Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142675.roa
File:                     AS142675.roa (raw, json)
Hash identifier:          p+bf2fM9iPQAS4Vp7N/GdQ9ycQnxnPv3daN11IxNZsw=
Subject key identifier:   7D:38:1E:AC:06:C4:B7:BA:0F:46:54:EE:81:13:6F:62:19:29:7B:9F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       16201E9BECB20330EB1D16EB008E6ED9D0128805
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142675.roa
Signing time:             Fri 22 May 2026 04:26:56 +0000
ROA not before:           Fri 22 May 2026 04:21:56 +0000
ROA not after:            Fri 21 May 2027 04:26:56 +0000
asID:                     142675
IP address blocks:        240a:a019::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:20:1e:9b:ec:b2:03:30:eb:1d:16:eb:00:8e:6e:d9:d0:12:88:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:56 2026 GMT
            Not After : May 21 04:26:56 2027 GMT
        Subject: CN=7D381EAC06C4B7BA0F4654EE81136F6219297B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:17:8d:aa:cd:1c:b6:bd:ff:d7:1f:6c:e8:66:
                    07:05:c9:85:5a:4f:69:89:a9:55:fb:40:59:06:dd:
                    38:c6:2d:50:6b:b7:74:4e:56:ab:1b:bc:6f:72:30:
                    14:04:0f:95:4d:88:14:22:27:5a:c9:d8:e9:e6:b4:
                    ae:44:5b:66:7b:9d:a3:a4:93:16:e2:89:f5:f0:ea:
                    99:6f:2f:59:f5:96:1e:bd:20:bb:f7:49:3a:d8:34:
                    cd:13:84:f2:da:51:dc:17:5a:f5:8a:25:de:76:37:
                    8a:a0:ed:d2:5a:52:ce:0f:ee:20:c5:3a:ab:2c:f2:
                    6d:f3:b5:93:c4:0a:c1:51:7c:fd:90:4c:5e:a9:0b:
                    85:f8:53:80:da:37:06:6e:14:4d:b4:9f:48:70:40:
                    fb:88:95:61:c0:29:f9:c3:9e:eb:33:ac:42:b9:e5:
                    14:61:ad:81:7d:d4:2f:bf:64:df:e9:1f:dd:52:04:
                    0f:02:4b:82:13:c9:78:5b:ea:11:9a:57:38:b7:c9:
                    9b:dc:15:4d:fc:96:9f:0b:5b:f1:9a:57:20:fd:03:
                    1a:1d:31:39:cc:8d:08:4b:f8:b3:9e:d6:bd:a5:1f:
                    33:ad:ed:76:8b:22:3c:e9:d0:10:63:e3:2c:2a:58:
                    55:dc:07:c4:31:09:9f:0f:d4:98:f8:63:ce:af:07:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:38:1E:AC:06:C4:B7:BA:0F:46:54:EE:81:13:6F:62:19:29:7B:9F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142675.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a019::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:e4:36:63:60:7e:a7:9f:0c:fb:22:2a:b2:9c:bb:78:a0:6f:
         2c:89:a8:1d:e3:b6:c5:89:b8:b5:fe:d3:4a:0e:a2:e2:26:f0:
         b6:63:aa:7d:af:e0:bc:43:ec:22:d0:0f:fb:5c:11:1c:f0:2b:
         60:e6:da:d3:dc:8c:85:a7:c4:c9:d7:78:3d:50:8b:df:95:a9:
         c5:ea:ff:17:72:e7:ca:1e:f3:8c:1f:47:e6:eb:c9:6c:a5:b0:
         7e:7f:5d:a1:df:f2:56:9c:49:6a:b8:3c:f4:6e:14:53:72:66:
         16:d0:4e:a0:ed:8c:40:b9:a3:45:a1:03:56:95:5f:9f:2c:e2:
         cd:98:f8:3c:3d:5c:da:99:03:81:76:6f:5e:91:b9:36:e8:92:
         96:b5:00:11:c2:7a:3d:45:0c:97:5d:1c:6f:02:02:da:80:d5:
         40:7d:6a:b2:d0:78:d1:e9:c6:7e:98:0d:84:a1:33:32:bd:83:
         d9:e8:bd:cf:eb:aa:42:86:ca:4c:63:7d:78:d2:bb:13:c6:cf:
         12:60:08:e9:68:d6:43:df:07:21:f2:da:c1:7d:75:b2:91:20:
         8c:e3:f3:ed:31:3c:f3:cf:c9:f8:56:92:00:fc:75:fe:b9:70:
         fb:a3:9e:2f:c9:04:e4:b3:74:67:20:e1:97:dd:7b:ca:59:9d:
         f4:0d:5b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:56 2026 by rpki-client