Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142663.roa
File: AS142663.roa (raw, json)
Hash identifier: nYtF6qepl8MDKkQJ3z71itD8dw5d7/LryOykz+Hzllg=
Subject key identifier: 1B:9E:98:45:CE:03:19:2F:F2:4D:FB:6A:C3:76:0F:E1:C0:C5:02:20
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7100AF72F7EE9883D16A1EEC3CFDFB6043B66454
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142663.roa
Signing time: Fri 22 May 2026 07:09:08 +0000
ROA not before: Fri 22 May 2026 07:04:08 +0000
ROA not after: Fri 21 May 2027 07:09:08 +0000
asID: 142663
IP address blocks: 240a:a00d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:00:af:72:f7:ee:98:83:d1:6a:1e:ec:3c:fd:fb:60:43:b6:64:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:08 2026 GMT
Not After : May 21 07:09:08 2027 GMT
Subject: CN=1B9E9845CE03192FF24DFB6AC3760FE1C0C50220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:bd:eb:3d:2d:12:ca:25:2e:87:8f:9a:de:
0b:de:39:85:12:92:07:54:5b:dc:36:7c:99:38:53:
b4:1e:0f:8d:59:df:7f:3e:a0:ff:e2:96:f6:b2:5c:
c9:59:60:74:83:44:68:8d:1f:32:e7:05:be:a5:2a:
5c:0a:46:2d:69:45:b8:de:68:e4:0a:31:60:f7:0f:
33:43:a7:42:03:b0:07:a0:45:0b:9b:c6:2e:71:30:
65:59:52:84:30:46:59:54:24:89:da:b2:fe:07:b5:
83:85:36:91:1c:ec:c7:a1:5d:29:c3:c1:5f:fb:68:
43:a9:d2:f2:82:00:d3:87:ac:03:9e:3d:e1:dd:23:
82:7e:88:80:a1:e5:32:86:e6:a9:e1:75:61:98:f2:
d9:cc:48:10:d8:19:52:a7:8e:87:d7:86:94:2a:01:
c2:75:c4:f8:cd:12:1b:43:f4:ea:0f:f0:79:3f:fc:
c7:98:f4:7b:ee:67:3c:cd:f2:73:3f:9b:57:31:95:
f1:30:d7:14:72:98:0e:08:d0:5f:a7:1c:73:ac:6a:
2b:8b:5a:0b:78:33:10:1e:d5:14:f4:13:cb:95:64:
57:4d:b9:63:c0:e1:6d:e0:c1:78:0b:71:37:7c:0e:
15:ab:32:87:ea:8d:05:09:8e:a9:91:08:a4:d0:51:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9E:98:45:CE:03:19:2F:F2:4D:FB:6A:C3:76:0F:E1:C0:C5:02:20
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142663.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a00d::/32
Signature Algorithm: sha256WithRSAEncryption
aa:46:13:13:a1:0b:ca:5e:d6:9b:9c:c9:1e:96:25:50:f9:92:
cb:d1:a3:db:6c:60:7f:c8:1f:be:fb:a2:82:2d:84:b0:34:1b:
8e:e0:2b:03:71:60:50:25:e6:20:22:9d:7f:87:ac:47:b4:b0:
33:0a:c6:93:26:26:ed:9a:53:26:5c:1e:a7:0d:96:4c:53:69:
5f:35:cf:86:21:fc:a4:39:0d:01:59:5f:61:4b:f8:64:64:67:
b9:e3:e8:90:d7:08:e5:15:ea:7a:a4:54:ad:67:88:58:c8:fe:
39:b6:8c:e3:dd:4a:96:86:cb:29:b4:05:35:78:7e:96:fc:60:
f2:20:07:0c:6a:e1:63:1b:84:5e:26:d3:68:e9:66:d3:60:db:
9a:c0:54:fc:e7:e6:56:9a:cd:89:e8:0d:38:65:9a:e0:ab:99:
7f:73:8e:6d:08:48:51:a5:be:48:b2:00:d5:f6:06:9c:cb:a9:
1b:22:08:eb:4a:10:f8:4e:f5:7d:ad:5f:b0:18:41:f1:dd:7b:
02:f3:bf:85:a9:7d:60:33:b3:89:38:ed:76:79:d7:f3:62:2c:
9c:87:17:bb:78:4b:43:c1:33:f9:d1:c7:3d:44:b8:66:1c:87:
d7:d5:10:0f:26:8f:aa:4c:d4:b4:16:3e:f6:3d:bf:1a:eb:23:
f5:2b:61:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:21 2026 by rpki-client