Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142692.roa
File: AS142692.roa (raw, json)
Hash identifier: G5W2igc2T004jj6GnZC21U6BIHEKMjztqkuaVqiF9JE=
Subject key identifier: 17:4B:96:09:C7:03:17:7A:4E:76:48:03:D7:96:02:E4:79:74:00:5B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 240A96AB4C116DA2E49F11EE3708216F261FBCA1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142692.roa
Signing time: Fri 22 May 2026 04:07:52 +0000
ROA not before: Fri 22 May 2026 04:02:52 +0000
ROA not after: Fri 21 May 2027 04:07:52 +0000
asID: 142692
IP address blocks: 240a:a02a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0a:96:ab:4c:11:6d:a2:e4:9f:11:ee:37:08:21:6f:26:1f:bc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:52 2026 GMT
Not After : May 21 04:07:52 2027 GMT
Subject: CN=174B9609C703177A4E764803D79602E47974005B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:ed:e7:37:9f:e0:b7:44:2b:c9:86:98:46:
30:bd:db:90:57:a8:dd:8c:fe:ae:24:54:c4:3d:49:
08:50:66:7a:62:3c:9c:35:d8:bf:b2:cd:4a:75:84:
ec:eb:19:4b:00:16:a6:61:09:16:53:4c:a1:9c:07:
b4:d4:9e:9c:b0:ef:7a:0e:ea:f2:82:22:3b:76:29:
74:95:2d:31:00:6d:39:6a:5e:15:2e:62:d3:f0:15:
cf:ca:89:48:87:62:9e:af:24:da:dd:17:e5:19:51:
ea:43:76:8c:d4:b0:68:91:78:26:29:2d:60:12:3c:
96:4b:fb:b2:35:ee:0f:b1:c8:fc:6a:72:9a:4f:ed:
ce:f7:1b:7b:4a:71:1c:e6:e4:67:ba:82:0a:8b:a2:
ca:c0:e9:5e:06:b9:dc:6b:e0:da:90:a0:45:fd:36:
4a:7b:d5:cf:d6:e8:b1:1d:dd:af:87:75:86:1d:a2:
3a:45:8b:0f:84:62:1a:a7:84:7b:f4:f5:b5:7c:a3:
8c:45:03:b9:10:b1:dc:2e:e2:f9:7b:54:37:05:76:
51:be:f0:48:f1:ab:91:b8:af:c7:0b:d8:ce:a3:48:
95:3a:e1:5c:eb:a4:5a:ae:40:13:49:09:4b:d4:5e:
85:86:20:f8:e0:6b:d5:5e:33:e1:c5:aa:44:db:0a:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4B:96:09:C7:03:17:7A:4E:76:48:03:D7:96:02:E4:79:74:00:5B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142692.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a02a::/32
Signature Algorithm: sha256WithRSAEncryption
ad:6e:ac:0a:fc:b8:fe:2d:72:3a:d4:1f:5e:9d:3b:c8:a9:87:
92:58:ac:39:93:5d:06:d6:93:dd:8f:fc:cf:74:89:aa:e1:3d:
51:32:cf:7f:c6:fc:b0:11:c9:c9:34:eb:8d:96:ae:d8:ba:5d:
5b:93:4e:92:37:99:d7:c2:b7:ae:58:0a:7f:89:4f:c9:63:f1:
17:d3:5f:81:36:75:79:d6:76:1c:d2:2d:45:ee:ae:54:0f:8a:
eb:fd:c0:13:d6:6a:d4:e4:40:c2:47:b6:01:b7:b4:e9:a5:d0:
c0:b2:93:a0:bf:4a:8a:2f:15:32:37:19:4f:cc:31:6d:50:3e:
73:43:0b:d8:ef:ab:66:38:66:90:7c:28:87:76:f3:72:25:18:
36:57:0b:37:91:36:45:00:14:47:0a:47:45:b1:7f:ac:8b:b1:
a1:85:53:41:59:00:a8:90:af:53:e3:a3:ca:d5:41:9d:3d:27:
53:20:66:f1:c6:c0:8e:33:cd:2f:32:b3:4a:02:83:6e:ff:5b:
0e:8b:a7:d3:5e:91:6a:43:82:ca:40:f2:1e:54:b1:cd:2b:b0:
0c:1d:e9:1e:14:90:64:e1:51:d6:c1:c6:ba:2b:cf:bd:92:7a:
a9:83:7b:c5:7b:da:d2:48:9d:9f:3b:c2:15:65:36:26:dd:cb:
39:80:f0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:52 2026 by rpki-client