Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142819.roa
File:                     AS142819.roa (raw, json)
Hash identifier:          Do79oHTMUSSq337N6U3MVfPJDsEGdcE+nz1xtkLMdK4=
Subject key identifier:   2F:17:72:27:74:86:46:40:16:55:A7:C2:5E:05:EB:82:03:2F:A2:D1
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       110B2A6708AEFF15430B5E358D6EE4EFD6ADFF66
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142819.roa
Signing time:             Fri 22 May 2026 01:50:21 +0000
ROA not before:           Fri 22 May 2026 01:45:21 +0000
ROA not after:            Fri 21 May 2027 01:50:21 +0000
asID:                     142819
IP address blocks:        240a:a0a9::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0b:2a:67:08:ae:ff:15:43:0b:5e:35:8d:6e:e4:ef:d6:ad:ff:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 01:45:21 2026 GMT
            Not After : May 21 01:50:21 2027 GMT
        Subject: CN=2F177227748646401655A7C25E05EB82032FA2D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:4b:58:ef:52:cf:81:5e:dd:17:ca:ba:3f:
                    8f:bd:bb:02:63:99:c3:18:70:82:f5:83:13:27:05:
                    89:32:fc:38:99:e3:5b:88:76:05:45:34:6c:e5:90:
                    db:22:e1:da:46:dc:a2:a0:4c:b0:33:a6:3a:0b:33:
                    49:b3:51:10:22:d0:b6:eb:c9:d6:32:b6:44:0d:17:
                    2e:f8:e7:1c:33:e3:28:d9:97:9b:f1:5c:30:51:0c:
                    3e:78:19:d4:01:ca:61:7e:26:63:de:97:6b:78:f5:
                    ed:78:f8:f1:ba:0c:08:86:42:d0:cb:0a:1e:26:42:
                    bb:51:64:96:c8:91:5b:81:be:ad:57:b0:78:a0:ae:
                    7d:45:34:c0:e2:4f:30:dc:f4:f7:8e:f4:0c:45:67:
                    bc:f6:ca:86:c2:7d:5a:52:e2:81:00:6e:88:8d:06:
                    51:71:c4:5f:73:32:11:89:9e:35:d5:1f:5a:3b:97:
                    70:8b:49:28:f8:59:12:9f:f2:10:4a:72:aa:3f:df:
                    38:ad:f7:65:af:a1:68:85:5e:63:f7:f9:9d:dd:39:
                    89:43:5f:8e:8d:dd:8d:18:ba:fc:8e:4d:dd:16:b8:
                    e8:49:f3:30:e2:61:7a:c9:7c:31:ee:fe:80:ae:96:
                    2f:78:5c:31:5f:46:d6:81:fb:d9:77:49:f7:ed:3f:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:17:72:27:74:86:46:40:16:55:A7:C2:5E:05:EB:82:03:2F:A2:D1
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142819.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0a9::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:ac:a5:25:34:da:27:b5:45:8e:70:32:c1:3e:97:40:1b:b1:
         73:00:73:89:fb:1d:c5:45:7f:83:e1:3c:42:f0:e5:0f:5e:aa:
         17:e7:1c:04:ec:a1:05:2a:c5:a9:fc:0c:0d:2b:ac:4e:ef:64:
         f7:50:da:b9:0c:cb:97:e8:5c:e7:0a:b7:cf:eb:f3:99:d7:7d:
         73:75:b7:38:e5:73:69:39:79:87:2a:fc:8a:5c:17:eb:85:f6:
         02:c3:39:f1:ff:99:69:1e:63:7b:eb:c4:ac:9c:91:18:fd:48:
         57:ac:06:6d:5e:13:82:6e:34:f1:b2:7b:59:3e:80:1e:ec:85:
         64:57:07:4c:ec:59:7c:a9:45:43:d9:30:ba:a6:23:0f:8e:22:
         31:b5:76:3b:41:f4:cf:3d:2b:55:cc:17:e7:ea:96:f2:a7:ae:
         73:18:b5:b9:4e:af:fb:4c:3d:9f:b8:b9:22:f0:31:59:1a:3f:
         1d:74:79:bc:d2:12:c5:6b:e1:64:3b:76:ab:03:dc:7a:6d:c8:
         32:bb:a5:dc:2f:03:3b:03:51:90:8e:dd:47:6f:11:00:b6:e1:
         39:f2:01:e0:6a:77:05:84:57:37:96:c8:46:2a:09:14:40:1a:
         e0:a0:6b:13:5b:58:4a:00:d1:4f:5a:f4:2c:47:00:fe:d8:75:
         6f:6d:74:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:20 2026 by rpki-client