Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142722.roa
File: AS142722.roa (raw, json)
Hash identifier: 7Z4UE12gvK9Hp8I+FcnoqaJ7GwKGQTrg+nYjfKfYieY=
Subject key identifier: 65:CD:9E:54:FA:E2:AF:3B:2A:D4:4F:E9:41:79:F7:64:70:A4:59:93
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6A14CC77989019C271A7261856BFFFB4B446F5C4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142722.roa
Signing time: Fri 22 May 2026 07:32:02 +0000
ROA not before: Fri 22 May 2026 07:27:02 +0000
ROA not after: Fri 21 May 2027 07:32:02 +0000
asID: 142722
IP address blocks: 240a:a048::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:14:cc:77:98:90:19:c2:71:a7:26:18:56:bf:ff:b4:b4:46:f5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:02 2026 GMT
Not After : May 21 07:32:02 2027 GMT
Subject: CN=65CD9E54FAE2AF3B2AD44FE94179F76470A45993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:ac:f4:51:e2:36:ee:7b:7a:84:d5:ad:69:
8b:b2:2c:db:fb:1a:9a:d4:bd:27:6a:02:d3:90:23:
62:32:e7:18:6d:64:fc:3f:e6:2c:a9:c1:15:07:3e:
e4:d4:cd:5c:d4:09:51:de:d7:f7:3f:c3:4e:3d:c2:
2f:83:70:9d:d8:77:93:f6:25:03:14:2b:95:2e:cb:
21:5d:4d:ff:06:4b:d8:d3:14:38:7b:f0:42:05:86:
67:b6:fe:60:3b:c5:9c:4c:0a:c2:db:5c:06:c1:ee:
68:ac:0a:3a:17:55:a8:f4:1f:2a:7d:22:17:9f:76:
77:5b:59:45:2a:b3:52:b1:e4:87:15:0b:b0:55:68:
6a:7d:33:6f:9a:d0:75:08:99:cc:e6:60:33:b4:a4:
99:20:1a:9b:d4:bb:9e:5c:08:87:03:92:7a:af:02:
38:48:83:0a:1f:19:dc:f4:00:3e:dd:2d:56:93:08:
18:15:6f:23:f1:3e:c2:7f:08:b8:7d:8b:ea:c5:cb:
4f:99:71:26:68:b1:24:e0:b7:48:27:70:68:03:0b:
2f:0c:b4:1b:d9:0c:d7:1a:d0:e5:48:a7:f0:d5:a9:
16:e5:82:50:65:4c:5d:14:fe:68:45:1c:1a:b9:17:
d2:cd:9e:3b:4a:0e:5a:de:51:4e:04:4f:3e:9e:39:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CD:9E:54:FA:E2:AF:3B:2A:D4:4F:E9:41:79:F7:64:70:A4:59:93
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142722.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a048::/32
Signature Algorithm: sha256WithRSAEncryption
12:7e:cf:af:77:01:28:27:7f:55:08:03:09:2e:3a:36:ac:81:
a7:f7:10:3a:c7:a4:ad:a0:c0:08:e3:38:17:4b:a0:1b:b6:61:
25:3d:c6:e7:2b:a5:82:3a:26:00:89:ae:f1:d2:45:95:c3:aa:
5b:32:ae:02:79:ab:fc:e6:3b:0d:94:46:df:3f:9b:b3:3d:8c:
b7:fa:22:78:da:6f:34:3d:3e:aa:c0:20:02:8c:ed:b5:cd:c6:
22:94:b7:d2:fb:de:22:d2:e6:e2:1a:b8:6a:03:6e:08:92:dd:
d8:f6:26:5b:99:46:87:1c:ca:88:9f:cb:f6:31:6c:12:f7:eb:
10:ea:84:b6:6a:5d:f8:78:8f:78:53:a8:b6:bb:56:c3:2e:4b:
80:a6:fa:f7:09:c8:d4:56:04:33:e0:82:e5:91:d4:ba:88:13:
94:46:15:30:4e:9a:60:09:e1:5a:12:fe:06:1e:31:31:18:fc:
71:10:00:54:ea:f6:29:7f:e6:98:c8:7a:39:5f:cf:39:95:2b:
eb:e2:60:0f:84:69:6c:ac:15:7f:08:d5:3e:5a:bf:8d:2d:65:
e7:ef:5e:c6:db:08:10:b3:96:78:7b:b8:64:79:50:52:d2:42:
0d:f0:a4:64:06:fd:cf:56:4a:fa:80:7d:71:7a:c3:79:33:bc:
bd:ef:22:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:33 2026 by rpki-client