Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142746.roa
File:                     AS142746.roa (raw, json)
Hash identifier:          uN7S5GbQ8kia6nWpCzpCW9F8U1oPwtaYoTWODSVaEa8=
Subject key identifier:   E3:CF:DC:D2:C9:40:A4:A7:C3:CB:55:86:11:C0:FE:FB:B3:4A:26:D6
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       7E5C5EA664078BD5DBF95E2EA5357EA4C40097B2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142746.roa
Signing time:             Fri 22 May 2026 06:27:38 +0000
ROA not before:           Fri 22 May 2026 06:22:38 +0000
ROA not after:            Fri 21 May 2027 06:27:38 +0000
asID:                     142746
IP address blocks:        240a:a060::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5c:5e:a6:64:07:8b:d5:db:f9:5e:2e:a5:35:7e:a4:c4:00:97:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:38 2026 GMT
            Not After : May 21 06:27:38 2027 GMT
        Subject: CN=E3CFDCD2C940A4A7C3CB558611C0FEFBB34A26D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:cb:35:0c:2c:0b:4b:a7:0c:83:32:21:cc:
                    71:49:4e:3d:85:ea:39:d3:07:89:3b:a4:f6:d6:a9:
                    f0:a6:9c:ab:f8:3f:79:9b:df:d5:05:e2:30:40:47:
                    85:47:6e:b0:4e:61:f6:dc:a1:3c:ad:bc:01:72:de:
                    d5:3d:d8:57:75:d0:9a:09:28:d6:bf:df:6c:66:09:
                    c8:71:71:3d:45:c6:1a:f0:41:20:f3:65:c7:15:06:
                    ae:5b:33:30:2b:1c:3e:e2:86:eb:f6:02:e5:44:9d:
                    f1:bd:6c:68:b7:84:08:dd:4f:61:e6:96:4c:70:1b:
                    77:77:37:db:29:b6:29:55:fd:29:71:fb:14:7e:59:
                    be:0a:4a:27:51:1a:b1:4b:b5:36:c2:f1:3f:11:55:
                    ce:fe:b5:74:c1:da:9e:31:52:13:e8:1c:cd:e7:4a:
                    b3:5a:3c:21:3a:11:67:88:ef:8f:32:8f:2c:11:d9:
                    07:c7:05:c3:fc:2b:29:8a:13:36:93:3c:de:3a:c2:
                    fb:7b:ae:eb:a5:11:4f:f1:82:98:e4:0e:92:4e:47:
                    d8:45:95:47:ed:30:23:fd:06:b3:0c:0f:3b:d2:2a:
                    e3:3b:6d:11:31:96:75:44:96:84:81:9b:dd:7a:f7:
                    02:43:a8:9e:aa:fd:87:a1:84:48:b1:41:18:a8:14:
                    9a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CF:DC:D2:C9:40:A4:A7:C3:CB:55:86:11:C0:FE:FB:B3:4A:26:D6
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142746.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a060::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:b6:a6:aa:53:4b:6c:14:2b:97:a9:0b:9f:ca:ea:d0:05:bb:
         46:d9:b6:03:60:48:e6:af:bd:07:a9:e0:0c:d0:cc:88:da:53:
         6a:33:ae:41:52:28:e0:81:64:cc:57:64:6f:03:52:d4:9b:66:
         fc:5e:81:d7:3a:1a:74:a9:95:7b:66:6e:61:38:44:6c:55:d6:
         fb:2f:18:e5:b0:a3:58:88:95:a0:5c:8c:3a:14:e1:71:fd:82:
         12:90:5f:75:df:06:68:fc:60:6d:9c:d4:7d:ac:bd:fd:2b:ca:
         ab:2c:0d:16:c6:c3:8b:b7:b0:64:c4:57:0f:eb:e9:2f:73:7d:
         02:a2:18:04:bb:9d:65:96:34:d7:2c:ae:67:f3:b5:19:6c:ce:
         e4:7d:fd:04:27:75:d4:24:44:8a:0d:ed:3f:bf:a7:7e:b9:ed:
         f8:59:ab:2f:cd:e0:ea:bf:90:56:52:4d:ea:03:d0:e5:65:d5:
         b6:f5:66:de:37:00:2a:7e:b0:9e:d2:01:60:06:a6:dc:39:bc:
         f8:dd:1a:ff:49:c9:e9:df:12:11:d2:28:a8:9f:90:68:51:ca:
         ef:37:99:ec:90:17:58:9f:8b:5f:e0:03:ae:7d:7b:21:c8:a1:
         82:cf:0d:b1:6e:22:59:d4:44:08:a5:a0:bf:b2:45:87:e0:12:
         1b:8a:ed:0b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUflxepmQHi9Xb+V4upTV+pMQAl7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyMzhaFw0yNzA1MjEwNjI3MzhaMDMxMTAvBgNV
BAMTKEUzQ0ZEQ0QyQzk0MEE0QTdDM0NCNTU4NjExQzBGRUZCQjM0QTI2RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjB8s1DCwLS6cMgzIhzHFJTj2F
6jnTB4k7pPbWqfCmnKv4P3mb39UF4jBAR4VHbrBOYfbcoTytvAFy3tU92Fd10JoJ
KNa/32xmCchxcT1FxhrwQSDzZccVBq5bMzArHD7ihuv2AuVEnfG9bGi3hAjdT2Hm
lkxwG3d3N9sptilV/Slx+xR+Wb4KSidRGrFLtTbC8T8RVc7+tXTB2p4xUhPoHM3n
SrNaPCE6EWeI748yjywR2QfHBcP8KymKEzaTPN46wvt7ruulEU/xgpjkDpJOR9hF
lUftMCP9BrMMDzvSKuM7bRExlnVEloSBm9169wJDqJ6q/YehhEixQRioFJrNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU48/c0slApKfDy1WGEcD++7NKJtYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNzQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgYDANBgkqhkiG9w0BAQsFAAOCAQEAn7am
qlNLbBQrl6kLn8rq0AW7Rtm2A2BI5q+9B6ngDNDMiNpTajOuQVIo4IFkzFdkbwNS
1Jtm/F6B1zoadKmVe2ZuYThEbFXW+y8Y5bCjWIiVoFyMOhThcf2CEpBfdd8GaPxg
bZzUfay9/SvKqywNFsbDi7ewZMRXD+vpL3N9AqIYBLudZZY01yyuZ/O1GWzO5H39
BCd11CREig3tP7+nfrnt+FmrL83g6r+QVlJN6gPQ5WXVtvVm3jcAKn6wntIBYAam
3Dm8+N0a/0nJ6d8SEdIoqJ+QaFHK7zeZ7JAXWJ+LX+ADrn17Icihgs8NsW4iWdRE
CKWgv7JFh+ASG4rtCw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:56 2026 by rpki-client