Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142665.roa
File:                     AS142665.roa (raw, json)
Hash identifier:          5w4ATUg7r20aOXuBVJYRJEVmU+e/S9R+zzNibGxXCko=
Subject key identifier:   CC:3D:7E:8E:D3:88:EF:1D:03:AA:3C:BC:17:BA:D2:1F:58:EF:9A:9C
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0BECA785A0FA1DA0EB0645015C0FECB89830CEED
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142665.roa
Signing time:             Mon 25 May 2026 01:20:04 +0000
ROA not before:           Mon 25 May 2026 01:15:04 +0000
ROA not after:            Mon 24 May 2027 01:20:04 +0000
asID:                     142665
IP address blocks:        240a:a00f::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ec:a7:85:a0:fa:1d:a0:eb:06:45:01:5c:0f:ec:b8:98:30:ce:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:04 2026 GMT
            Not After : May 24 01:20:04 2027 GMT
        Subject: CN=CC3D7E8ED388EF1D03AA3CBC17BAD21F58EF9A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:81:39:75:c2:34:ff:5a:a3:e4:f5:0a:24:66:
                    9b:b5:4d:30:4b:0e:4e:37:4e:41:0c:69:ea:30:8c:
                    d9:fb:06:56:73:23:4e:01:27:d9:d8:66:84:69:63:
                    f7:e6:a1:de:91:f4:58:bc:e6:57:07:40:08:d6:63:
                    97:66:c8:95:bb:7d:d4:df:ef:e3:29:77:db:ed:d9:
                    28:24:e9:d6:fc:fa:7a:dd:0e:8a:80:9b:a3:1a:5d:
                    0d:c3:fa:4d:35:72:c2:b5:c4:b0:a8:83:ac:bb:a3:
                    fe:9c:fc:84:75:02:af:63:69:6e:e4:ba:33:b6:24:
                    af:2e:13:6c:79:a8:eb:4a:07:91:43:9b:da:f9:eb:
                    ff:66:bf:f8:9f:bb:24:c9:d2:95:77:cd:ca:88:51:
                    04:97:97:85:e6:23:b3:2a:c3:cf:36:1e:33:4d:8b:
                    5f:f3:1a:6d:29:37:da:b8:96:35:b5:2a:67:35:33:
                    da:ae:e4:3b:04:7f:f8:90:1e:0d:9c:92:b3:35:19:
                    2a:99:15:ab:d5:b6:84:f3:9c:6f:ea:5d:4f:7b:5e:
                    67:3b:51:fa:22:02:fd:77:76:02:e1:cd:95:d5:68:
                    f9:34:c2:be:ed:dc:e2:6a:73:b3:cf:f0:7c:7f:20:
                    ad:ee:12:89:75:df:b3:f2:f0:c6:11:7a:06:75:0a:
                    21:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3D:7E:8E:D3:88:EF:1D:03:AA:3C:BC:17:BA:D2:1F:58:EF:9A:9C
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142665.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a00f::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:a6:22:36:29:5b:a7:51:71:63:62:a4:1b:91:52:9c:2b:9c:
         85:c7:5e:e3:6a:a1:70:20:9b:05:1c:9a:b8:3f:5f:6d:f3:0f:
         0c:32:43:8d:c6:6c:49:39:5d:97:aa:10:25:76:4b:e9:72:67:
         fc:18:f5:64:c8:7f:04:6e:ed:c7:23:79:cd:cc:c7:78:70:b7:
         73:b3:12:01:6a:29:29:35:e6:2e:a4:7e:ff:6c:a3:83:98:ba:
         7a:fb:9a:6a:d9:33:fb:0c:f8:f5:5e:03:0b:31:50:42:41:33:
         c0:5f:9a:d4:a3:90:fe:ce:71:61:3d:32:9c:c4:d7:ff:33:b6:
         f4:e5:4d:40:f1:6c:41:f4:da:7f:06:29:72:cd:0e:e0:f9:8e:
         5d:e6:f9:84:e1:2f:a7:7b:65:80:95:1d:28:f7:a5:18:de:df:
         e1:d0:21:e0:fb:1c:fa:90:c8:d1:83:71:c3:9f:95:8f:3d:58:
         5a:e1:ae:1b:0f:c1:41:65:c8:6a:5d:27:6d:c8:7f:e0:1f:52:
         e0:17:2e:bb:77:4a:a7:a6:aa:39:dc:c5:d9:94:7d:b9:4c:02:
         b7:6a:e5:3b:fc:d8:07:b6:95:5a:f4:39:2c:85:22:bb:24:6a:
         69:8d:d1:2f:86:82:da:55:7e:a6:53:cb:a1:f5:65:d7:5b:45:
         d5:c4:f8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:11 2026 by rpki-client