Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142980.roa
File:                     AS142980.roa (raw, json)
Hash identifier:          S5t1/iS2VPju7mo3lOaoMhfuL4Xl8MFKWf3P00VWAOM=
Subject key identifier:   B4:89:25:83:0B:AD:0A:CE:A8:1C:F1:1A:D9:CF:9C:F4:49:84:D9:2E
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       3DFCDA064FE1E31F0D52A8C377F1BB001E0AA6EF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142980.roa
Signing time:             Mon 25 May 2026 03:19:23 +0000
ROA not before:           Mon 25 May 2026 03:14:23 +0000
ROA not after:            Mon 24 May 2027 03:19:23 +0000
asID:                     142980
IP address blocks:        240a:a14a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fc:da:06:4f:e1:e3:1f:0d:52:a8:c3:77:f1:bb:00:1e:0a:a6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 03:14:23 2026 GMT
            Not After : May 24 03:19:23 2027 GMT
        Subject: CN=B48925830BAD0ACEA81CF11AD9CF9CF44984D92E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:97:e5:c2:f5:03:0f:51:b5:10:46:80:e4:4f:
                    0a:37:f5:30:66:d7:2c:27:8d:b9:3d:00:ba:b5:80:
                    05:73:8c:f1:10:5e:b7:e5:e1:6d:f8:b6:bb:02:e9:
                    09:6e:b8:0d:25:88:af:e3:a1:32:ac:a4:ea:48:38:
                    ae:b7:79:a6:49:e1:79:d0:58:fd:49:8a:67:ee:da:
                    c1:4b:9a:dc:ed:f1:1c:e4:77:52:cb:c2:a8:99:fb:
                    ee:55:9a:9e:c3:2d:47:5e:b9:3d:29:8b:89:50:46:
                    59:40:e7:2a:76:e2:6a:37:04:13:e9:e5:4d:be:9c:
                    42:8b:4c:41:73:74:8f:02:3d:1c:a8:87:a2:10:c8:
                    c5:7a:14:84:9c:1c:4d:84:7d:85:e3:2c:21:c1:96:
                    35:91:cb:12:8b:3c:e3:9e:b1:d5:35:a4:c8:67:20:
                    30:a8:d9:99:7f:2e:ea:94:0a:25:ec:31:f9:03:5c:
                    95:bf:4e:3e:57:a8:5e:f9:23:57:a3:ee:76:79:f8:
                    cb:52:06:9f:03:32:13:21:20:0c:3c:6c:f0:0d:c5:
                    c5:9a:2e:be:95:70:ab:32:12:90:e6:2a:c0:fa:a6:
                    dc:b2:5f:7d:6e:df:3f:9d:54:be:01:70:08:6a:68:
                    8c:19:47:b7:ef:20:b9:c0:cd:0d:55:70:12:1c:ad:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:89:25:83:0B:AD:0A:CE:A8:1C:F1:1A:D9:CF:9C:F4:49:84:D9:2E
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142980.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a14a::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:0b:2f:f0:20:c7:30:12:c1:5e:91:05:be:9a:35:3a:8d:
         44:7a:e4:b4:c4:49:2b:7a:56:37:c3:26:d6:91:ff:ae:a5:6a:
         1d:04:98:21:d2:ae:ee:b2:ce:e5:65:a7:ef:8c:9b:fc:bd:b7:
         13:13:34:c9:62:d5:a6:71:d9:5d:ef:8d:71:93:32:d6:b9:d4:
         89:4e:09:2c:7e:74:d2:19:e4:9f:28:97:33:62:cf:85:18:70:
         f7:cc:92:80:dc:76:f6:ee:4b:47:5c:fa:8f:ea:c7:14:58:a4:
         5c:65:df:84:b4:49:fa:f6:73:5f:1b:f0:e1:fa:f7:b5:79:cd:
         3f:52:10:11:1c:f8:d3:e7:7a:c5:05:3e:71:0d:f0:74:78:66:
         2e:aa:8a:65:36:25:ea:a1:7f:6a:fe:db:30:ea:b2:5d:0d:40:
         8c:d5:84:64:aa:0a:6a:33:0f:4a:52:61:70:19:d7:f7:0f:ca:
         c3:1d:bc:65:06:aa:bd:5c:c5:a7:ba:ac:4d:2a:dd:d1:fe:12:
         b2:84:ed:bf:17:d2:6a:04:e6:8a:17:98:f9:85:7a:42:fe:22:
         56:95:72:c2:93:45:a7:45:0c:3b:5a:eb:88:ce:7b:f0:a5:2e:
         3e:a0:27:7e:77:f1:d0:1b:d7:a0:bb:5e:d2:33:a7:44:44:bf:
         cb:c3:4c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:20 2026 by rpki-client