Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142682.roa
File: AS142682.roa (raw, json)
Hash identifier: P4fuHFDl76PGbsgSkj8fpmWOTrs8vdQfDQTWiB7M2dM=
Subject key identifier: 5C:DD:59:8A:85:76:C9:24:2F:F8:0E:4B:B2:F2:1E:BC:B2:49:E6:11
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3669A67B3F309125E014B570140D578177156594
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142682.roa
Signing time: Fri 22 May 2026 07:08:43 +0000
ROA not before: Fri 22 May 2026 07:03:43 +0000
ROA not after: Fri 21 May 2027 07:08:43 +0000
asID: 142682
IP address blocks: 240a:a020::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:69:a6:7b:3f:30:91:25:e0:14:b5:70:14:0d:57:81:77:15:65:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:43 2026 GMT
Not After : May 21 07:08:43 2027 GMT
Subject: CN=5CDD598A8576C9242FF80E4BB2F21EBCB249E611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:40:84:c1:c8:8d:4c:f0:05:2e:ea:0a:da:b3:
d9:5c:7e:09:ae:85:24:ae:34:11:06:bf:00:01:ee:
44:7c:2f:06:e9:50:d4:0a:ac:77:e9:39:82:c3:79:
fa:be:18:35:d0:ab:31:00:c8:c4:ea:33:e1:c0:dd:
11:fe:70:d0:69:e1:f4:bc:0e:3e:e1:4d:0f:5a:0a:
52:c8:83:ce:39:62:89:4f:af:71:4c:38:c1:2c:4e:
a4:0b:d1:b3:6f:83:81:a7:87:fa:f8:d9:54:bd:13:
14:52:17:61:9e:04:2b:0b:4d:6b:4b:b7:27:c0:6a:
5d:63:6a:76:d2:8e:c2:13:e5:ea:5a:ff:b5:aa:cb:
24:fa:dc:f3:77:40:8c:87:50:7c:a4:5a:a0:4f:77:
40:05:30:18:59:bd:45:64:49:26:65:a0:4f:25:54:
37:b6:99:fb:74:ac:af:82:49:32:b1:5a:70:5c:f5:
4b:da:3e:f8:a2:26:c9:2b:79:e1:8d:0f:26:8d:4b:
a7:44:75:d9:32:21:3d:f4:6d:95:74:6a:9c:b3:10:
0a:e8:7c:57:3a:03:3e:99:1a:fe:42:f2:b6:87:0c:
16:14:4e:e3:28:9b:a7:52:ac:bc:2f:25:f3:a7:72:
54:af:2e:46:7a:27:f5:cc:60:89:8d:94:bd:7c:5f:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DD:59:8A:85:76:C9:24:2F:F8:0E:4B:B2:F2:1E:BC:B2:49:E6:11
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142682.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a020::/32
Signature Algorithm: sha256WithRSAEncryption
7c:28:dc:ff:b0:cc:9a:4b:54:3e:f9:b7:54:19:73:d3:06:2e:
6e:4d:e1:d9:f9:ce:3f:13:85:c4:f0:77:f3:fd:0b:ba:01:55:
69:a8:af:27:aa:15:b8:11:a3:ba:6c:7e:a3:36:a0:8b:0c:87:
03:2b:3e:ef:4a:72:34:d4:79:e8:1e:0a:91:75:6e:bc:7d:98:
8d:77:6b:ac:bb:dc:00:61:97:21:7b:62:9d:44:b7:03:56:1f:
61:10:de:14:72:92:01:32:61:98:f8:83:e7:a8:29:1f:d3:d7:
58:fc:f8:20:81:24:02:c6:cf:6f:72:d8:89:ed:40:f9:8a:b0:
c8:a6:15:65:2a:57:e0:5e:1c:f1:bc:50:be:63:ef:8b:b0:02:
ac:6e:98:f8:a4:71:de:0f:cc:f7:ca:9e:47:be:74:55:b8:06:
13:ec:0a:8e:a6:2c:f9:e7:a4:ff:5e:ab:5b:7e:79:f0:e2:da:
42:35:77:90:5c:8f:e5:d2:46:f1:1e:da:0d:c5:14:8a:2e:87:
e8:7e:b3:82:db:43:21:82:af:5b:b9:d3:42:86:f6:cc:e4:69:
bc:4a:08:85:d4:3f:90:1e:6a:34:a7:92:60:21:52:d7:cb:91:
a0:77:9e:61:6e:e0:01:4f:de:0a:9a:7f:79:54:1e:86:1b:2c:
ca:e2:74:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:17 2026 by rpki-client