Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142653.roa
File: AS142653.roa (raw, json)
Hash identifier: O/U4fqR2/StbRdrWFQsgM5rbEAIM6Js1PYWGOfqcohQ=
Subject key identifier: 01:68:89:32:7B:2F:B4:7F:2A:8B:4E:04:BC:E1:7B:3E:69:B8:BA:C8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 48CFD427D4ACEA3EC4DF4943F23075A4CB3589FB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142653.roa
Signing time: Fri 22 May 2026 06:05:19 +0000
ROA not before: Fri 22 May 2026 06:00:19 +0000
ROA not after: Fri 21 May 2027 06:05:19 +0000
asID: 142653
IP address blocks: 240a:a003::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:cf:d4:27:d4:ac:ea:3e:c4:df:49:43:f2:30:75:a4:cb:35:89:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:19 2026 GMT
Not After : May 21 06:05:19 2027 GMT
Subject: CN=016889327B2FB47F2A8B4E04BCE17B3E69B8BAC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:10:06:ce:d6:bc:9e:c3:6e:0c:ab:12:84:2f:
ce:92:d5:ce:29:b2:20:f1:ce:0d:d0:9a:f3:f0:f7:
84:5d:d3:68:a7:36:79:33:f7:a9:66:68:9d:5e:b8:
23:95:76:99:fe:94:4f:80:4d:76:75:12:59:a9:28:
a3:80:bb:73:ec:42:e1:36:aa:0b:e2:7d:f4:1c:4b:
93:16:f1:e7:9a:8c:66:63:fc:c2:0c:83:55:73:30:
26:d6:a6:c5:e7:e5:05:62:2d:9c:d4:5a:ea:02:eb:
49:4a:ff:cf:07:f3:7b:2b:50:9e:ca:f4:09:00:eb:
88:b4:82:bc:b1:79:44:52:96:2a:37:39:90:46:c0:
70:8e:c7:19:66:bf:3e:c6:78:58:b7:ae:a5:0c:2b:
c1:21:e5:41:f6:a2:06:12:fc:40:21:23:00:24:88:
ac:d5:e9:7c:1b:e1:85:98:df:17:98:58:be:b9:ef:
32:9c:61:2f:af:7d:6c:fc:7b:70:bd:5a:47:ea:58:
5d:53:f4:0e:b1:2c:47:e6:6c:bb:d7:10:43:f6:39:
8b:65:30:96:30:c9:f1:62:62:35:00:50:d9:68:a3:
27:68:fc:86:11:da:c1:2d:39:1a:6c:de:cc:32:06:
ab:08:5d:00:65:9b:80:6a:0b:9b:5a:dc:c8:e6:f9:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:68:89:32:7B:2F:B4:7F:2A:8B:4E:04:BC:E1:7B:3E:69:B8:BA:C8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142653.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a003::/32
Signature Algorithm: sha256WithRSAEncryption
98:85:7b:2a:51:c2:12:03:e3:a5:38:60:bc:fc:e2:c9:13:a3:
0a:a8:54:e4:05:f6:ee:07:db:67:78:8e:ef:b0:8b:d7:88:ba:
6e:27:c4:ab:32:d8:e0:d7:c9:5e:f0:15:42:2b:0a:5a:c3:21:
db:4f:74:28:63:a7:5a:4f:7e:6a:d2:bc:ea:29:69:d4:8c:ba:
97:7c:f0:29:98:a0:ff:b3:1b:d7:51:e9:1e:3b:bc:73:b7:74:
6b:5c:56:04:7f:dc:b9:e9:63:a9:6f:75:70:5f:d1:58:02:83:
9c:79:bb:98:9d:ef:d2:fe:5e:bc:ef:28:84:36:b6:5f:a1:be:
3b:45:fb:ca:c5:3c:21:20:35:b8:f0:65:08:0f:42:90:14:b3:
b3:39:98:ac:26:ec:30:af:31:55:93:55:cc:d2:01:54:02:5e:
b8:9c:39:1b:bb:0b:a1:28:d2:61:ba:4b:2c:1a:45:4b:93:2e:
4b:23:56:49:7d:c0:da:8f:76:39:37:41:37:dc:cd:65:86:6a:
7e:1e:31:2c:b8:cd:30:68:72:bf:89:25:7f:5b:af:49:aa:a4:
12:72:19:38:31:90:e6:de:05:62:54:4c:76:07:ea:b7:13:3e:
77:c2:b3:31:78:ec:68:09:9f:73:bc:6d:2e:23:ff:da:fa:26:
8a:42:9a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:18 2026 by rpki-client