Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142703.roa
File: AS142703.roa (raw, json)
Hash identifier: slchZTrLiglHTxP8DKy6f/OwKHG5S4Vu7HXgdNCQPVw=
Subject key identifier: 65:7B:25:31:4E:A7:52:94:8D:BA:6A:2F:CA:74:AD:1A:32:A9:34:1A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 06FC75948E86C2F5C5B097C21C10511A4DC26236
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142703.roa
Signing time: Mon 25 May 2026 06:48:49 +0000
ROA not before: Mon 25 May 2026 06:43:49 +0000
ROA not after: Mon 24 May 2027 06:48:49 +0000
asID: 142703
IP address blocks: 240a:a035::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:fc:75:94:8e:86:c2:f5:c5:b0:97:c2:1c:10:51:1a:4d:c2:62:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:49 2026 GMT
Not After : May 24 06:48:49 2027 GMT
Subject: CN=657B25314EA752948DBA6A2FCA74AD1A32A9341A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:4d:dc:0b:7e:fe:2f:bc:08:57:d9:d0:40:
dc:1a:5e:43:5e:ee:27:06:40:f0:de:cf:05:61:fe:
80:d5:6c:c3:ea:8b:b3:63:83:07:60:34:af:41:75:
ef:a2:56:a3:18:6d:91:ec:a5:29:fc:c8:e7:b3:83:
80:8b:72:2e:41:98:0e:d0:fe:fe:ae:e1:3d:46:b4:
b2:75:34:41:6a:b3:77:7a:31:b4:42:c9:7c:11:f0:
7b:d0:84:e0:d5:5a:72:04:de:86:d5:10:0b:00:92:
5d:40:f6:11:99:f3:17:fb:0e:29:a7:e6:d4:7f:e4:
08:d9:f4:eb:c9:f0:3d:de:f1:ad:34:41:31:0c:0e:
98:ca:2d:26:c7:64:75:a2:6b:19:f3:bb:3e:33:9f:
ba:a4:2f:e0:66:0f:4f:3e:5b:c0:1b:1b:5e:54:dc:
ec:70:7b:e4:4b:b9:45:87:2d:8d:3a:c0:cf:d5:d0:
65:b0:6d:5f:c9:d5:37:f0:6d:05:fa:03:78:fe:db:
ed:9c:06:96:1a:ff:1c:33:61:40:53:f2:12:d0:8e:
bd:80:06:aa:54:28:ac:54:1b:db:c0:a6:dd:d2:4b:
98:a8:17:fb:b7:35:95:61:b9:a7:a6:c5:50:c4:f2:
6f:54:dc:c1:b1:9b:fe:7a:1a:80:0d:01:f4:7f:1f:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7B:25:31:4E:A7:52:94:8D:BA:6A:2F:CA:74:AD:1A:32:A9:34:1A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142703.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a035::/32
Signature Algorithm: sha256WithRSAEncryption
5a:c8:16:4f:86:93:f0:67:ba:74:a8:cf:15:27:2a:d5:46:c2:
e2:ef:5a:20:e5:b9:33:17:ac:b0:79:7b:de:42:76:a0:cb:f0:
4e:b1:6c:d6:23:55:b6:f1:c2:4c:5d:e5:19:38:cf:d2:9b:47:
17:da:36:4e:c4:5c:e7:81:68:6a:38:a4:78:85:b8:e2:4d:0f:
5d:e4:0c:31:22:4a:50:11:66:0d:fa:19:e3:d2:da:73:99:bd:
ab:02:14:e6:0d:d5:5f:7b:54:9d:8f:6a:4e:96:e7:1a:21:dc:
e3:9d:d8:d1:df:57:47:98:03:01:a6:c1:68:99:65:7a:85:42:
c2:81:aa:99:0e:66:eb:aa:2f:41:76:b3:d3:af:ae:55:c6:de:
71:8a:e7:a8:e0:1c:bc:d0:c8:0d:73:b9:ba:d7:5f:82:e0:20:
ea:79:b4:b5:0b:5c:77:3e:9f:b7:b4:0f:bb:5c:f1:68:bc:90:
68:56:73:58:92:5e:ca:da:da:f1:2f:44:9f:ac:92:da:1f:6f:
2d:31:e4:5f:1d:d4:90:9a:52:ef:7c:e0:45:08:db:a0:f4:54:
17:91:52:36:1d:60:6b:e1:07:41:ec:fc:72:0b:72:cd:05:ca:
9a:02:5e:c4:60:11:79:d6:cf:1e:87:58:b3:b6:37:e9:3c:87:
c4:47:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:06 2026 by rpki-client