Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142879.roa
File:                     AS142879.roa (raw, json)
Hash identifier:          x8OpeHet07YO1lPHNiyi86xZtKjOwKHYqhp8P4FySFQ=
Subject key identifier:   75:13:98:A1:D2:8A:0D:8F:98:2A:0F:50:E0:5F:19:46:23:48:8E:5F
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       5A46C061067A3B5EDE8640BCF45DDF28C67E40AC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142879.roa
Signing time:             Fri 22 May 2026 06:58:20 +0000
ROA not before:           Fri 22 May 2026 06:53:20 +0000
ROA not after:            Fri 21 May 2027 06:58:20 +0000
asID:                     142879
IP address blocks:        240a:a0e5::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:46:c0:61:06:7a:3b:5e:de:86:40:bc:f4:5d:df:28:c6:7e:40:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:53:20 2026 GMT
            Not After : May 21 06:58:20 2027 GMT
        Subject: CN=751398A1D28A0D8F982A0F50E05F194623488E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:aa:4f:24:37:e6:d8:56:e7:b2:b7:0c:cf:8e:
                    09:c0:6c:40:f1:ef:02:f8:80:ce:12:9a:60:b7:8a:
                    ca:20:a6:32:b0:18:25:d2:45:4a:44:35:2a:c5:b2:
                    f9:cf:f5:52:ee:9c:88:26:dc:9a:5e:bf:53:94:7d:
                    c4:2f:e0:60:d4:6f:e1:9d:72:d4:fb:0b:3b:a6:12:
                    90:1c:37:bf:65:00:fa:d6:8d:fd:bd:e4:7f:7f:1f:
                    66:8a:d3:f7:22:51:3a:4f:c0:2a:d8:c2:40:1c:90:
                    8a:ee:2a:00:5b:1a:4e:94:18:2d:08:42:4c:22:e9:
                    e3:23:a0:ea:c7:0e:6e:67:3e:6f:99:1d:7a:bc:d3:
                    cf:25:b4:78:ba:2f:19:c7:3d:77:ec:e3:8b:65:a0:
                    8e:f5:ba:a4:1a:7a:9e:6d:e8:ba:f7:92:eb:1b:36:
                    7b:87:ba:ea:2a:a1:2d:fc:d4:2f:b7:f2:ac:44:7c:
                    3f:1d:77:fe:4c:31:5e:b1:7d:13:e4:cc:b9:ef:1a:
                    f9:23:5f:1b:58:0a:d1:00:5b:c6:5e:22:ed:13:f1:
                    3f:f7:37:22:6c:da:0d:50:8d:8e:66:51:6d:66:07:
                    56:ff:07:b1:8d:3e:32:5d:1e:a4:93:3a:57:e6:69:
                    7a:8b:bd:0c:49:a1:88:64:b1:14:ac:00:ea:ae:f6:
                    e4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:13:98:A1:D2:8A:0D:8F:98:2A:0F:50:E0:5F:19:46:23:48:8E:5F
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142879.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0e5::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:5e:ad:55:47:46:29:21:4e:77:a8:a7:8f:7b:4b:d6:5e:a4:
         e6:fc:6d:5a:aa:f5:cc:ab:87:de:4a:65:52:08:0f:e2:6e:88:
         73:b0:ad:e2:a2:13:3b:f7:a4:9d:9b:7a:f9:f6:3b:a8:44:13:
         e3:cf:80:d8:26:8f:5e:f5:05:c9:98:a1:f3:d7:8d:9b:69:91:
         5f:55:ec:1e:fa:eb:b7:e2:cc:47:15:69:0f:fc:14:78:de:34:
         05:8b:c7:77:d7:80:3a:05:fd:22:23:58:39:69:47:f4:c0:df:
         00:cc:c5:d8:6a:d6:64:d8:09:24:e9:c3:3b:37:f1:30:7b:18:
         6c:25:44:4b:cb:00:24:0a:3b:55:46:99:a1:2c:dc:ef:fd:76:
         cc:bf:fe:25:e2:36:c0:28:79:56:27:1f:fe:3f:be:2d:1a:e5:
         20:6f:3b:11:c6:7d:8e:fe:ac:b7:28:56:90:e3:4d:6a:83:45:
         9f:ff:26:db:0e:24:0f:ec:ec:be:c9:44:dd:8f:b5:5f:aa:23:
         36:d0:de:87:8e:be:65:f0:e5:af:07:90:98:22:43:74:a3:ae:
         25:64:04:06:f7:35:ef:0b:c2:ff:eb:4e:e4:34:1d:d3:5c:97:
         66:bf:55:1f:da:fb:3e:2a:0f:a3:e4:15:60:41:4b:2c:6f:97:
         27:86:cb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:09 2026 by rpki-client