Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142946.roa
File:                     AS142946.roa (raw, json)
Hash identifier:          73FT+OH2oQBZw5it2vxee6eClPwieeBBLtbsOtjjQkU=
Subject key identifier:   05:D2:8B:92:8F:FF:8D:3C:B6:97:1D:64:CC:AB:91:02:61:0F:EB:10
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       26A243E07455D6FB188CC3C91BCE51E1665EE843
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142946.roa
Signing time:             Tue 26 May 2026 03:17:19 +0000
ROA not before:           Tue 26 May 2026 03:12:19 +0000
ROA not after:            Tue 25 May 2027 03:17:19 +0000
asID:                     142946
IP address blocks:        240a:a128::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a2:43:e0:74:55:d6:fb:18:8c:c3:c9:1b:ce:51:e1:66:5e:e8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 26 03:12:19 2026 GMT
            Not After : May 25 03:17:19 2027 GMT
        Subject: CN=05D28B928FFF8D3CB6971D64CCAB9102610FEB10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:f6:14:1c:fa:b9:87:74:a1:6f:9a:18:3b:
                    fa:b1:0e:43:03:91:30:06:6b:e7:65:41:80:78:d1:
                    5b:8d:61:f3:40:39:82:63:4c:9e:c9:84:32:bf:65:
                    27:1c:66:86:3f:4a:00:d7:bc:b0:1e:e5:32:3b:66:
                    06:77:c9:f7:f4:d0:60:fc:3f:1b:bf:2e:1d:04:35:
                    ff:02:79:87:15:5f:31:14:7a:61:ba:08:c0:94:03:
                    f7:47:58:1e:0f:ec:11:cf:28:39:2f:a4:90:d2:28:
                    09:83:3b:6f:ec:74:1b:d6:22:ca:fc:67:3b:ff:d7:
                    c6:25:9c:cd:59:c2:34:b1:dc:44:bb:53:11:6d:da:
                    90:78:cc:17:17:73:33:4a:8d:68:44:ce:46:68:48:
                    db:5d:cb:f3:ca:14:be:24:c7:35:be:ba:fd:8b:9a:
                    35:ee:2d:37:4e:9e:87:ee:3e:3c:7a:61:6f:5b:ce:
                    bd:39:a5:d4:c0:f5:1a:cd:6b:a5:51:d2:19:3c:64:
                    76:a7:1d:cc:f5:5d:5f:24:b8:f9:b7:ed:b6:42:69:
                    c0:5b:04:95:17:55:c9:06:3a:46:44:69:a9:de:d0:
                    e5:b4:73:49:a0:72:c2:b2:5d:ce:51:7f:71:8e:6d:
                    c6:24:7d:5a:ea:a8:07:b7:52:b8:75:b1:e0:14:be:
                    e9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D2:8B:92:8F:FF:8D:3C:B6:97:1D:64:CC:AB:91:02:61:0F:EB:10
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142946.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a128::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:94:d7:f3:58:82:41:d4:f2:b3:16:95:1a:f3:0f:14:2c:30:
         7e:4d:eb:f3:b1:e0:cd:05:aa:c8:8e:cc:55:f8:cd:89:d8:a0:
         b9:7d:f0:2d:83:81:c6:ce:86:ae:be:29:49:ae:43:c6:b2:e9:
         ef:a3:37:74:a6:a9:a6:c0:db:fe:58:bd:47:5a:6b:62:01:de:
         dc:b5:e2:cb:f5:67:5a:89:26:7d:75:a5:c2:f5:f7:86:73:70:
         26:cc:25:01:1c:40:5e:23:a2:3e:35:a9:d1:ca:db:40:82:4f:
         9f:e3:ed:c9:52:bf:e0:9b:f7:90:c0:4c:df:dc:35:39:38:18:
         bb:66:c5:2d:6e:72:a2:2c:34:01:4a:cb:33:11:40:bf:5f:6d:
         cb:45:d3:1f:d0:4c:d0:78:aa:ec:ae:c5:c9:37:61:e2:06:57:
         4d:ae:6f:2a:d1:36:50:02:21:0d:45:1b:81:8d:4f:ae:81:c8:
         a5:af:31:2c:53:69:67:c2:d6:45:55:a5:71:cf:82:6c:b3:ed:
         76:24:a3:5b:b9:ca:f6:98:23:6d:e0:24:5b:16:34:0e:ee:e0:
         3b:bd:43:92:c6:6e:7b:d5:6d:01:89:3e:5d:3b:ff:f8:d8:6f:
         34:af:1b:89:14:73:6b:b5:ae:c3:f4:06:36:e7:89:6a:dd:d4:
         ca:24:cd:2e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJqJD4HRV1vsYjMPJG85R4WZe6EMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMTlaFw0yNzA1MjUwMzE3MTlaMDMxMTAvBgNV
BAMTKDA1RDI4QjkyOEZGRjhEM0NCNjk3MUQ2NENDQUI5MTAyNjEwRkVCMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3xPYUHPq5h3Shb5oYO/qxDkMD
kTAGa+dlQYB40VuNYfNAOYJjTJ7JhDK/ZSccZoY/SgDXvLAe5TI7ZgZ3yff00GD8
Pxu/Lh0ENf8CeYcVXzEUemG6CMCUA/dHWB4P7BHPKDkvpJDSKAmDO2/sdBvWIsr8
Zzv/18YlnM1ZwjSx3ES7UxFt2pB4zBcXczNKjWhEzkZoSNtdy/PKFL4kxzW+uv2L
mjXuLTdOnofuPjx6YW9bzr05pdTA9RrNa6VR0hk8ZHanHcz1XV8kuPm37bZCacBb
BJUXVckGOkZEaane0OW0c0mgcsKyXc5Rf3GObcYkfVrqqAe3Urh1seAUvuknAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUBdKLko//jTy2lx1kzKuRAmEP6xAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhKDANBgkqhkiG9w0BAQsFAAOCAQEAFpTX
81iCQdTysxaVGvMPFCwwfk3r87HgzQWqyI7MVfjNidiguX3wLYOBxs6Grr4pSa5D
xrLp76M3dKappsDb/li9R1prYgHe3LXiy/VnWokmfXWlwvX3hnNwJswlARxAXiOi
PjWp0crbQIJPn+PtyVK/4Jv3kMBM39w1OTgYu2bFLW5yoiw0AUrLMxFAv19ty0XT
H9BM0Hiq7K7FyTdh4gZXTa5vKtE2UAIhDUUbgY1ProHIpa8xLFNpZ8LWRVWlcc+C
bLPtdiSjW7nK9pgjbeAkWxY0Du7gO71DksZue9VtAYk+XTv/+NhvNK8biRRza7Wu
w/QGNueJat3UyiTNLg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:19 2026 by rpki-client