Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142914.roa
File:                     AS142914.roa (raw, json)
Hash identifier:          h2dqMoCjWWU6v5Y648rF9dCH/NOM6xq1Ow1EDSAUkSk=
Subject key identifier:   DD:88:58:84:A5:94:A1:3A:D5:38:1F:1B:C2:01:A2:DD:6A:BE:08:86
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       272AFDF9436546FC0CCD69F636922FF7825A1CD2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142914.roa
Signing time:             Fri 22 May 2026 06:46:32 +0000
ROA not before:           Fri 22 May 2026 06:41:32 +0000
ROA not after:            Fri 21 May 2027 06:46:32 +0000
asID:                     142914
IP address blocks:        240a:a108::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2a:fd:f9:43:65:46:fc:0c:cd:69:f6:36:92:2f:f7:82:5a:1c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:41:32 2026 GMT
            Not After : May 21 06:46:32 2027 GMT
        Subject: CN=DD885884A594A13AD5381F1BC201A2DD6ABE0886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:e9:e2:8e:4a:0c:3a:b0:44:37:62:82:b8:
                    0c:d7:bf:b8:39:8c:e0:45:d1:dc:24:80:0b:91:b8:
                    24:f7:89:93:58:92:0e:2f:35:ee:b9:9f:a7:92:f4:
                    80:2a:4e:99:59:73:ac:d2:66:a7:d0:e2:3f:21:0c:
                    c4:5c:15:fe:8a:de:53:37:d9:a1:d8:9d:93:7e:29:
                    94:67:a1:71:f3:30:a4:82:45:ab:c4:85:76:4e:f2:
                    64:6c:9b:d1:31:49:22:b3:09:76:be:9e:03:fc:a1:
                    7c:0b:f9:b3:0d:44:d1:42:0d:45:67:c7:6a:ad:56:
                    12:47:09:7a:40:51:12:e8:9a:b0:1e:e1:72:00:22:
                    0b:a1:91:b3:d4:c1:3d:b9:2f:f3:e6:43:d4:de:51:
                    95:fa:a2:7d:3e:0b:49:62:7b:7b:b6:21:ce:3c:13:
                    bb:56:24:df:23:9a:a2:2d:e4:70:eb:e5:d8:70:62:
                    1e:35:3c:d4:9b:70:7f:a1:66:39:f1:22:b5:de:7f:
                    ad:c9:b2:3b:0c:b0:4e:db:32:e0:b2:ca:e6:66:bd:
                    a0:b6:1e:2a:34:30:b4:df:77:64:a5:93:21:0f:a4:
                    4a:a6:a5:0a:27:d6:69:15:f9:95:d5:04:fb:1e:c0:
                    41:67:b8:b5:7d:02:ff:5d:38:b0:aa:a7:e0:9c:5a:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:88:58:84:A5:94:A1:3A:D5:38:1F:1B:C2:01:A2:DD:6A:BE:08:86
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142914.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a108::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:c2:17:3c:04:c7:c8:87:d7:bd:ab:98:a0:5c:e9:39:24:c7:
         22:3c:fe:a5:ab:d4:e4:00:d8:ce:76:0d:2f:51:de:93:1e:51:
         fb:20:4d:a8:9e:29:a0:e2:14:37:b4:45:ee:50:23:0c:a9:a9:
         60:f3:a8:0a:e5:bf:51:de:23:2a:4d:63:7e:ad:16:32:76:55:
         02:cd:e1:bc:91:3b:67:3f:9f:18:63:ca:64:9d:cd:1c:54:75:
         0f:af:3a:d8:fa:18:77:4b:c8:1a:d7:c0:ac:8c:97:65:19:9b:
         77:f9:b0:9a:e3:49:56:f4:8a:c8:0c:d4:7b:53:5c:76:f4:86:
         61:30:68:7f:08:c0:7b:f6:63:e5:76:36:72:58:31:ea:7e:64:
         5e:be:0e:3e:2d:03:b2:52:3a:3d:c6:ba:af:0e:14:94:fc:0e:
         43:b2:a5:a8:02:30:12:03:a0:9e:08:2f:d7:ac:42:6f:3a:71:
         27:11:df:6b:ac:db:b9:a6:fb:3b:19:3a:0a:4f:c9:6e:80:b6:
         65:ad:db:1c:01:3c:47:fb:fa:e8:4b:f0:56:ee:6b:5f:57:d2:
         a6:ea:5a:02:8e:b1:6a:37:46:38:c8:73:e8:f9:19:f5:4d:fd:
         70:55:10:8a:a2:df:fc:2c:d0:e4:01:f0:89:52:a5:3a:b0:ee:
         3b:5d:af:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:19 2026 by rpki-client