Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142686.roa
File: AS142686.roa (raw, json)
Hash identifier: ZRvC2YXuTbCx3mkd8LSHjLCpOHoHOJXDmUCGIioGgak=
Subject key identifier: 9A:38:BD:59:1F:45:4D:7E:F2:3F:7C:7A:45:6A:B7:48:B8:04:11:43
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5AF27A3487F9487BE160463DFB780026025AE347
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142686.roa
Signing time: Fri 22 May 2026 06:58:39 +0000
ROA not before: Fri 22 May 2026 06:53:39 +0000
ROA not after: Fri 21 May 2027 06:58:39 +0000
asID: 142686
IP address blocks: 240a:a024::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f2:7a:34:87:f9:48:7b:e1:60:46:3d:fb:78:00:26:02:5a:e3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:39 2026 GMT
Not After : May 21 06:58:39 2027 GMT
Subject: CN=9A38BD591F454D7EF23F7C7A456AB748B8041143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:4e:42:7c:cf:a6:c6:44:dc:3d:69:3d:0b:
55:dd:92:b1:f4:c9:90:60:4f:b8:4e:68:6c:90:e8:
02:4d:4d:33:bb:8d:3b:85:c6:4b:64:19:eb:15:44:
47:60:db:ef:11:b5:40:47:5a:f4:f2:9a:86:9f:27:
a6:09:0b:82:f2:2d:ea:80:b6:5b:34:c0:65:cb:5e:
12:5a:97:d7:6d:7c:18:65:31:2a:66:34:95:de:4b:
13:54:1e:11:a9:a6:db:92:ee:e7:c2:0d:06:cc:e6:
24:b0:a2:36:41:c3:1b:86:31:94:bc:be:47:b0:e9:
a4:ba:fa:06:44:f9:c0:38:7c:84:ea:74:11:81:3a:
17:f7:df:df:4f:b0:e0:47:8c:d9:64:e6:a0:a3:16:
84:b1:fe:8d:68:d3:38:e9:44:9e:8f:62:13:d1:81:
94:05:98:6d:70:26:d7:33:06:dd:34:d7:f9:45:77:
b5:06:df:de:b2:c4:1f:25:ad:7d:a8:3a:6b:5b:a2:
71:6e:ac:09:43:10:48:0b:5a:98:69:da:7d:34:fd:
c5:9b:35:63:b7:f2:b4:9c:3e:6a:e4:fa:c7:ae:09:
ee:09:17:76:ff:ce:8c:cb:c0:0a:d3:c2:2a:f1:34:
34:94:31:a9:1c:a5:c6:c2:49:77:89:db:36:da:4b:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:38:BD:59:1F:45:4D:7E:F2:3F:7C:7A:45:6A:B7:48:B8:04:11:43
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142686.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a024::/32
Signature Algorithm: sha256WithRSAEncryption
bb:18:a4:3b:9c:af:a8:18:c7:1d:fd:b4:d2:b6:74:ca:ab:c9:
1c:56:f8:a4:2d:21:59:20:e8:2e:fb:9e:e4:ec:79:a4:74:c7:
16:f9:21:a4:75:6c:5e:be:16:32:cd:5e:1c:27:db:a0:78:b5:
d8:80:f3:02:5a:0c:72:80:0c:0d:68:2f:e3:bd:18:cd:83:c0:
ad:7c:df:bb:cd:8a:69:e6:83:12:96:a1:c5:c2:a5:2f:25:74:
9c:39:02:a9:9e:91:a6:0d:3e:df:b5:fb:a6:53:31:88:27:19:
41:bf:c0:9c:20:9b:9e:81:07:3d:99:c7:b4:49:cb:8f:24:3e:
57:b4:ac:f9:01:b3:d2:e5:4e:fb:01:0b:fc:f6:47:8f:b9:d1:
5c:19:a1:ec:78:95:7c:ac:7e:80:25:19:46:ff:3a:25:d2:43:
49:ef:82:c7:e2:f0:e7:06:7f:2b:a7:1b:94:5d:0a:a5:8a:e3:
ba:ea:58:08:bc:d4:d0:3e:4f:ac:ca:64:c1:1e:d1:57:3e:0e:
17:b1:0b:60:9c:29:71:b2:25:59:d1:2e:c5:1a:61:ee:e3:15:
94:4c:7b:32:6c:8a:b7:b9:b3:9b:95:0f:64:bf:40:3e:06:96:
4f:8a:06:e0:ec:90:df:e9:55:3f:c0:5d:69:32:33:5e:3b:4f:
6e:9f:75:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:50 2026 by rpki-client