Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142720.roa
File: AS142720.roa (raw, json)
Hash identifier: uXoBD5awwTtvMleMNOQKvIjOZiq82/xPUK6+tcku0I0=
Subject key identifier: 7F:87:4A:23:83:05:99:6B:47:B3:8F:6D:B3:5F:88:97:46:82:D5:92
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1B72CBCCC24E190C12D3FC3177DC80CE4735C165
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142720.roa
Signing time: Tue 26 May 2026 02:35:08 +0000
ROA not before: Tue 26 May 2026 02:30:08 +0000
ROA not after: Tue 25 May 2027 02:35:08 +0000
asID: 142720
IP address blocks: 240a:a046::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:72:cb:cc:c2:4e:19:0c:12:d3:fc:31:77:dc:80:ce:47:35:c1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:08 2026 GMT
Not After : May 25 02:35:08 2027 GMT
Subject: CN=7F874A238305996B47B38F6DB35F88974682D592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:db:b4:f7:ff:e0:25:8c:8b:1e:4e:2f:42:
62:3a:4a:81:7b:ba:c9:63:96:06:1a:9c:89:ae:b0:
ee:85:c3:34:8b:ef:11:f7:3e:e6:5c:b6:45:4e:ea:
6f:12:4a:e6:21:b6:f3:23:3e:da:2f:36:93:ae:1b:
00:a4:50:0a:db:8f:70:e3:b1:96:98:ef:d8:24:91:
93:97:d9:5a:b0:bf:24:8f:be:91:91:77:26:86:d3:
17:2b:1a:95:dc:b8:42:84:39:82:46:6e:9b:f4:05:
ce:6e:12:7e:8c:93:43:38:df:d2:f7:6d:7a:28:09:
b0:3d:0f:8a:78:c6:fa:61:46:0d:95:1b:da:1a:c6:
ce:24:f3:e0:a9:c0:cc:44:23:d9:13:0f:04:17:05:
d7:87:1f:db:f7:6c:98:d2:56:a5:b6:83:3e:ef:a2:
32:60:7b:ea:ac:9e:21:1d:72:6e:71:83:ab:8a:7a:
79:ee:92:2c:19:8a:66:06:19:63:f4:0f:96:1c:ef:
6e:1e:00:4f:57:02:37:53:8a:3a:3b:83:df:16:56:
0a:0e:95:4b:81:4e:47:dd:87:50:ac:10:75:c6:eb:
c9:e5:d7:8b:d9:f6:3a:fc:c9:0a:66:fa:01:75:cf:
e9:0b:10:13:a0:24:23:5c:e0:43:e3:2a:eb:fb:62:
4a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:87:4A:23:83:05:99:6B:47:B3:8F:6D:B3:5F:88:97:46:82:D5:92
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142720.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a046::/32
Signature Algorithm: sha256WithRSAEncryption
4f:5e:6b:b9:02:91:3c:1b:56:f7:76:f5:ec:4a:b8:2a:60:7e:
3a:1a:52:b9:8b:fc:4a:fc:53:78:73:b4:12:c0:db:44:a2:ce:
3a:48:01:7c:ff:c6:8a:6f:ca:24:41:15:8d:95:97:a5:8f:92:
ae:f9:79:43:58:25:7e:cf:74:6b:9c:74:83:a9:97:16:9b:a6:
e2:96:b3:5b:9c:84:e0:1f:e5:b6:ec:3b:92:5b:79:22:b4:32:
4a:52:e7:d0:87:05:55:35:07:d4:2a:f5:a7:32:7e:8b:81:04:
77:4e:0e:cd:8f:12:4e:45:ff:68:71:2c:f4:94:8e:f2:84:3a:
5f:76:1c:fc:f7:81:da:a7:17:bb:3a:68:e7:5b:8a:86:ba:4d:
cf:56:a1:bf:32:81:48:5c:b8:a3:0a:6f:03:3e:e3:b1:ed:6b:
0f:28:7b:cd:dc:2a:aa:1d:11:a7:63:1c:ff:e6:36:d2:bc:1e:
11:77:1c:a2:4b:2d:2b:26:53:c2:aa:55:a9:a0:72:c5:66:86:
be:88:2a:9e:97:43:dd:92:e9:b6:62:20:c0:eb:60:a3:25:b7:
fa:af:b3:31:5b:6b:60:63:2f:63:43:27:0a:9c:46:4a:cb:91:
e7:29:7f:31:72:0b:c3:4d:59:7e:2c:6b:44:0a:51:04:16:59:
4c:01:42:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:07 2026 by rpki-client