Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142729.roa
File: AS142729.roa (raw, json)
Hash identifier: 2oPNBGNU6B5m6Klgbmy8EdiH0pG7/8TlRGt8QOwuVt4=
Subject key identifier: 2D:5A:FF:22:08:75:08:1B:17:FB:E9:B1:F1:0D:BA:82:D6:70:05:9E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 60267D783B2EE8E354B2F1CC771297AAA0E36936
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142729.roa
Signing time: Mon 25 May 2026 01:38:27 +0000
ROA not before: Mon 25 May 2026 01:33:27 +0000
ROA not after: Mon 24 May 2027 01:38:27 +0000
asID: 142729
IP address blocks: 240a:a04f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:26:7d:78:3b:2e:e8:e3:54:b2:f1:cc:77:12:97:aa:a0:e3:69:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:27 2026 GMT
Not After : May 24 01:38:27 2027 GMT
Subject: CN=2D5AFF220875081B17FBE9B1F10DBA82D670059E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c6:fa:e3:39:25:8c:a9:ef:c0:8d:d3:8f:19:
4e:11:02:42:2c:f3:32:0c:c7:d8:77:67:3f:71:f1:
e0:95:11:b0:84:d6:37:e2:08:4b:ae:d0:76:e6:3f:
6e:65:79:15:c9:7a:14:fb:79:74:8a:a1:fe:dd:b1:
3a:a4:1e:21:d0:b9:89:22:9c:a2:d3:2d:a2:48:26:
18:e5:06:90:06:e9:16:2e:13:13:d8:72:6a:c4:2c:
6e:df:24:5b:23:8e:e6:34:51:97:20:39:c1:56:45:
3f:a2:83:03:df:85:c3:9d:ef:d6:fc:3d:c7:73:67:
e8:9c:44:c8:27:a7:10:24:d2:a6:f6:1b:44:2b:94:
e8:3d:95:d1:33:dc:03:f8:b5:1c:6a:c3:66:0b:38:
e3:e2:18:3c:c5:12:3f:e9:1d:35:95:a3:07:e3:db:
e7:f7:9b:3d:7b:93:d9:56:93:67:16:48:3b:76:b9:
e3:55:45:19:7d:c1:b5:0f:3d:1b:f2:c3:78:5a:cd:
fb:17:8e:5e:9c:75:57:eb:bf:1e:b5:10:8c:14:61:
19:f6:09:e3:be:38:72:2b:7f:30:4c:3d:65:26:d1:
80:4c:dd:b9:1a:c2:b9:62:df:91:6b:6f:f3:1b:54:
54:04:93:a4:f6:0f:d1:45:fd:51:b3:49:9a:2f:89:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5A:FF:22:08:75:08:1B:17:FB:E9:B1:F1:0D:BA:82:D6:70:05:9E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142729.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a04f::/32
Signature Algorithm: sha256WithRSAEncryption
4f:cf:38:83:77:9a:ad:d5:b4:94:7d:12:f0:07:51:10:29:f9:
f6:4c:9f:57:f3:86:0a:db:fb:61:d0:d6:6c:26:29:72:f5:48:
60:9f:42:c7:ec:a7:25:e0:e2:e7:7e:39:c4:44:cb:08:d8:b4:
2f:90:a0:80:59:69:16:b9:66:aa:cf:ab:34:63:e6:96:8e:96:
f5:02:2f:f7:f2:83:b8:0a:29:1f:e2:17:b9:db:fc:f2:b4:ef:
91:33:92:13:97:1e:4c:f5:40:c4:ba:96:20:9f:87:24:28:9f:
01:2d:43:bc:f6:dc:05:e9:94:7b:48:5b:ee:2f:10:97:d6:ba:
3b:a9:76:50:9d:2e:57:6c:50:13:cf:4c:8c:69:e7:4e:b5:d1:
4b:11:f2:3b:bc:1d:e5:9d:ec:b2:ae:34:f7:4c:80:06:a0:56:
db:c2:83:63:c4:f3:16:4f:f2:6e:81:36:ef:c3:c4:76:ee:ad:
31:03:ee:f5:eb:a8:43:45:30:e8:15:ad:3d:f8:a0:14:99:c8:
b4:2b:4f:78:c8:c5:da:3b:70:48:e6:fc:11:d1:61:ab:32:26:
91:d8:e5:68:dd:82:f7:a3:95:cb:d8:2e:24:e1:2e:99:7a:bf:
f7:cc:dc:ee:6a:d0:74:7a:bb:f0:5b:bc:2c:71:ef:8e:ef:b4:
f8:0d:06:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:42 2026 by rpki-client