Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142826.roa
File:                     AS142826.roa (raw, json)
Hash identifier:          I19C7ZSEVpPZduW64E7ISfPecXBhgeCWzjzzhNs6HcY=
Subject key identifier:   76:CF:57:AE:8C:75:D1:53:B6:C1:04:A2:26:D8:14:07:81:17:11:13
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       643419F8B204A7797484D43CBE5FE7D854EB2D17
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142826.roa
Signing time:             Mon 25 May 2026 01:20:39 +0000
ROA not before:           Mon 25 May 2026 01:15:39 +0000
ROA not after:            Mon 24 May 2027 01:20:39 +0000
asID:                     142826
IP address blocks:        240a:a0b0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:34:19:f8:b2:04:a7:79:74:84:d4:3c:be:5f:e7:d8:54:eb:2d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:39 2026 GMT
            Not After : May 24 01:20:39 2027 GMT
        Subject: CN=76CF57AE8C75D153B6C104A226D8140781171113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:3b:69:cd:71:68:22:ca:4d:61:c3:4f:24:
                    f7:d5:0f:2e:ee:ac:70:57:4d:c0:a0:fe:21:25:ad:
                    b0:7a:71:eb:51:42:4c:be:08:b1:41:d5:d6:5f:aa:
                    a8:dc:8b:9f:81:cb:c5:76:21:58:ca:54:06:d6:0f:
                    8f:a7:03:c3:e1:68:3e:9c:56:11:22:2b:2a:73:37:
                    06:d9:b1:fb:eb:b6:78:60:c5:cc:5f:a2:18:79:00:
                    94:92:72:fd:76:8d:06:71:ee:dc:46:58:39:b9:28:
                    81:6f:12:9f:e6:e6:a5:d3:c7:3c:b1:86:4f:da:97:
                    c9:64:ce:3d:a2:bb:8b:bc:cc:ee:7d:c9:14:01:34:
                    19:7f:17:e0:64:38:57:65:97:f8:50:44:4a:f6:b8:
                    96:c5:40:ee:90:21:a7:23:f7:9e:dc:2c:8c:aa:17:
                    9f:4d:37:f9:21:ba:53:b9:f9:58:cb:3d:66:fa:04:
                    b8:b2:e2:5e:28:b3:2f:71:7e:78:4b:19:09:8d:92:
                    5b:f5:f6:64:b9:0c:3e:f7:07:8e:62:dd:56:0f:1d:
                    e1:82:df:47:2a:ab:67:eb:3a:a9:98:5f:1b:27:07:
                    76:d3:b3:1c:27:39:a5:09:c1:99:d2:74:e0:99:1b:
                    4c:5a:2c:7d:22:f7:2a:7b:0c:87:1e:ac:58:7c:b9:
                    0d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CF:57:AE:8C:75:D1:53:B6:C1:04:A2:26:D8:14:07:81:17:11:13
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142826.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:1c:1e:b7:92:c9:fe:56:46:1c:88:a3:fd:c7:97:58:07:a4:
         6d:b6:ee:29:29:f1:dd:42:49:99:a4:ec:e1:32:80:ac:cf:de:
         e6:cc:6e:b2:2b:86:83:7d:c3:c0:76:4a:74:db:0f:a9:db:6c:
         7c:de:c3:a2:af:c7:73:00:a2:58:a1:64:d1:b3:98:d4:ed:33:
         dc:40:c9:9d:82:a2:94:2f:6c:7d:b3:ce:8d:0c:99:85:e3:0b:
         b0:38:e7:f3:b9:9d:ae:e7:f3:0b:ee:8e:f9:95:9a:22:5d:55:
         6b:ff:e7:b5:5f:e5:16:cb:ad:34:3c:54:09:62:59:c9:4e:84:
         89:12:82:ac:04:62:5b:46:9d:13:f3:00:72:7d:19:6b:4d:b0:
         e8:e7:52:64:05:bc:40:49:d7:d2:a0:bc:de:1a:b7:ab:90:7c:
         4e:77:9b:39:d2:c6:cc:40:16:61:4e:ae:35:05:75:ff:f0:92:
         43:61:0e:f6:70:cf:b5:69:2d:c1:45:ae:7f:98:a9:21:7c:43:
         21:2b:17:e8:2a:9e:5d:27:6b:34:98:b2:7e:7c:e3:64:1c:55:
         df:4e:65:04:de:0f:5c:31:0e:29:af:2c:6f:5d:3b:ab:d0:88:
         1a:d6:99:7f:62:e5:d0:0a:fb:71:c4:7c:d5:c3:f7:39:30:3b:
         9e:47:fa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:08 2026 by rpki-client