Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142684.roa
File: AS142684.roa (raw, json)
Hash identifier: 5KCIgPNe4C6rmsntCzQm412jO1bK53OdhZKcGmaE3IQ=
Subject key identifier: 95:FA:9E:DF:20:B8:81:B4:C0:D2:27:20:04:59:F8:0F:E5:D0:A4:16
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7F2F70845421F1B2DA05E1833A557F4E1880D4EC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142684.roa
Signing time: Fri 22 May 2026 07:32:14 +0000
ROA not before: Fri 22 May 2026 07:27:14 +0000
ROA not after: Fri 21 May 2027 07:32:14 +0000
asID: 142684
IP address blocks: 240a:a022::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:2f:70:84:54:21:f1:b2:da:05:e1:83:3a:55:7f:4e:18:80:d4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:14 2026 GMT
Not After : May 21 07:32:14 2027 GMT
Subject: CN=95FA9EDF20B881B4C0D227200459F80FE5D0A416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:60:e0:47:dc:8e:38:77:38:9a:fd:5b:d9:
66:62:ad:10:b8:06:92:c6:8d:80:b0:2b:44:44:ae:
44:27:bc:bc:e5:04:f8:4a:37:e6:d4:a1:e2:84:00:
5a:4b:c5:34:e6:1c:35:21:b2:1a:c4:7f:bb:0b:9e:
26:cd:33:c7:2f:00:11:65:1e:93:80:0c:56:fa:3b:
61:14:9d:af:97:da:a3:00:58:ac:5d:d6:40:76:44:
f6:a5:d3:b8:2f:ca:a2:6b:00:2f:24:04:72:c4:fa:
66:a8:42:f4:b4:7f:33:ba:46:77:93:36:04:aa:87:
ac:a4:cc:03:9e:f2:7f:16:fa:60:02:eb:8a:06:09:
dd:7d:77:08:d3:94:c5:a5:36:91:65:5b:c9:4f:2c:
8c:f6:5c:b7:5e:d9:20:8f:da:b5:aa:08:ad:b1:9e:
b9:28:ff:66:a3:48:a9:2e:eb:d5:d3:16:27:7b:ba:
6d:76:a8:37:ce:c3:3e:66:2e:e8:ec:2a:7f:60:de:
d0:38:9b:93:03:5a:62:70:73:09:5e:a4:15:3d:c0:
31:09:69:ee:7b:5b:2a:c4:a4:a5:f9:d1:2b:89:7a:
5a:58:4f:a0:d5:d5:5d:ac:ed:d5:f3:a7:57:8c:31:
76:08:c9:ad:8c:b1:2b:e7:f9:76:0b:5c:c6:dc:89:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FA:9E:DF:20:B8:81:B4:C0:D2:27:20:04:59:F8:0F:E5:D0:A4:16
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142684.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a022::/32
Signature Algorithm: sha256WithRSAEncryption
19:5f:27:c1:a8:7c:89:bb:49:5f:d0:f8:e6:e8:cd:e7:c1:65:
a5:f9:1b:c3:52:e5:0a:6a:67:5b:ac:51:1e:81:23:c7:b6:c9:
1b:15:eb:a1:68:e5:7b:04:b2:80:ee:52:b1:c7:55:b3:88:b6:
dd:d3:f2:ad:77:9c:b0:c1:b2:5a:32:e0:1a:67:91:eb:05:75:
85:1f:7e:bd:a2:d3:8a:91:5a:ad:42:3e:77:95:fc:31:8a:08:
2e:b9:5d:dd:e3:21:76:ac:a6:94:9d:35:3b:03:a9:eb:8c:6c:
09:d5:b6:3a:82:4b:92:09:6f:fe:8f:38:da:82:ad:68:5e:7e:
9a:e9:84:87:79:c5:1c:7a:1f:02:0c:63:ff:26:8f:08:91:a6:
b9:77:49:75:59:62:34:db:e0:9f:bf:dd:31:45:ad:89:a7:d9:
28:de:ca:7b:d8:95:c2:1a:c9:38:c6:49:26:72:a6:d6:29:5e:
c1:b5:2c:2a:80:dc:58:f1:5b:af:31:a2:63:56:aa:76:ce:10:
0d:72:f0:7a:8e:f5:18:be:41:91:81:00:2b:a0:58:a1:0c:ca:
b2:35:c6:50:9c:68:e8:94:f9:73:4a:44:d7:4d:3a:b1:f9:b2:
80:93:fd:cc:14:c0:fa:b2:c6:cd:09:76:96:f6:e3:9a:ef:43:
eb:82:44:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:10 2026 by rpki-client