Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142693.roa
File: AS142693.roa (raw, json)
Hash identifier: fGuTwDRho8hdEHbdEY6YniOKhTKWJ2qJaqfX+F2yvyY=
Subject key identifier: 52:B4:DA:23:D8:F8:B3:BA:3E:79:F0:F6:6E:A8:F6:32:26:58:E2:57
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5A19F61C1144E03D3B1A18227BFBAB1CB2F087EB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142693.roa
Signing time: Fri 22 May 2026 04:26:56 +0000
ROA not before: Fri 22 May 2026 04:21:56 +0000
ROA not after: Fri 21 May 2027 04:26:56 +0000
asID: 142693
IP address blocks: 240a:a02b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:19:f6:1c:11:44:e0:3d:3b:1a:18:22:7b:fb:ab:1c:b2:f0:87:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:56 2026 GMT
Not After : May 21 04:26:56 2027 GMT
Subject: CN=52B4DA23D8F8B3BA3E79F0F66EA8F6322658E257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:fa:8b:c7:48:dd:15:a8:97:a9:26:2e:00:
9a:f1:20:9e:d9:21:be:1d:a2:fa:c6:40:cb:eb:09:
a5:54:0b:35:48:fa:7b:c1:e3:c0:b7:d4:23:b7:9a:
22:d9:0f:60:75:dd:cf:c2:22:ee:ad:d9:07:f0:f3:
ce:a5:af:41:04:cb:6f:d7:97:31:1c:57:f8:26:19:
47:40:43:92:c1:7d:a0:09:2b:f1:5c:47:c5:8d:97:
fb:a9:02:a6:5e:c7:f8:0a:ab:4e:ff:0f:b7:64:4f:
90:2c:51:ba:4d:c8:91:d0:b4:a6:e3:7e:3d:39:76:
01:80:30:b9:07:09:78:cc:78:ec:33:85:26:c9:3b:
ec:03:c1:fd:0c:70:6a:65:72:f3:9e:99:66:20:e5:
5a:45:0c:aa:da:db:4b:03:ae:61:b7:91:78:ab:4d:
d2:b0:41:be:c0:b6:6e:d2:0f:73:ad:38:2e:75:db:
32:78:15:b6:ba:f0:dd:af:c3:06:52:80:15:1a:22:
68:c5:1d:99:ad:98:6d:82:8d:09:ad:db:36:e4:2a:
d6:1b:fe:43:d5:34:03:7b:43:86:05:12:d3:2b:d7:
17:1f:4c:87:28:2e:0e:db:2b:9c:0d:d8:74:b9:07:
ad:e4:8d:fc:ca:c4:ad:23:82:64:fd:5e:fd:7a:e8:
cc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B4:DA:23:D8:F8:B3:BA:3E:79:F0:F6:6E:A8:F6:32:26:58:E2:57
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a02b::/32
Signature Algorithm: sha256WithRSAEncryption
17:c1:1d:63:69:e9:24:9a:2c:52:9f:d2:4a:7b:ae:24:dc:a8:
ea:99:92:96:1a:48:a5:14:ab:46:e2:34:38:04:a4:b4:c4:c4:
ab:70:2a:46:ad:e5:1b:c6:8e:9f:20:04:e7:c6:5d:5d:21:bb:
b7:50:3a:ab:cc:58:6d:9a:ab:a8:19:02:63:a8:28:44:fe:fa:
00:8c:91:a6:22:dc:99:ab:8a:f4:54:b0:34:70:6b:34:0f:c2:
d2:42:3d:b6:c4:57:19:31:e4:6c:0f:26:02:f5:5e:57:3d:47:
45:d6:bf:1d:d1:3e:c2:6b:be:6d:d0:0a:66:c3:56:9b:89:a1:
ca:aa:a5:9f:01:ff:1f:78:ec:66:fe:6b:fc:c6:f9:3e:cb:ea:
bf:06:30:fa:e8:36:22:10:cd:f9:6c:46:c8:c2:e2:ac:ed:cb:
2d:b9:8b:ba:e3:cd:ad:a3:8a:6d:1a:e2:c5:11:f4:43:7b:81:
b9:d5:81:ab:f6:d2:2a:33:53:ab:d3:58:07:6e:04:7c:99:a2:
c0:39:23:b5:69:94:ad:ed:94:c0:d6:c4:da:35:3d:18:0b:31:
39:b8:2b:05:31:91:73:d4:a3:cc:d2:b8:2e:49:a3:2f:3c:1f:
0f:9d:c4:8f:a7:a3:61:66:b7:b7:7d:c6:8f:5b:ca:a1:b4:29:
71:5c:df:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:38 2026 by rpki-client