Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142676.roa
File: AS142676.roa (raw, json)
Hash identifier: +Gqv2SKx+fP6obDJpwddoiuvopBeQ6jYfoJIUj5eHpQ=
Subject key identifier: 9E:53:BD:17:CF:F2:72:3A:1D:83:02:FB:72:BF:AD:27:B2:85:9C:B7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D0F8C09A08EF03E3356C7F72C1FB66A5D490577
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142676.roa
Signing time: Mon 25 May 2026 03:19:15 +0000
ROA not before: Mon 25 May 2026 03:14:15 +0000
ROA not after: Mon 24 May 2027 03:19:15 +0000
asID: 142676
IP address blocks: 240a:a01a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:0f:8c:09:a0:8e:f0:3e:33:56:c7:f7:2c:1f:b6:6a:5d:49:05:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:15 2026 GMT
Not After : May 24 03:19:15 2027 GMT
Subject: CN=9E53BD17CFF2723A1D8302FB72BFAD27B2859CB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:26:df:1c:ac:2a:46:80:27:72:ee:c8:d8:
90:cf:72:58:24:5e:ed:09:2f:63:86:6b:89:bc:fe:
b6:b8:ca:c4:98:ec:e7:85:a8:63:16:32:11:72:a6:
f4:68:a3:e9:e1:cd:c5:6e:8a:a1:b8:e9:16:f2:c7:
e1:de:98:86:a8:3f:4e:50:d4:3e:d9:63:97:5f:2a:
02:1b:56:79:8d:33:3f:79:06:5c:be:17:f5:ae:f5:
f8:6c:66:8d:04:a4:81:ec:f6:f7:72:78:a5:b6:f9:
7a:a9:8d:77:85:ef:1d:e2:a3:48:63:c9:c5:6b:60:
3f:7c:d4:da:9c:0f:3a:30:e9:95:5f:b1:33:e7:9a:
e0:f3:b4:da:cc:9a:2c:fa:27:7d:9a:92:04:b8:1d:
e7:bc:0a:38:1d:94:68:8d:29:a8:fb:ce:46:63:63:
c9:b1:5b:37:dd:e0:7b:83:92:22:98:a4:b5:29:c7:
a5:29:fb:5c:66:6a:f3:57:fa:e7:17:ac:3a:7a:9d:
f0:3d:6d:a2:e5:d8:eb:a0:2e:b2:57:fe:63:09:3b:
d2:44:08:7d:fc:25:4a:de:fb:cc:32:a8:0b:a7:92:
c0:6d:88:eb:81:9f:6e:c3:0c:8d:be:8a:82:ca:74:
72:0c:8b:bb:60:d6:d7:9a:db:15:f1:5c:64:9a:9c:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:53:BD:17:CF:F2:72:3A:1D:83:02:FB:72:BF:AD:27:B2:85:9C:B7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a01a::/32
Signature Algorithm: sha256WithRSAEncryption
8c:60:bb:15:d2:0c:f3:c3:20:9d:54:92:b3:81:0d:ac:45:97:
50:8a:39:8d:19:b9:42:ee:b4:03:c6:81:a6:ca:b5:34:22:31:
24:51:eb:80:fd:2d:95:44:7c:5f:fc:91:45:a5:d4:2e:ed:1b:
6c:fd:4e:9c:07:7f:cd:69:24:9c:f5:ee:f0:8c:06:2a:f8:3f:
af:a0:5e:c7:14:72:dc:e5:90:5c:72:43:6e:e9:9c:8d:64:e2:
82:56:35:51:77:a8:1c:46:50:36:a8:d8:ce:57:3e:b0:ef:ea:
eb:51:ef:59:d8:7f:d1:e5:b5:9b:15:76:47:00:e6:35:fd:aa:
90:3e:2b:f5:a2:5a:c5:51:31:c9:81:0a:7d:51:9e:c5:6e:2f:
6f:fd:99:91:36:10:01:1a:ca:4a:b4:4a:08:ee:a7:2c:bd:56:
2d:cd:68:f1:b7:47:67:25:f6:26:09:a3:a2:9d:fa:1b:7c:ca:
86:53:cb:c5:ca:b8:ff:9a:d0:ea:55:d2:3d:43:81:2a:0b:de:
13:88:6e:0f:c8:6c:c5:1b:91:1d:5f:61:20:e7:b6:53:2c:2e:
75:76:a8:83:13:9b:dd:cc:89:8b:fb:f4:7a:72:48:7a:8c:89:
70:6c:03:e3:09:53:bd:bf:f4:27:3a:dc:31:69:28:ea:83:02:
b2:8b:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:40 2026 by rpki-client