Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142661.roa
File:                     AS142661.roa (raw, json)
Hash identifier:          TDDsYp96QG6W1n0Cu67UlAhP+iMF5uhsmhQ6Lm+GLfM=
Subject key identifier:   BC:CE:02:45:CA:69:61:40:62:DD:91:76:A7:33:1C:BC:71:98:82:C2
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4227C98B13DF752F217CE8B2B4FED7469658066F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142661.roa
Signing time:             Mon 25 May 2026 06:48:50 +0000
ROA not before:           Mon 25 May 2026 06:43:50 +0000
ROA not after:            Mon 24 May 2027 06:48:50 +0000
asID:                     142661
IP address blocks:        240a:a00b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:27:c9:8b:13:df:75:2f:21:7c:e8:b2:b4:fe:d7:46:96:58:06:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 06:43:50 2026 GMT
            Not After : May 24 06:48:50 2027 GMT
        Subject: CN=BCCE0245CA69614062DD9176A7331CBC719882C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ae:2b:8b:83:4c:ba:8f:f5:ae:0d:ba:c2:ae:
                    8f:03:af:50:c4:dc:ce:fd:fc:7c:f9:2a:34:d5:c1:
                    50:0d:cd:f7:19:05:5c:c3:50:35:f3:f7:d0:99:ad:
                    19:a6:fe:13:93:24:90:87:e0:06:13:05:eb:a1:34:
                    7f:78:1a:bc:23:d6:26:80:94:82:f2:d2:19:50:f9:
                    f0:46:e2:22:00:eb:93:09:e2:16:b1:19:f5:44:1b:
                    50:f2:b9:6f:30:83:c3:88:f6:e0:b2:41:86:bf:78:
                    d9:08:b4:6a:0a:17:77:d6:4f:8d:40:40:ec:d3:55:
                    9c:61:cc:eb:00:24:4d:fb:a2:ed:89:f8:54:9f:87:
                    20:2f:da:75:c8:78:48:93:53:e5:be:7c:d7:06:29:
                    23:ea:ef:c0:98:c1:ea:1d:53:60:5f:83:64:ee:39:
                    3c:34:ca:b3:3e:c9:c0:92:5e:28:7e:e7:69:30:2f:
                    40:6b:49:12:23:eb:a5:2b:10:d5:b0:65:3b:ed:7a:
                    13:42:59:59:af:ec:c0:08:0f:f7:6b:de:d0:56:9b:
                    c5:ac:f0:b5:0c:ad:5b:1c:77:4d:87:51:b1:9e:2d:
                    99:45:1d:0d:79:15:11:eb:b1:c1:9d:ee:88:10:24:
                    f6:3d:ed:ea:c3:bf:b7:fe:56:9d:9a:72:82:f1:a5:
                    63:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CE:02:45:CA:69:61:40:62:DD:91:76:A7:33:1C:BC:71:98:82:C2
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142661.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a00b::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:7b:84:0b:6d:fc:72:76:ae:bb:5c:1d:4b:e2:91:b4:81:01:
         9e:92:6c:9f:97:0d:c2:2f:8e:76:67:a8:56:f2:79:6a:1b:f4:
         4a:03:79:30:87:ac:55:9a:e9:d6:81:a9:ac:c2:c8:9c:9b:10:
         d5:77:23:35:b0:93:0c:f6:37:32:9f:85:e1:af:5f:42:a7:be:
         5a:83:e4:91:24:a0:66:e9:51:06:97:a8:2b:55:2b:7c:16:09:
         e5:04:6c:6a:d1:71:d1:12:a4:68:d0:9d:e8:2d:6b:2c:e3:ea:
         67:e8:b6:6c:7d:64:15:ca:f0:26:30:5b:cd:37:0f:87:32:ad:
         3d:42:e6:7f:7f:78:ee:45:c0:36:76:5f:dd:c5:10:f2:cc:b8:
         b2:d5:be:da:a2:99:8b:1d:20:2d:c6:64:2c:8f:cd:8f:74:2b:
         c4:7e:36:ea:c2:ab:53:91:75:09:0f:92:f2:d3:0f:ec:1e:5c:
         e3:88:4b:03:ee:1c:86:4a:5d:2c:f4:78:33:af:4a:fc:15:c5:
         a7:2f:35:56:0b:86:7d:ea:c4:6e:a4:ab:07:38:ec:ed:3f:86:
         ed:f8:17:e9:90:e5:c4:88:a1:e0:4c:87:d6:eb:3e:e6:77:09:
         c7:10:4a:60:79:69:b0:5f:66:b0:24:04:1b:10:15:a5:d5:58:
         a5:2f:7b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:59 2026 by rpki-client