Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142708.roa
File: AS142708.roa (raw, json)
Hash identifier: kN7r4vkPVP4aGKoGPanEn0BJxQA7ciZopovkJ2wCSxk=
Subject key identifier: C5:DE:A4:7A:4E:C6:41:C0:10:08:BF:48:01:50:66:D8:69:AD:9D:7F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 30AC4DD26AE21CDFC66542DFF3485853744E270F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142708.roa
Signing time: Mon 25 May 2026 01:38:26 +0000
ROA not before: Mon 25 May 2026 01:33:26 +0000
ROA not after: Mon 24 May 2027 01:38:26 +0000
asID: 142708
IP address blocks: 240a:a03a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ac:4d:d2:6a:e2:1c:df:c6:65:42:df:f3:48:58:53:74:4e:27:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:26 2026 GMT
Not After : May 24 01:38:26 2027 GMT
Subject: CN=C5DEA47A4EC641C01008BF48015066D869AD9D7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:f7:0c:67:20:0c:11:a2:a2:95:fa:f5:54:
d6:c8:48:5f:af:77:8c:85:ef:a6:02:db:ec:00:af:
c6:4e:32:d9:f9:7f:04:42:db:a3:a4:ad:50:d8:78:
aa:40:a5:d9:1a:7c:3d:56:45:c7:fa:14:ce:4f:8c:
f6:4b:ba:33:b3:31:69:55:78:59:77:07:91:14:0b:
19:a7:75:17:c1:7e:86:e2:e7:91:74:a7:c6:0e:61:
6a:29:ae:5f:ee:c6:2b:e2:8f:29:fe:75:72:1f:87:
52:49:6d:4f:1c:17:86:53:9c:9b:59:b6:90:e9:84:
a0:d7:54:69:a8:fb:f5:dd:89:6d:1f:4d:24:60:d8:
79:39:67:0b:a1:9d:8a:f9:a7:d5:3d:5a:96:35:66:
9f:c1:b4:8c:bd:d9:5d:20:f8:35:dc:72:2e:27:b3:
2a:69:b7:ba:69:52:04:51:fe:74:a5:1a:02:b2:2a:
26:40:57:3d:72:65:a0:40:f0:4e:05:cd:9f:f1:c3:
e3:62:9c:7e:ad:87:e7:1f:81:58:11:12:7d:c6:a5:
bd:08:ea:52:d2:10:2e:b8:4b:28:c3:b1:02:7c:38:
85:1c:70:97:7c:35:58:ad:46:a8:bc:d0:5c:ca:b1:
9e:e0:cd:33:de:25:2a:9a:a8:07:f4:31:1a:3d:1b:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DE:A4:7A:4E:C6:41:C0:10:08:BF:48:01:50:66:D8:69:AD:9D:7F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142708.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a03a::/32
Signature Algorithm: sha256WithRSAEncryption
6b:c5:51:cb:af:f5:68:ea:1b:7a:3e:68:8d:65:43:40:fe:ae:
ff:d5:30:fa:b3:a4:bc:e9:f6:32:67:7d:34:d3:d2:fb:60:cf:
72:76:cf:bb:15:15:89:e9:f9:ff:7b:b6:13:f7:8f:7e:a9:38:
e1:fa:93:d7:8b:c3:35:46:fd:72:b0:f8:b9:54:72:b9:bb:08:
91:27:e4:15:b2:47:7d:3e:5b:05:a6:a8:d9:f5:99:56:d9:73:
60:af:92:01:92:2f:bd:40:bd:b8:10:4a:17:95:c9:5e:35:4a:
fa:51:56:34:c6:94:4f:72:1e:67:cd:76:ec:32:85:07:a4:25:
ec:1c:8c:10:47:da:89:af:01:2a:da:03:84:68:ff:c6:c0:8a:
eb:94:4b:4e:09:a3:b8:54:9c:cb:20:04:e2:24:a0:52:5e:3e:
ef:37:b9:41:18:95:34:08:14:82:ee:b6:5c:d8:c8:f5:9a:25:
01:5b:0d:a7:9a:c4:82:cd:73:c5:c4:ce:2f:01:40:67:24:26:
56:a9:02:44:c3:e2:58:34:c9:ec:f0:6d:6e:fc:fb:2d:04:7e:
ed:2b:ae:f0:46:12:f4:77:67:55:7b:95:83:8e:d7:b6:ea:3a:
42:2c:7a:c8:35:20:3a:86:99:e1:6c:22:69:dc:6c:89:d3:8b:
0e:5d:f3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:56 2026 by rpki-client