Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142763.roa
File:                     AS142763.roa (raw, json)
Hash identifier:          cKma9zL6P6CA2iD0oa9EhTYMH5zv3cq0DFeXPIiIkB4=
Subject key identifier:   49:F3:09:30:55:A2:AD:25:4C:22:3E:07:1F:8E:47:BE:85:5E:C4:E3
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       6A94A1CDB14BB99EFC766CD539430A64B04E0A99
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142763.roa
Signing time:             Tue 26 May 2026 02:34:59 +0000
ROA not before:           Tue 26 May 2026 02:29:59 +0000
ROA not after:            Tue 25 May 2027 02:34:59 +0000
asID:                     142763
IP address blocks:        240a:a071::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:94:a1:cd:b1:4b:b9:9e:fc:76:6c:d5:39:43:0a:64:b0:4e:0a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 02:29:59 2026 GMT
            Not After : May 25 02:34:59 2027 GMT
        Subject: CN=49F3093055A2AD254C223E071F8E47BE855EC4E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:03:06:c6:72:7f:e4:47:7b:86:cc:95:8f:47:
                    6f:75:18:b7:8c:aa:6d:a1:91:31:5f:71:c6:d9:c2:
                    f3:ab:64:8b:f2:4a:5d:ee:98:cb:2b:5a:e2:0f:62:
                    87:12:71:65:b1:dd:32:a8:4a:82:bd:43:41:30:dd:
                    a2:e6:2f:ea:e6:20:6d:e0:16:83:c1:2d:0a:78:5c:
                    9b:f7:14:df:cf:9f:78:78:b3:0f:3a:2c:55:ab:b1:
                    65:68:0c:1e:eb:45:a5:8d:7e:ca:39:81:a3:39:bb:
                    bb:c8:f7:5e:49:81:6b:02:06:b5:20:7f:37:56:2a:
                    89:d8:21:c8:16:fa:e6:b4:12:34:9c:5e:71:ac:a0:
                    e6:f1:df:96:32:7d:2d:94:b7:22:7f:75:64:db:cd:
                    01:fa:34:40:0a:8d:84:71:af:37:6a:9d:29:ba:22:
                    77:c5:b6:7c:50:c5:22:37:f7:be:a9:1c:8a:8b:b9:
                    a3:44:8e:9a:63:3f:41:a2:08:a1:5e:aa:f8:cb:4d:
                    9c:06:4f:98:62:68:7a:14:fa:01:fe:5b:7e:a8:cb:
                    54:6b:be:43:f5:14:12:a0:df:db:5f:fb:f1:7b:62:
                    3b:68:10:f0:83:a4:8a:e8:50:64:f5:cb:54:78:81:
                    62:0a:2f:b6:80:b3:4e:f2:fe:d0:e3:84:12:31:2c:
                    fe:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F3:09:30:55:A2:AD:25:4C:22:3E:07:1F:8E:47:BE:85:5E:C4:E3
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142763.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a071::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:e3:b6:e9:a2:8b:47:a5:33:3a:58:ad:ba:7c:6d:fd:c5:73:
         1c:a0:54:44:97:16:a0:e6:a3:1b:9c:ac:35:3e:2b:55:04:96:
         d2:e8:ba:93:ff:dc:7d:a3:27:50:1c:ab:9f:77:c1:d0:94:a5:
         75:10:5d:bb:fc:70:1d:94:4f:0e:02:e9:05:92:82:69:78:c5:
         ad:db:75:9c:52:b6:42:d6:80:46:96:47:f3:3f:d7:ea:c5:59:
         cc:e4:cd:3a:ba:b8:ce:d8:32:68:22:98:bb:90:a3:f7:a7:5f:
         ca:46:b6:c3:0d:9b:ef:40:77:07:f1:27:cd:b8:e8:18:b3:c3:
         ef:5c:fd:cc:0e:8c:29:dc:e3:00:da:9f:ee:7e:7c:8b:ee:31:
         a4:aa:07:15:d2:d9:e5:db:19:52:b7:40:79:e8:39:c8:0b:84:
         a4:72:7b:12:a8:98:4a:4f:f8:38:78:4e:c8:ae:dc:7e:13:12:
         3a:ae:14:df:03:4f:96:a6:c0:cc:ff:71:5c:7a:4e:76:67:aa:
         d3:b9:f0:ea:6e:87:8d:04:4b:49:34:e7:07:60:ba:b6:7d:cf:
         41:b2:7c:33:0b:5a:1f:1f:2d:d1:ba:aa:f0:0e:ba:03:d6:4a:
         23:12:6e:04:0f:78:b8:49:d1:78:e7:7d:bb:9a:0d:82:2f:7f:
         e2:31:26:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:55 2026 by rpki-client