Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142956.roa
File:                     AS142956.roa (raw, json)
Hash identifier:          84Oec/77q8O7bHJwCT/24p0hwpuE53wVmG3LOBhxZag=
Subject key identifier:   DA:DF:AE:37:45:FC:C0:AC:68:A0:19:70:9A:F8:44:BA:8D:59:8A:CC
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       4CB4AE5EA479B314B0F19A6C7CB3D8B0E7EAFF81
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142956.roa
Signing time:             Mon 25 May 2026 02:22:48 +0000
ROA not before:           Mon 25 May 2026 02:17:48 +0000
ROA not after:            Mon 24 May 2027 02:22:48 +0000
asID:                     142956
IP address blocks:        240a:a132::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b4:ae:5e:a4:79:b3:14:b0:f1:9a:6c:7c:b3:d8:b0:e7:ea:ff:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 02:17:48 2026 GMT
            Not After : May 24 02:22:48 2027 GMT
        Subject: CN=DADFAE3745FCC0AC68A019709AF844BA8D598ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:83:10:cc:c3:46:d4:9c:01:37:9f:b0:74:
                    8f:6b:19:5c:c2:c9:02:af:f1:41:ee:8d:0e:71:15:
                    46:e5:a3:ff:53:e2:6a:11:77:5d:ac:93:41:8f:36:
                    23:97:e2:4d:d4:41:18:f2:19:9d:f7:cd:04:73:e2:
                    6d:86:3d:96:cc:72:94:93:02:bf:da:fd:ab:40:72:
                    14:3e:d0:be:fb:01:56:fe:9e:d9:55:c7:ec:56:1f:
                    04:d2:ba:99:e9:4d:15:47:96:1a:26:68:3f:aa:ec:
                    98:84:5f:50:db:73:ea:69:0e:3f:6d:17:42:0a:27:
                    fe:32:cc:f3:c2:2f:4f:92:3b:07:1c:41:eb:22:f3:
                    eb:60:58:29:e5:55:ba:9c:b2:2d:7b:c8:8b:11:d9:
                    94:c4:93:c7:f3:96:28:f9:f6:9e:40:00:b0:dd:1e:
                    95:18:4b:8a:9d:05:fb:55:cb:4a:18:ec:1e:9e:bd:
                    85:29:78:06:bd:5e:6a:74:63:b4:d6:70:f2:38:71:
                    54:ad:b0:46:5a:c0:06:3a:65:4e:25:ec:f4:6c:2d:
                    e4:34:82:ae:58:fa:20:f4:3c:37:8f:8c:0a:fd:f2:
                    a8:ad:cc:bb:b0:2f:52:b1:1b:ea:a9:e1:ba:50:e4:
                    90:71:29:80:6a:c4:2e:3a:24:36:57:d3:3c:f2:76:
                    37:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DF:AE:37:45:FC:C0:AC:68:A0:19:70:9A:F8:44:BA:8D:59:8A:CC
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142956.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a132::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:b9:e7:d7:3a:60:8e:66:cd:0e:2c:25:9d:7a:0f:61:58:d4:
         30:7f:b2:c8:3a:79:3d:04:f7:8a:d8:51:aa:87:80:1d:f7:8a:
         09:1c:0d:01:d5:82:59:b6:3e:6f:75:54:16:0a:c4:cb:be:a5:
         af:c0:0a:19:23:a3:12:69:c5:1b:b3:55:a8:1d:26:e6:4f:7c:
         d0:01:ad:7d:4c:ed:5e:50:3c:cd:2b:28:cc:fc:3c:a4:4d:26:
         25:66:11:33:19:c9:b2:27:b2:4d:1d:b3:7c:6c:79:68:22:f4:
         23:a1:10:7d:52:67:0a:e3:f4:4a:23:b7:49:a1:d2:18:af:3a:
         83:6f:dd:38:8b:2b:90:b6:90:79:d4:db:ee:8e:44:99:51:80:
         84:57:47:19:17:d1:62:21:e1:dd:5b:41:e2:a9:c0:f8:21:79:
         5e:ee:a7:11:a5:02:16:f5:70:f6:8e:6e:0e:81:2c:1e:52:2e:
         f8:46:6b:e0:4d:15:8b:b3:56:b2:91:3c:5a:3b:5a:57:72:b8:
         94:e8:d4:57:40:04:f9:79:00:66:23:d2:9b:b4:da:e7:4f:8b:
         59:ed:42:73:26:28:46:24:ec:d3:f3:3b:c6:72:59:ba:88:2d:
         91:fa:79:98:d6:dc:ea:d4:58:12:53:5a:eb:6a:6b:57:b7:55:
         91:83:6c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:18 2026 by rpki-client