Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142735.roa
File:                     AS142735.roa (raw, json)
Hash identifier:          RqNX5y9md8mEzUZvKFMQrgJ/0HAxtsh8wDNqjosZ3Wg=
Subject key identifier:   25:20:8B:26:DC:50:4E:81:F1:6A:23:A1:73:D4:28:B8:8B:EC:D8:9D
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       1B75BCCEDE2B411C48529284D352CBCF117DAD72
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142735.roa
Signing time:             Fri 22 May 2026 07:32:10 +0000
ROA not before:           Fri 22 May 2026 07:27:10 +0000
ROA not after:            Fri 21 May 2027 07:32:10 +0000
asID:                     142735
IP address blocks:        240a:a055::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:75:bc:ce:de:2b:41:1c:48:52:92:84:d3:52:cb:cf:11:7d:ad:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 07:27:10 2026 GMT
            Not After : May 21 07:32:10 2027 GMT
        Subject: CN=25208B26DC504E81F16A23A173D428B88BECD89D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:12:e2:a0:18:49:28:6b:f2:70:f5:9c:02:
                    69:c7:d6:22:38:31:fb:fd:db:4e:c2:9c:f7:37:e5:
                    73:8c:ad:6d:d2:f9:0d:f5:ac:c7:d6:d2:0a:fe:df:
                    38:1a:c4:f3:8f:82:eb:da:a5:94:45:25:7d:6a:df:
                    50:da:3f:0d:84:ea:13:3c:12:9e:6f:d4:37:e8:39:
                    e3:78:0a:9b:4c:cb:2a:39:41:97:64:73:31:fc:32:
                    15:3c:99:19:be:bf:58:fd:f0:db:3e:df:b0:42:68:
                    b1:6b:8b:a2:3e:34:ad:3d:c9:6c:6f:e3:f2:5f:2f:
                    8f:da:6f:e8:d9:8f:31:37:b7:aa:38:c9:dc:7e:42:
                    d7:e2:21:12:f1:40:6c:2b:17:a5:1a:57:c6:26:71:
                    b3:23:e8:01:c3:8a:23:20:ac:cb:68:4a:16:2c:1f:
                    da:99:1a:46:35:55:b5:fa:a4:9c:5f:d5:a9:71:0c:
                    10:a1:71:6b:9c:2d:e5:bc:dc:f7:25:65:35:26:50:
                    b8:76:02:65:22:b4:c4:36:86:f5:58:93:8b:35:e5:
                    e5:30:32:ee:df:af:31:e2:a4:01:db:95:f3:cf:a3:
                    4c:de:7b:b5:50:52:08:65:cc:67:e8:94:e9:4c:ab:
                    ff:48:19:42:24:8a:79:3e:3b:ec:47:f4:9d:0e:e7:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:20:8B:26:DC:50:4E:81:F1:6A:23:A1:73:D4:28:B8:8B:EC:D8:9D
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a055::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:51:c2:a9:9c:1c:8b:28:29:00:e5:05:5c:55:30:b2:f3:54:
         28:48:8e:4b:ec:95:5a:22:e2:dd:95:9f:93:c0:43:80:fd:34:
         3c:e5:b0:e6:21:a4:25:77:ad:d4:fa:3b:19:c6:1b:5b:4a:8e:
         d3:70:62:42:63:64:1a:8a:8e:3b:fe:30:d7:ac:82:50:69:ea:
         c9:5d:e2:b6:86:cf:f7:d1:4e:b3:2d:b7:0c:46:55:34:23:9f:
         75:81:65:e3:c3:1a:ee:17:63:d6:7c:1c:90:dd:08:4b:92:33:
         47:0a:77:2e:1e:71:46:39:3e:54:cb:56:91:5d:4e:3d:55:47:
         4b:9e:fe:97:57:bd:d6:b2:45:a8:a8:fa:6b:c6:1e:49:58:8c:
         fd:4e:86:19:bb:36:3f:9e:69:9e:25:0a:9f:e1:89:42:4d:1f:
         d8:cc:d8:f2:fe:ee:d1:62:d7:ed:c0:71:5e:68:57:20:74:ef:
         66:39:9d:34:1a:6c:5b:6e:62:27:15:9d:6c:fd:f2:4e:84:45:
         be:61:14:d0:41:84:15:2c:09:b9:c4:7c:b1:b4:c3:74:54:67:
         aa:cf:a5:1f:84:5d:76:2b:e5:45:f3:e7:b4:6c:57:fc:33:39:
         ee:29:22:dd:82:5a:9f:23:1f:37:08:d8:b2:9f:91:22:1f:65:
         13:d4:94:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:01 2026 by rpki-client