:e7:26:47:c1:89:c9:00:09:e1:06:28:18:fb:86:44:
         90:01:30:84:af:30:12:bd:13:f1:93:8d:bc:65:a6:91:70:62:
         3e:4f:90:b5:15:46:4e:f4:ac:42:50:37:29:6d:82:60:fb:6f:
         c4:d9:d8:40:c7:6e:2e:33:4f:f7:6d:a5:a2:e3:cc:cc:d3:c5:
         ea:ad:3f:db:a0:a1:95:f2:7a:5f:32:b8:2a:b8:25:45:c7:86:
         14:02:07:20:56:d6:db:75:2d:f6:75:42:8b:c6:4e:f9:09:fb:
         49:86:c6:4a:11:7c:0f:be:24:64:19:16:20:4b:27:6e:37:3d:
         f0:07:d1:c0:a0:9e:b3:3d:07:0d:a8:19:1f:f5:07:d4:0a:08:
         8f:98:16:65:7d:a1:25:4e:db:34:d0:0b:4e:f0:42:2d:bc:c5:
         a9:ab:1e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:50 2026 by rpki-client