Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142718.roa
File: AS142718.roa (raw, json)
Hash identifier: FZlOxkW6pBp93sshmrG+wdRe1RkR0gax8VG9OfRghVM=
Subject key identifier: D1:2C:13:3E:D9:07:55:FA:7D:15:B9:F7:82:60:6D:EE:7A:CC:F5:6A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 02857E3640841AD695E0EEC3A966BFA29E1C5E85
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142718.roa
Signing time: Mon 25 May 2026 03:19:48 +0000
ROA not before: Mon 25 May 2026 03:14:48 +0000
ROA not after: Mon 24 May 2027 03:19:48 +0000
asID: 142718
IP address blocks: 240a:a044::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:85:7e:36:40:84:1a:d6:95:e0:ee:c3:a9:66:bf:a2:9e:1c:5e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:48 2026 GMT
Not After : May 24 03:19:48 2027 GMT
Subject: CN=D12C133ED90755FA7D15B9F782606DEE7ACCF56A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:08:42:d8:90:ee:07:17:85:6f:4f:df:5a:
95:51:e1:26:58:58:b1:90:6d:0c:ae:9b:3b:51:f7:
f4:13:ca:9d:1d:8c:e4:96:99:ca:14:34:be:d5:37:
80:77:2b:2f:19:12:d9:bf:e1:29:0f:4b:27:2e:83:
15:ce:aa:3f:e0:e8:c3:d3:28:41:8c:ce:33:23:82:
91:d8:7c:64:8a:72:70:03:61:f9:8f:1c:a6:6f:8d:
b7:b3:a9:44:0c:a2:04:8e:bf:5d:7a:da:28:d4:b2:
a2:b5:a7:77:92:a3:e8:da:eb:e3:c3:d3:a5:d1:96:
57:ce:d8:df:80:c8:2f:30:43:93:e1:1a:a6:0f:01:
88:cd:35:3c:90:9a:02:b2:a2:43:aa:81:dc:b6:cc:
98:61:7d:fd:a5:fd:cc:b9:b7:12:73:88:33:2d:88:
7b:de:52:ab:4d:8e:30:56:d0:78:68:04:ea:e8:48:
23:98:dd:89:14:1f:3c:66:6f:62:93:b4:b1:bd:b4:
c0:61:5c:d6:6b:10:d3:e1:ec:95:0a:f9:f8:2e:26:
88:29:b7:44:07:de:e5:f9:b9:b1:fb:5e:bc:6f:96:
6c:5a:bb:10:5a:78:66:bd:4d:9f:fe:05:09:d0:b5:
a4:87:a6:b8:52:7e:27:93:96:ab:e2:4b:51:6e:be:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2C:13:3E:D9:07:55:FA:7D:15:B9:F7:82:60:6D:EE:7A:CC:F5:6A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142718.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a044::/32
Signature Algorithm: sha256WithRSAEncryption
b5:34:1e:19:9f:f9:e2:97:1a:5c:94:e5:c1:07:1f:42:5e:43:
23:a2:36:64:1e:84:3e:d4:41:b4:48:ff:69:a7:b1:6c:92:d5:
12:86:7d:2d:1c:78:95:5c:ba:76:26:ff:b0:4a:b2:40:37:d1:
80:32:52:1b:af:59:94:ad:bb:05:e8:67:95:b2:5b:04:af:c7:
ed:86:09:bc:1c:d4:8c:b4:3e:e8:15:02:36:2d:3a:4c:cb:c5:
43:9b:91:73:88:e4:b0:7a:44:68:aa:ad:0b:e8:85:38:15:44:
0a:d9:4c:cb:83:30:3c:87:7b:c6:96:53:ab:73:c9:92:93:b7:
0a:ab:a7:15:31:8b:3a:fa:c8:47:d3:d2:e4:72:00:07:06:b4:
99:de:8b:88:e3:05:fc:7d:27:e5:e9:45:ff:e5:6c:50:ec:c4:
31:48:48:15:37:5b:86:48:da:b1:f1:40:00:ec:5b:b6:43:28:
7f:85:5d:d4:5e:3c:bd:2f:cb:70:39:4d:68:87:3f:16:1f:a5:
16:fe:95:53:4f:05:da:64:a6:2d:e6:e0:7d:da:9d:1f:8c:29:
ea:7f:41:5d:3d:de:73:4e:de:77:25:89:4a:5a:bc:6c:a2:c1:
2c:97:79:5d:c3:f6:d7:c3:9c:07:51:a4:ad:96:06:c4:e9:5b:
08:65:98:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:00 2026 by rpki-client