Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142887.roa
File:                     AS142887.roa (raw, json)
Hash identifier:          zwLML3yK9feGGe1jMZMd1gT8CaRD8RkVHjVJKNXsYj0=
Subject key identifier:   23:AC:78:47:BC:D6:04:D1:9A:BB:8A:3E:E3:F2:28:C1:96:C7:D5:81
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       07E8C6CD018F1785C1271A242C96D0E0E2C09BBA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142887.roa
Signing time:             Tue 26 May 2026 03:16:44 +0000
ROA not before:           Tue 26 May 2026 03:11:44 +0000
ROA not after:            Tue 25 May 2027 03:16:44 +0000
asID:                     142887
IP address blocks:        240a:a0ed::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e8:c6:cd:01:8f:17:85:c1:27:1a:24:2c:96:d0:e0:e2:c0:9b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:11:44 2026 GMT
            Not After : May 25 03:16:44 2027 GMT
        Subject: CN=23AC7847BCD604D19ABB8A3EE3F228C196C7D581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:39:aa:7c:3a:b6:d8:8b:ba:04:d1:38:a4:51:
                    33:54:e9:f3:37:01:26:a7:1a:8f:e1:1b:24:5e:a0:
                    28:f4:55:ed:e3:9a:0a:b9:c5:d1:ed:42:d2:32:dc:
                    80:ad:ed:24:89:da:f7:72:1d:0b:41:ce:2d:e9:c2:
                    32:0f:4a:61:de:11:53:bc:60:1e:2c:ce:f5:6f:78:
                    3a:60:22:17:9c:79:35:e2:51:28:07:64:1b:c5:17:
                    17:83:11:b1:f6:ee:6c:fc:f6:b2:59:ee:7d:60:5a:
                    9a:a8:67:78:f2:70:d8:58:19:b7:be:59:49:8d:07:
                    b1:be:15:51:51:58:ea:cb:54:0a:d9:5d:b3:45:ef:
                    86:b9:de:34:bd:0f:47:85:d9:34:9f:62:5c:9a:6e:
                    77:e0:8f:ac:06:2e:45:f6:59:72:32:7e:7b:bb:e8:
                    54:c0:e6:0c:9f:f2:41:54:f6:29:9e:cd:2a:d2:87:
                    44:61:e1:ee:e2:e4:0f:4c:8f:12:5d:92:8c:7e:fd:
                    c7:24:82:b7:0b:43:74:7b:11:d7:6f:8c:9e:1f:e0:
                    ef:81:4b:0a:2a:e6:8b:87:45:a1:99:53:51:e9:44:
                    cb:a6:11:ec:67:80:e3:0f:09:52:2e:35:be:ef:1f:
                    aa:8c:32:8b:4d:f9:8e:72:c6:77:2b:da:49:91:c9:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AC:78:47:BC:D6:04:D1:9A:BB:8A:3E:E3:F2:28:C1:96:C7:D5:81
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142887.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a0ed::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:e3:59:2b:40:64:80:e9:07:ae:d4:51:bc:b8:0f:89:41:97:
         ab:b8:27:90:aa:b1:b3:c1:c1:3c:e3:ef:88:d0:7c:62:eb:88:
         b7:e7:14:b1:78:7d:b6:04:30:2a:e3:8b:72:27:da:9b:09:11:
         66:49:7f:f4:02:ed:4b:e3:fb:f4:4c:70:42:3a:68:af:ab:88:
         48:f8:27:69:17:98:87:19:96:b4:49:05:74:bd:bf:02:11:97:
         50:cb:b3:5a:d0:6b:38:66:33:08:f8:80:9c:79:5b:34:a7:08:
         c9:25:37:e8:20:b3:bc:9b:57:55:52:1d:92:e3:dc:f3:ac:e3:
         64:28:b1:07:c0:05:38:0e:04:21:e3:00:82:7f:c1:50:fa:40:
         a3:8c:82:79:cb:d0:da:49:be:9f:8f:7e:5c:8b:b5:5e:f4:a5:
         ec:31:a3:7f:8a:eb:63:da:f6:d4:62:78:7c:f6:5d:75:59:1e:
         a7:48:14:0b:eb:05:8f:c5:6f:20:0d:6c:12:68:45:94:34:d8:
         c6:e2:fe:e6:db:92:9b:54:8f:75:96:eb:2b:35:fc:18:18:ea:
         4b:2e:be:94:74:26:9a:d5:bb:dc:1a:33:45:c8:01:c3:23:69:
         71:59:8f:99:ae:61:03:a1:10:74:64:b9:10:ee:4f:ee:12:2b:
         b1:c4:54:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:03 2026 by rpki-client