Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142670.roa
File: AS142670.roa (raw, json)
Hash identifier: rbloEC09jQjGI1sIk0zsYxAJ+SedQ0xrnnh0sf/fZ9s=
Subject key identifier: 16:DD:81:17:2E:0E:4D:34:43:10:08:2E:3F:33:9B:59:62:2C:27:25
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1A24527F6E379EFE0B9C775D644306BCE001DB17
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142670.roa
Signing time: Fri 22 May 2026 07:09:06 +0000
ROA not before: Fri 22 May 2026 07:04:06 +0000
ROA not after: Fri 21 May 2027 07:09:06 +0000
asID: 142670
IP address blocks: 240a:a014::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:24:52:7f:6e:37:9e:fe:0b:9c:77:5d:64:43:06:bc:e0:01:db:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:06 2026 GMT
Not After : May 21 07:09:06 2027 GMT
Subject: CN=16DD81172E0E4D344310082E3F339B59622C2725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:4a:bf:0c:6d:38:8e:be:f4:f0:8f:8e:1e:
77:11:20:34:a6:60:83:df:70:33:74:1d:4e:88:83:
df:c8:e3:ea:1f:24:7a:7f:d4:bc:bb:4a:ee:92:a8:
57:c6:7a:84:ea:88:be:50:10:9d:8b:c0:54:9b:62:
79:a6:a6:40:ab:5b:43:26:c4:2e:3d:89:b0:be:7a:
e8:6e:f0:42:ad:90:fc:13:b0:9f:c6:4d:88:d8:4b:
cf:b1:18:bf:4c:39:f3:1d:26:b5:75:7a:f4:78:91:
84:71:f6:85:ca:64:da:bc:2f:be:7d:3e:87:70:1e:
d2:9a:7a:9e:22:c7:01:ed:e5:40:b9:2d:df:f5:66:
b0:be:d9:5b:ba:68:91:2a:a4:b0:ae:f3:0d:49:22:
51:c0:54:62:8c:8e:01:a1:c4:3a:78:06:ec:a2:cc:
5a:8f:a2:2a:45:82:58:95:06:fe:60:2e:43:db:be:
80:7f:98:47:57:b3:5d:ab:2e:5c:af:08:a9:ce:ff:
49:9a:72:d5:ca:80:81:9e:67:41:05:ca:87:b1:ce:
ba:5d:ab:f2:08:e6:6a:90:44:c8:a4:50:73:78:b6:
3e:90:4f:c3:53:26:41:d9:1e:67:60:3d:84:0c:62:
f3:eb:b4:90:53:6d:6f:82:ff:3b:8f:4c:02:24:69:
67:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DD:81:17:2E:0E:4D:34:43:10:08:2E:3F:33:9B:59:62:2C:27:25
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142670.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a014::/32
Signature Algorithm: sha256WithRSAEncryption
80:ca:62:6b:4f:b6:9e:27:b4:b7:6a:6e:02:c8:f0:5c:5f:b4:
df:87:95:f4:9b:68:2e:f5:83:53:df:3e:5e:78:b1:c8:9d:88:
ab:ef:87:2c:e3:1c:6e:ce:a3:b8:df:a0:c9:18:69:fd:63:8d:
c6:28:f3:b9:3e:59:95:ef:c8:fa:ab:9f:41:cc:2c:42:23:4e:
1a:de:c5:b7:d0:45:f0:34:62:68:04:b5:4f:8a:2c:a0:d7:5a:
d1:7f:9f:6c:e0:a2:40:97:a4:18:c7:39:b3:6c:45:fa:d3:b0:
cc:70:90:3f:fd:92:c0:f8:6e:a2:be:52:57:f4:3e:dc:97:0a:
9b:e9:b9:2e:5a:d0:9a:c7:c5:f6:26:3e:2a:79:aa:2d:38:a4:
ed:48:4f:05:c8:5f:49:75:84:72:5c:a0:d6:9d:0f:d7:96:f2:
ef:b7:a2:5f:ac:b7:28:25:cd:bf:6b:95:03:ab:07:45:3e:d4:
c6:22:dc:f4:41:1b:5a:89:dd:27:91:23:90:b8:93:03:b2:ff:
20:d7:12:fd:78:14:88:21:ea:f4:ac:db:a3:cf:7a:6b:ba:03:
91:61:e9:de:65:13:b6:b9:d2:c3:49:88:d0:d2:97:16:88:92:
92:31:13:99:3c:0c:0b:83:a7:97:a9:ac:ff:11:e9:d1:f3:be:
7e:e6:d1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:00 2026 by rpki-client