Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142996.roa
File:                     AS142996.roa (raw, json)
Hash identifier:          WnL+pE+o0hF9D2bORXNiDWTw3SUoNeqrxdShBX/b7zU=
Subject key identifier:   5B:83:61:3A:A5:68:A5:3B:3B:51:B0:B1:8C:3B:A4:DA:5F:33:33:54
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       370D5D144B1065153538B2593C3162DDA3789501
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142996.roa
Signing time:             Mon 25 May 2026 01:20:06 +0000
ROA not before:           Mon 25 May 2026 01:15:06 +0000
ROA not after:            Mon 24 May 2027 01:20:06 +0000
asID:                     142996
IP address blocks:        240a:a15a::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0d:5d:14:4b:10:65:15:35:38:b2:59:3c:31:62:dd:a3:78:95:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 25 01:15:06 2026 GMT
            Not After : May 24 01:20:06 2027 GMT
        Subject: CN=5B83613AA568A53B3B51B0B18C3BA4DA5F333354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:33:7d:75:12:58:48:85:ca:89:3d:8d:bc:
                    db:51:ab:5a:67:16:75:cd:aa:64:6b:48:81:d2:1d:
                    b1:07:87:ea:10:03:5d:43:de:2f:24:03:05:92:ad:
                    e8:57:6a:1f:ef:1c:56:a7:ff:7e:1c:6b:43:82:b1:
                    52:1c:07:b9:7e:a6:e2:a8:8e:a1:71:00:65:6f:10:
                    4d:21:26:53:89:7c:c3:55:a3:e7:e6:bc:8f:37:b8:
                    69:74:3a:5c:23:48:6d:c4:ec:5b:c7:c5:ce:f7:af:
                    c4:6e:73:50:92:33:1a:03:cc:8a:f1:c4:73:96:c1:
                    24:8a:30:cb:20:f9:06:4b:77:ff:86:6a:65:d1:35:
                    47:de:f4:ca:73:d0:34:68:b0:b0:2e:5b:7a:76:ab:
                    93:38:13:89:ed:19:fb:e9:a3:66:d1:f2:83:f1:5d:
                    f5:09:eb:11:e5:71:58:96:bf:22:40:64:99:a3:71:
                    94:3e:b5:af:91:71:ca:b5:0b:7b:f9:1b:c3:22:ad:
                    98:c3:bf:27:22:1a:2f:f1:f8:de:bb:29:0a:9d:1d:
                    37:aa:a0:0c:73:71:23:2d:ee:b7:fe:18:df:6f:ef:
                    b9:27:d7:b0:17:28:ed:de:70:ac:cf:4b:7a:67:0a:
                    1a:f8:d3:f8:da:80:77:bd:41:bd:b7:21:8d:28:74:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:83:61:3A:A5:68:A5:3B:3B:51:B0:B1:8C:3B:A4:DA:5F:33:33:54
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a15a::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:49:1c:e2:61:70:08:e0:96:28:64:66:6e:5d:4d:be:7a:98:
         27:00:f0:50:5d:7e:01:78:b2:8e:30:df:a1:52:46:34:5e:e6:
         07:29:ce:18:d9:88:0e:e7:c8:16:78:d2:6d:57:ee:bb:18:77:
         db:b9:07:e8:78:17:bf:c9:ef:98:9e:9c:0a:13:bb:70:67:5f:
         15:c5:9b:5f:ca:fc:d0:cf:1e:af:41:22:f2:4d:38:dd:25:34:
         d2:78:02:25:70:78:c7:17:f5:6f:42:54:d0:96:36:71:f5:47:
         db:84:18:ed:c3:2f:9d:eb:69:55:93:33:3c:d9:33:f8:70:c7:
         8b:c1:cb:3b:e0:08:e1:33:50:50:2b:51:8e:a4:fe:28:ef:f5:
         8e:fa:9a:36:56:0d:75:f4:93:55:8a:98:53:70:ad:d3:1e:71:
         db:79:93:4b:a0:39:9f:26:3a:65:8f:54:ba:d0:96:f9:f0:64:
         ed:cf:0b:16:0e:3f:cc:1d:d6:86:52:c9:f3:c4:25:30:ee:4b:
         78:ea:d9:2f:9f:8f:87:64:a9:9b:9e:d5:cb:f5:8f:a9:a7:9b:
         12:66:4c:61:f3:c0:d3:44:7f:a6:ab:a7:55:ea:b1:9b:72:0b:
         7c:19:a3:b2:77:6b:fc:14:4a:b6:6c:e7:a5:9c:e5:48:b5:63:
         39:e7:af:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:48 2026 by rpki-client