Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142952.roa
File:                     AS142952.roa (raw, json)
Hash identifier:          BU673+qY61hZgoKOTFOBX5NLf2yBnoVYqK4PXuFXj+U=
Subject key identifier:   0D:F6:48:DB:89:37:B1:3D:28:07:9B:6E:3C:D8:03:C9:CD:A1:EF:63
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       439333E64B48D14847E9E4DD0DCAB591A5E4B16B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142952.roa
Signing time:             Fri 22 May 2026 06:27:38 +0000
ROA not before:           Fri 22 May 2026 06:22:38 +0000
ROA not after:            Fri 21 May 2027 06:27:38 +0000
asID:                     142952
IP address blocks:        240a:a12e::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:93:33:e6:4b:48:d1:48:47:e9:e4:dd:0d:ca:b5:91:a5:e4:b1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:38 2026 GMT
            Not After : May 21 06:27:38 2027 GMT
        Subject: CN=0DF648DB8937B13D28079B6E3CD803C9CDA1EF63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:d4:ce:18:53:78:f7:60:6f:b2:94:0a:ff:
                    3c:b2:5d:7c:a3:83:72:2f:a8:82:52:da:d2:19:26:
                    ad:dd:da:39:3d:cf:f5:8d:47:b6:c2:3c:8a:31:17:
                    d0:ac:5d:40:03:45:7e:47:db:cc:2b:d8:4b:d1:64:
                    d1:49:75:07:e3:4d:da:b9:76:88:e4:6e:a3:89:66:
                    e3:0a:54:d3:e1:0c:ca:69:49:36:98:4f:ed:c9:ca:
                    d1:2b:cf:35:58:20:1e:ca:f9:ea:0a:eb:56:21:54:
                    5e:18:8e:ef:f0:94:79:a5:e6:9f:a5:e8:cf:10:f1:
                    71:05:06:8e:d5:4f:1e:c2:b7:41:87:2b:91:2d:c5:
                    bc:6a:72:d6:99:15:fa:79:a1:6a:18:d4:73:95:f0:
                    5c:f4:d0:97:e3:31:6e:07:22:f9:3c:06:84:bf:98:
                    8e:31:85:81:20:28:59:c7:91:2b:fa:ac:6e:50:cd:
                    2a:5e:fb:13:7f:17:ec:e2:e5:8d:db:79:4d:e8:6a:
                    b0:51:ff:22:76:f1:e1:22:ed:3f:9c:cf:bc:c6:3b:
                    b6:7c:12:39:25:c4:40:1f:45:22:da:74:b0:f4:53:
                    68:1f:5b:a5:1f:0e:58:bc:30:a5:56:34:2f:11:0b:
                    f5:15:bc:98:01:cd:18:d5:1d:8c:95:61:41:de:fc:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F6:48:DB:89:37:B1:3D:28:07:9B:6E:3C:D8:03:C9:CD:A1:EF:63
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142952.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a12e::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:55:09:fd:79:a6:1a:43:35:14:75:74:f3:65:22:af:01:ec:
         cd:b4:24:8d:9a:9d:0c:3b:53:7d:b8:0a:73:72:36:87:f6:12:
         7a:e4:19:a3:fb:0b:85:9b:c4:75:e4:ea:3f:69:9b:e4:bf:59:
         cd:d9:ff:7a:93:7e:fa:e0:88:25:b9:a9:e8:9c:c5:b2:27:3e:
         b1:51:9c:19:8f:af:7b:21:8a:7a:eb:36:7e:6d:5a:fe:5c:e8:
         ee:44:3f:23:ad:6a:ac:de:ed:21:33:33:a9:22:47:e0:86:f6:
         18:af:76:0b:51:7f:20:55:78:83:23:ed:ff:10:37:0c:94:8e:
         20:0e:1c:a7:0f:8b:d3:22:da:bf:cb:61:61:a7:24:27:3b:49:
         d3:69:f9:8b:28:40:d2:0d:cd:e4:f8:38:e4:15:c9:4a:7e:60:
         ff:fd:39:a5:ad:fa:02:21:b7:78:8d:41:34:f2:3d:06:c9:97:
         7f:3a:15:c0:47:4d:45:1c:a9:57:34:68:eb:3f:bc:0a:3d:07:
         3a:cd:42:75:28:4c:d4:5d:6c:29:ca:e9:93:5b:61:f2:df:bc:
         b1:6b:19:84:c6:96:3f:92:f2:23:bd:e3:14:b2:3e:6d:92:6c:
         8f:75:bb:14:24:59:5e:1e:8d:bc:92:ed:16:28:34:a0:e9:62:
         ff:c2:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:12 2026 by rpki-client