Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142694.roa
File: AS142694.roa (raw, json)
Hash identifier: lHCUx4JcjNFHx3MOTs7p9w0lJVQJjtIxrfMWCc2PE9c=
Subject key identifier: 02:FF:18:29:81:4C:EE:BA:2D:AF:24:C3:5E:FE:3E:5F:9B:A7:E3:6E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6A81AD9CC9FA57365CA7B9CEFEEA421D78B05A73
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142694.roa
Signing time: Fri 22 May 2026 06:58:32 +0000
ROA not before: Fri 22 May 2026 06:53:32 +0000
ROA not after: Fri 21 May 2027 06:58:32 +0000
asID: 142694
IP address blocks: 240a:a02c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:81:ad:9c:c9:fa:57:36:5c:a7:b9:ce:fe:ea:42:1d:78:b0:5a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:32 2026 GMT
Not After : May 21 06:58:32 2027 GMT
Subject: CN=02FF1829814CEEBA2DAF24C35EFE3E5F9BA7E36E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:7e:d2:ed:6c:50:ec:0d:8d:b8:f0:de:c9:
38:1d:d0:33:71:02:e7:9c:6c:2c:4c:56:03:d0:4f:
57:46:b5:e8:40:c8:2a:51:61:d5:0e:83:8f:b3:68:
43:00:32:b8:4f:85:16:1e:aa:36:96:9f:bd:05:11:
12:f5:f2:03:87:8f:00:90:11:ae:7b:2b:4c:d8:87:
a0:f8:2b:85:81:67:b2:a1:b4:9c:aa:43:4d:75:dc:
24:5e:d4:a6:33:97:dd:8b:4f:cc:34:fc:63:11:b6:
5f:58:66:ec:e9:35:d3:e8:06:83:68:a9:1b:af:cb:
2a:68:32:10:85:2a:66:48:8e:32:4c:3e:d2:8f:87:
c2:f0:c8:87:c6:4a:5d:12:5e:d9:65:e3:6a:b7:44:
85:28:be:97:0d:23:2c:4b:18:41:52:7e:a6:0d:2b:
a5:02:91:96:b9:68:f5:71:ff:98:ce:b8:e6:f4:d0:
74:66:22:01:6f:01:0c:83:25:b5:5d:f1:c1:57:17:
24:24:d3:09:7c:57:6a:93:55:7f:2e:d2:92:40:4c:
3a:39:a8:d4:5e:22:fd:66:0e:c8:31:c1:d6:b6:32:
9c:33:0a:00:a3:4e:81:75:98:d4:5c:70:23:f0:10:
20:94:f5:86:48:0b:ff:0a:d7:b9:06:57:87:3b:9e:
0f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FF:18:29:81:4C:EE:BA:2D:AF:24:C3:5E:FE:3E:5F:9B:A7:E3:6E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142694.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a02c::/32
Signature Algorithm: sha256WithRSAEncryption
0c:64:32:e7:2e:f2:a7:72:5c:bb:80:0d:c2:4b:06:59:ee:09:
bc:5f:3c:fa:76:f8:fa:4a:d7:c7:71:31:fe:88:9a:b6:08:17:
f0:8c:16:56:ad:3e:98:67:92:36:75:19:82:74:52:49:d9:c6:
f9:88:52:3d:54:97:eb:07:22:42:0c:9f:dd:36:48:32:ca:d7:
f8:11:5b:80:f2:52:0c:34:cc:9d:42:1a:9b:c5:e3:13:4b:1b:
e7:fc:57:20:ad:f5:95:5d:4d:36:e1:0b:47:59:85:8b:7d:fc:
28:ca:38:ec:a8:68:bd:55:26:29:a9:13:fa:fc:3e:49:59:34:
ec:71:1c:9a:ec:1d:33:34:a9:75:fd:8d:5e:94:01:72:d8:68:
ac:2f:3d:3c:55:70:e3:87:62:67:15:05:80:fa:01:88:2f:40:
c5:03:83:68:72:60:34:b0:25:47:e3:51:bc:a4:5e:9a:de:bb:
cc:f1:8c:ad:27:a5:27:a2:f1:5a:29:02:37:ab:41:81:8e:cf:
f6:f7:91:0d:35:2d:7b:45:27:5a:d1:f9:ef:68:cf:32:96:0a:
eb:74:f1:fa:d3:61:2c:56:64:d7:78:ff:ea:c7:0a:d8:90:76:
1c:da:a2:06:71:f0:7b:49:ea:a3:7c:33:a9:39:01:3e:e4:cb:
6c:e2:49:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:06 2026 by rpki-client