Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142846.roa
File:                     AS142846.roa (raw, json)
Hash identifier:          vS852kDF5emsgjJCHtyV6T5pPsXo6poAqoWA9S1Y1Jw=
Subject key identifier:   4C:2D:05:AD:5C:CB:C0:B9:28:19:4B:32:60:9F:BF:B8:B8:3F:3D:EB
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0D4F9766501F72064A1D2C52256E5829DB0B952E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142846.roa
Signing time:             Fri 22 May 2026 06:05:43 +0000
ROA not before:           Fri 22 May 2026 06:00:43 +0000
ROA not after:            Fri 21 May 2027 06:05:43 +0000
asID:                     142846
IP address blocks:        240a:a0c4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4f:97:66:50:1f:72:06:4a:1d:2c:52:25:6e:58:29:db:0b:95:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:00:43 2026 GMT
            Not After : May 21 06:05:43 2027 GMT
        Subject: CN=4C2D05AD5CCBC0B928194B32609FBFB8B83F3DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:fd:a7:ab:57:64:73:1b:f0:14:73:8f:c4:
                    eb:f1:2a:7a:69:67:fa:5d:7d:71:2a:1b:5d:9b:56:
                    2d:be:4e:cd:c5:d8:fc:d5:25:58:4a:bd:4d:b0:31:
                    0e:38:f3:8a:77:43:1e:40:35:10:d5:fd:7b:48:3f:
                    fc:a9:6b:22:5d:48:30:d1:f6:13:f0:b9:b9:67:fd:
                    63:f2:31:9b:6a:46:44:05:8c:c4:51:8b:ef:1e:78:
                    dc:7b:05:4d:4f:79:ea:b8:31:16:fc:8b:eb:62:34:
                    95:5b:42:f2:11:0d:e6:30:ed:c2:84:ea:e6:3c:35:
                    b9:92:1b:04:c0:d8:c3:59:19:fb:cd:14:af:dd:65:
                    c1:98:09:33:18:cb:16:de:c4:68:a8:5f:f5:21:78:
                    2b:81:a2:3b:f5:12:92:93:07:24:b2:fa:81:de:04:
                    ab:66:4f:ab:a6:cd:4b:b0:c9:8e:f1:48:cd:79:ad:
                    6d:2f:b1:d6:f8:a9:f2:45:f1:78:c3:eb:0b:a3:2b:
                    63:4f:27:e1:b4:b4:8b:8b:d1:1f:cf:41:60:0e:31:
                    83:31:32:18:dc:6c:c0:2e:77:40:bc:fd:09:6f:bc:
                    8f:48:45:7b:a2:6e:62:8c:24:3d:1a:6a:2d:44:0e:
                    1d:e6:be:9c:82:ae:d1:00:0b:1d:05:43:88:4f:e2:
                    30:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2D:05:AD:5C:CB:C0:B9:28:19:4B:32:60:9F:BF:B8:B8:3F:3D:EB
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142846.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:e1:09:9a:76:7c:81:2f:5d:e3:3a:db:27:ee:c3:bf:ee:5d:
         5c:43:62:22:59:c4:2c:f0:0c:ba:a8:e9:d5:f1:b7:68:9c:7c:
         09:d7:b8:15:7e:1f:6b:95:c8:6c:5a:fb:01:06:e7:a7:6e:44:
         45:80:b7:a2:16:57:82:3d:79:23:54:c9:98:66:f2:81:24:75:
         30:31:b1:2c:3d:27:ac:56:c4:de:97:cd:3b:b0:b8:ed:42:f1:
         a8:e2:5f:63:a1:80:e6:ff:ad:2a:29:ec:c9:06:4b:3d:0d:d4:
         4c:43:17:d5:d8:5c:d0:80:ff:11:92:e1:cd:ec:d4:8b:6b:e5:
         1e:d3:3c:1e:63:57:7d:70:87:35:4e:7f:65:e8:6e:48:b7:24:
         06:12:e0:ae:b3:da:f4:3f:d0:3b:21:7f:a2:1b:46:e2:06:e9:
         6b:2a:60:fa:12:b0:c5:3d:c3:1e:91:8f:9b:ab:e6:52:68:2d:
         5f:4a:1c:c5:f5:53:f5:b0:9f:fe:fb:8d:59:71:e3:46:80:71:
         90:7e:4d:38:a2:0e:86:38:a4:9b:4a:38:15:28:5d:6c:0b:fb:
         51:f0:a9:0a:7b:f9:46:66:1a:46:0c:ca:a5:1f:c9:59:a0:6a:
         23:7d:40:56:55:53:6b:b7:c5:b2:e9:28:9d:39:be:b5:1d:61:
         a5:a5:fd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:22 2026 by rpki-client