Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142766.roa
File:                     AS142766.roa (raw, json)
Hash identifier:          GjyzTssZVganL2zQAsB2fG1Z4zDgj84WbsNcqpBESVA=
Subject key identifier:   AC:C3:B0:33:91:5C:1E:23:82:73:4A:92:F8:71:F3:B3:22:06:E5:80
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0B1110CF9BC37D69438EE9FAEB77C39C7DC37D2E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142766.roa
Signing time:             Fri 22 May 2026 04:26:58 +0000
ROA not before:           Fri 22 May 2026 04:21:58 +0000
ROA not after:            Fri 21 May 2027 04:26:58 +0000
asID:                     142766
IP address blocks:        240a:a074::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:11:10:cf:9b:c3:7d:69:43:8e:e9:fa:eb:77:c3:9c:7d:c3:7d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 04:21:58 2026 GMT
            Not After : May 21 04:26:58 2027 GMT
        Subject: CN=ACC3B033915C1E2382734A92F871F3B32206E580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:52:57:21:c8:42:c8:7f:85:a1:bb:25:7d:
                    f2:6f:1b:a2:63:f4:fc:d1:04:57:69:3e:d4:3e:b7:
                    81:66:18:7b:22:d2:da:3c:1c:99:3b:20:8c:1c:3f:
                    9f:b1:83:bf:09:70:9f:e8:96:59:32:78:7b:60:b9:
                    73:d8:9f:db:0a:d2:08:54:34:ef:b0:0d:a7:12:21:
                    9e:6f:7b:50:75:8e:e9:e9:b7:c2:02:95:7a:9b:5e:
                    1f:96:a8:8d:f1:8b:9c:e7:0c:7a:28:35:1c:16:40:
                    7e:47:27:d3:cb:da:df:db:05:cf:76:6f:3a:54:68:
                    3e:3d:76:f9:31:5b:48:34:65:95:91:ad:1a:04:25:
                    eb:69:17:cf:df:37:52:d2:7e:60:e6:ca:6b:16:2e:
                    af:be:02:d1:80:1f:31:36:bf:8e:df:54:f9:de:c1:
                    ea:af:0f:dc:b8:25:7e:51:34:7a:8f:1e:e5:ef:c8:
                    91:cf:00:01:3b:71:d2:c0:b8:3b:e6:59:e7:0d:d0:
                    87:de:21:39:46:a2:a9:45:c1:cf:93:c4:23:c2:b8:
                    1e:a1:aa:e2:dc:a9:36:47:23:47:d7:38:8e:0e:9f:
                    59:93:4f:c6:d3:35:19:47:10:de:53:22:dd:51:e4:
                    e6:2a:3a:1c:3a:5a:8f:99:ea:ec:d3:a4:80:f8:3f:
                    6b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C3:B0:33:91:5C:1E:23:82:73:4A:92:F8:71:F3:B3:22:06:E5:80
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142766.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a074::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:67:b6:87:a9:83:8d:37:c0:82:df:03:33:20:d1:26:da:a5:
         8c:1e:6d:78:0a:eb:03:85:42:9c:60:f1:a9:06:fc:f0:1d:d9:
         42:a3:e3:df:1f:24:a2:ce:fd:ce:dc:7f:f5:82:b3:91:b8:91:
         19:6b:bd:df:0c:68:6a:4f:83:01:81:71:32:19:b3:0b:22:56:
         a6:35:07:02:d0:8b:89:eb:5b:cd:d0:80:14:3a:c6:e4:0a:62:
         ad:83:4f:28:da:59:a0:c2:30:cf:34:2c:1a:49:19:f3:cc:c9:
         f6:c1:f3:7d:cc:59:8d:95:73:0c:bc:39:e9:b8:fc:b9:30:59:
         ec:ac:8c:a1:3c:cd:30:8e:e9:8c:ba:6f:93:e7:fb:42:14:b9:
         85:c0:f9:62:c6:4e:4e:08:86:a6:c0:2c:95:c4:77:26:b8:f7:
         89:28:49:b2:89:5e:a7:b0:fa:c5:1d:8a:5e:b2:38:7d:68:b1:
         68:f6:68:88:3b:82:a6:22:e1:5a:a0:a2:ab:1e:5a:f3:c5:db:
         c8:46:02:33:72:eb:af:ad:94:14:96:85:cb:cd:43:75:18:e4:
         b2:3e:b2:09:d9:7b:aa:3d:dc:2f:7b:c4:08:62:02:98:91:f2:
         7e:04:67:f7:75:f0:19:66:6d:3d:54:3d:f0:14:44:60:dd:3d:
         6d:bb:fd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:02 2026 by rpki-client