Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142672.roa
File: AS142672.roa (raw, json)
Hash identifier: IzZvx0aofkDPzB0zX9uQJMRWw1Xl9u8DIhLHBDlE6wk=
Subject key identifier: DF:FA:5B:A0:1C:33:8F:9D:FC:65:43:F2:71:45:53:27:09:F9:76:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4CE27003B39DEDDADF5F74E761C22DC7AE24C858
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142672.roa
Signing time: Fri 22 May 2026 06:45:58 +0000
ROA not before: Fri 22 May 2026 06:40:58 +0000
ROA not after: Fri 21 May 2027 06:45:58 +0000
asID: 142672
IP address blocks: 240a:a016::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e2:70:03:b3:9d:ed:da:df:5f:74:e7:61:c2:2d:c7:ae:24:c8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:40:58 2026 GMT
Not After : May 21 06:45:58 2027 GMT
Subject: CN=DFFA5BA01C338F9DFC6543F27145532709F97685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e4:63:9a:8e:db:7f:4c:a7:97:b3:27:b6:40:
b9:1b:3c:2f:96:fc:00:7f:81:a1:ac:ec:0c:c6:a2:
b2:a9:bd:3a:74:cd:25:99:2c:44:d6:13:ad:9a:e8:
6f:4a:ac:c3:8b:00:bd:c8:f4:99:fc:12:15:6d:aa:
5c:28:d3:ef:01:77:d6:c9:89:f1:b1:48:0e:04:3a:
f7:98:61:8e:ff:09:25:74:9e:4c:a3:4e:68:50:1f:
53:49:81:72:96:f8:13:92:1d:5e:79:c2:c4:5c:e5:
91:a7:46:b6:af:64:67:ae:d2:9a:79:c1:5b:57:3f:
76:a3:e2:82:ca:81:05:63:06:10:93:dd:c6:01:79:
e2:21:c9:15:da:a9:95:80:ef:bb:a1:c5:8c:88:74:
71:4b:55:b2:02:57:34:ae:9e:02:ae:b3:c7:b5:c6:
ac:9c:01:c3:5d:a4:e5:d4:e4:51:1b:d9:9a:87:92:
6e:68:a9:de:28:73:7d:ac:60:7e:ad:47:aa:4e:ab:
d4:92:5a:ad:37:fb:a3:7a:f5:03:30:b7:f0:a4:3c:
14:1e:68:54:23:c3:69:aa:82:71:ce:f0:5b:d2:92:
18:49:55:13:a1:b0:1c:92:b8:b6:a7:7b:b0:6a:04:
a0:fb:43:dc:70:5c:6e:be:0d:b5:4b:c4:52:fa:67:
14:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FA:5B:A0:1C:33:8F:9D:FC:65:43:F2:71:45:53:27:09:F9:76:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a016::/32
Signature Algorithm: sha256WithRSAEncryption
48:a0:65:de:33:1e:da:47:fb:86:90:3f:74:d1:1f:76:4f:f9:
af:a0:b3:cb:d4:95:b9:97:a1:2e:c3:38:09:ec:cc:b9:38:86:
9f:13:a6:19:87:f5:f6:35:81:f2:5a:7a:fd:69:25:35:25:1d:
aa:ec:d6:b7:e7:e3:df:00:25:c7:04:e4:5b:ca:20:6c:44:74:
6d:60:5e:d7:ce:78:3a:2f:af:95:2d:00:a8:12:6c:cf:f5:a4:
04:b6:af:15:17:58:b3:c2:4f:83:f4:66:76:a0:ef:16:6c:30:
f4:71:4f:97:13:3f:db:82:35:10:1b:cb:3c:18:a3:bd:a5:12:
d3:65:8c:60:59:3f:f7:94:25:9a:de:11:d8:22:7c:75:38:c5:
9f:38:97:67:13:8f:af:19:c6:4a:89:5a:c1:5d:02:5b:69:66:
0e:ae:ac:d4:8e:41:f0:b9:46:06:e5:2d:7e:be:ba:1b:fc:ea:
1a:94:f1:4f:72:d3:1e:bd:07:c5:2e:d0:56:df:fc:8a:aa:6e:
ac:37:b5:74:2c:11:7a:28:0d:5e:b0:2c:df:a6:e2:5c:fe:8d:
37:81:ac:b8:07:02:8c:af:18:64:81:b9:68:67:0a:57:0d:c1:
59:7e:a2:51:c5:59:a2:cf:0c:24:a8:d3:45:68:c9:cf:88:bf:
c3:c8:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:39 2026 by rpki-client