Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142732.roa
File: AS142732.roa (raw, json)
Hash identifier: awqU0O2LWVK29XSOe5VwMKtBkEvgYj/XE6s89AiDFOY=
Subject key identifier: FF:C7:1E:8B:E9:C4:2F:13:74:95:9B:26:F2:35:9B:75:9D:E1:C9:EC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 171A4BB8C093C5AE9871747361F14EA9783D91ED
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142732.roa
Signing time: Fri 22 May 2026 06:27:47 +0000
ROA not before: Fri 22 May 2026 06:22:47 +0000
ROA not after: Fri 21 May 2027 06:27:47 +0000
asID: 142732
IP address blocks: 240a:a052::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1a:4b:b8:c0:93:c5:ae:98:71:74:73:61:f1:4e:a9:78:3d:91:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:47 2026 GMT
Not After : May 21 06:27:47 2027 GMT
Subject: CN=FFC71E8BE9C42F1374959B26F2359B759DE1C9EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:86:26:c1:b1:a9:73:9e:d1:7d:55:c7:7e:
ff:fa:63:08:77:0d:2f:68:21:25:bc:d1:15:1d:bd:
8a:52:11:f1:7e:ff:37:dd:c7:90:ba:56:24:3a:51:
06:c9:90:67:5f:b9:37:80:8d:d3:4a:15:f9:b0:a3:
d1:33:9c:53:65:45:f3:c4:fa:0c:d1:51:cc:d8:6c:
43:35:46:26:d4:73:d4:dc:4f:6c:45:ba:3e:62:4a:
e1:69:1b:3c:f6:b3:ce:bd:85:d4:cd:79:26:0e:e9:
f6:82:4d:9e:b3:85:eb:fa:a8:84:df:c3:f0:a3:6a:
69:61:4c:ae:23:15:fb:6a:56:7f:0d:ec:6a:d8:4e:
98:20:ef:85:9d:c9:1b:c1:03:3d:28:78:41:72:5b:
d3:6c:a7:37:3c:ef:94:a7:d7:61:0a:22:9a:06:31:
04:5d:d9:73:c9:9a:c0:94:53:63:e2:61:33:af:57:
b2:79:6a:f6:a7:5a:dc:73:b8:fc:00:09:70:14:38:
c1:1b:79:c0:be:f9:cd:6b:5b:02:de:04:fa:df:cd:
ad:c7:5a:a1:c7:76:a2:0a:58:e1:17:50:e9:b1:b1:
88:20:3c:a7:77:a9:45:fd:ed:0e:7f:76:69:06:e2:
97:90:db:75:a7:d8:78:3f:63:7c:7a:e4:b8:75:1b:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:1E:8B:E9:C4:2F:13:74:95:9B:26:F2:35:9B:75:9D:E1:C9:EC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a052::/32
Signature Algorithm: sha256WithRSAEncryption
3b:e5:3f:36:4e:54:04:bd:0a:e8:13:d0:14:0d:ad:0c:63:29:
34:72:ef:78:e0:4e:0d:27:35:e3:5f:4a:bf:c9:8e:78:59:91:
14:d8:52:db:2a:6d:29:b6:0c:e9:19:ff:21:02:3c:6a:26:e7:
e0:ad:8f:ef:25:24:cb:98:05:85:96:ae:28:d4:bc:9e:07:61:
d3:6d:36:80:f1:3d:78:2b:f2:da:ee:4a:a6:ac:59:b3:6b:60:
a4:5f:45:28:37:d8:9e:db:d5:87:63:d1:12:57:65:68:d5:40:
25:c6:28:13:4d:fc:43:8f:8a:0a:2c:63:dd:c5:d2:e4:cd:31:
bb:2a:0a:1b:96:fa:4a:4f:a5:8f:7c:e7:ce:d8:84:7f:1b:79:
1e:e6:68:05:b2:92:99:34:66:dd:3c:78:cb:7a:91:b7:3b:74:
f8:f6:48:49:b8:b5:93:b0:3f:15:3f:97:dd:83:c9:8c:4c:2d:
5b:1c:1e:28:7c:55:34:8e:36:c6:92:62:ec:3c:e5:e9:8c:36:
0f:90:8a:17:c8:0f:96:fc:d4:24:52:25:1f:e5:2a:d9:57:6f:
4d:37:ae:2e:70:7b:e2:5f:e2:c9:02:ef:51:a3:0e:c4:44:3f:
16:cb:2e:fe:1f:ca:34:ab:13:ce:19:10:87:af:54:43:34:c5:
34:c6:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:13 2026 by rpki-client