Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142815.roa
File:                     AS142815.roa (raw, json)
Hash identifier:          vkFssCPOxqI5+j25V2rdqpld1jtQ0ehgWNiKQYpQ6nc=
Subject key identifier:   8E:69:A2:BF:0C:FC:E4:E0:4F:F0:B7:DB:D5:A1:FE:5D:75:A3:AC:DD
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0FD942E53F93B92EC3193A61159C508FDC4113C8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142815.roa
Signing time:             Fri 22 May 2026 06:58:41 +0000
ROA not before:           Fri 22 May 2026 06:53:41 +0000
ROA not after:            Fri 21 May 2027 06:58:41 +0000
asID:                     142815
IP address blocks:        240a:a0a5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d9:42:e5:3f:93:b9:2e:c3:19:3a:61:15:9c:50:8f:dc:41:13:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:41 2026 GMT
            Not After : May 21 06:58:41 2027 GMT
        Subject: CN=8E69A2BF0CFCE4E04FF0B7DBD5A1FE5D75A3ACDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3c:d4:d9:c1:ec:98:73:0f:97:f1:53:fd:e2:
                    6c:60:f6:63:49:ed:34:05:93:66:10:9c:c3:39:79:
                    5f:62:95:bf:cb:96:4b:ba:5c:d2:26:43:98:fe:f0:
                    bf:a5:cc:b3:ae:14:a3:6f:0b:82:0c:f1:de:48:da:
                    04:31:ed:44:78:e8:5d:96:86:22:a9:0f:89:66:36:
                    0e:1e:33:6f:79:9f:64:80:51:14:82:f5:9a:2e:89:
                    b4:1c:77:2c:da:2d:de:a1:2a:9a:33:5c:3e:7a:9f:
                    29:e3:30:f7:0e:ed:5d:42:e8:5d:6f:e8:8a:05:76:
                    7a:b3:10:5b:84:7f:b6:da:bd:52:df:97:a3:a7:57:
                    55:bf:b6:33:65:81:6b:60:9f:41:15:6a:4f:8d:4b:
                    b7:9e:5c:bc:8a:b0:bb:24:a7:ed:0b:0f:d8:d1:1a:
                    18:c3:36:fb:b5:b5:49:e1:38:eb:cf:2d:a7:51:7d:
                    4b:41:23:b9:95:2b:30:30:11:7b:2d:6c:b1:86:f2:
                    82:bb:65:88:70:7d:63:f8:b4:10:42:9c:93:5f:23:
                    cc:34:d3:f6:d8:17:1b:47:31:7f:88:78:5d:7b:61:
                    85:ac:90:b4:c9:87:c8:d9:2e:47:e1:01:cd:5b:4e:
                    c1:ba:2a:44:c6:74:b0:de:bb:f0:5e:bd:01:8a:fd:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:69:A2:BF:0C:FC:E4:E0:4F:F0:B7:DB:D5:A1:FE:5D:75:A3:AC:DD
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142815.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0a5::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:c1:08:35:90:f8:3b:3a:cc:e7:64:85:cb:a1:d9:10:5b:
         a3:36:d3:2c:32:c0:4b:ba:ca:88:ae:0c:0b:92:f0:74:3b:44:
         7e:e1:cc:32:80:94:38:f8:bc:f7:b3:8c:da:af:e9:64:5f:e8:
         55:35:e5:7e:ac:9b:95:9e:e4:c3:60:9e:0b:b6:e2:61:d9:85:
         7c:00:c6:00:72:5f:64:73:24:f2:c3:09:dd:8d:1a:84:94:bc:
         06:87:09:a1:a1:18:36:98:81:c0:76:8f:a7:06:77:81:1a:cd:
         b5:a7:7a:fa:ec:a0:98:54:b4:4e:4b:d6:98:93:4e:ae:27:76:
         a3:4a:77:90:3b:9c:0c:7a:b7:b5:b6:f3:4f:d9:e2:f7:b1:54:
         b1:1d:22:e6:cf:28:69:87:e5:0a:72:53:2f:25:17:06:c3:ad:
         9c:0e:2d:9a:66:16:29:9c:10:50:7f:34:f9:b0:44:54:17:d4:
         d0:1b:f0:33:36:82:7d:6c:d8:23:52:2a:dd:40:14:3c:02:f7:
         92:57:26:9a:e3:4d:3d:e7:4d:11:1a:f4:72:d1:ab:3e:f0:6c:
         94:ab:17:c6:b2:ca:af:b3:c1:05:c4:48:95:fb:47:60:a2:a2:
         e4:db:02:65:45:ae:93:6e:56:d2:6d:4d:86:0b:e7:8e:e1:12:
         9b:22:ce:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:06 2026 by rpki-client