Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142737.roa
File: AS142737.roa (raw, json)
Hash identifier: XBqexYobBcwHNSUxlVncSuv8Bm3TiyjSSNeAXuYLaF8=
Subject key identifier: CE:DF:EB:34:C8:11:D7:3F:A0:8D:49:F6:D5:54:F5:10:A7:F5:3B:50
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F4CF5442F0AD6D85DFEE795CB8A302F3CB1AA74
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142737.roa
Signing time: Mon 25 May 2026 01:38:39 +0000
ROA not before: Mon 25 May 2026 01:33:39 +0000
ROA not after: Mon 24 May 2027 01:38:39 +0000
asID: 142737
IP address blocks: 240a:a057::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:4c:f5:44:2f:0a:d6:d8:5d:fe:e7:95:cb:8a:30:2f:3c:b1:aa:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:39 2026 GMT
Not After : May 24 01:38:39 2027 GMT
Subject: CN=CEDFEB34C811D73FA08D49F6D554F510A7F53B50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:88:53:06:1c:78:e4:11:62:bd:f7:ba:63:
73:ca:5b:0b:ec:81:05:c5:dc:2f:1c:e5:59:88:a0:
99:7e:69:c9:c0:ca:a0:20:66:71:49:74:0d:3f:50:
ef:30:de:92:88:f6:30:fb:26:2f:4f:1c:62:4e:9d:
ab:58:2b:20:75:82:df:0b:e6:a6:0e:c5:f5:a9:4e:
fb:a9:09:7f:f6:02:2f:8a:d8:91:65:6b:7c:73:e8:
21:f6:47:3e:26:11:a3:62:06:3a:32:72:56:98:ba:
42:68:d9:67:d1:e1:99:6a:a9:a3:09:d1:11:12:da:
e5:14:54:97:91:10:03:df:51:f1:a6:fa:8d:94:1c:
63:29:d8:a6:2b:d3:84:ea:f0:f9:0b:da:e7:04:7f:
8c:d5:0e:aa:06:22:d4:3c:8c:f0:43:ab:11:70:ee:
f6:c7:46:93:12:c0:85:bb:3c:f1:d0:ed:7b:5b:64:
5f:e6:de:31:1a:d2:4c:79:c0:e2:7a:17:11:52:70:
3e:c0:3f:2b:3a:a3:de:62:cc:a7:fe:65:4c:24:bf:
c8:62:39:c6:df:1c:8e:b3:2d:c1:88:cb:25:16:f9:
28:d1:16:22:e7:dd:6e:e9:10:9b:3f:e5:37:2a:c9:
50:be:41:df:b5:12:a6:c6:56:10:64:bb:95:0b:bb:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DF:EB:34:C8:11:D7:3F:A0:8D:49:F6:D5:54:F5:10:A7:F5:3B:50
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a057::/32
Signature Algorithm: sha256WithRSAEncryption
a4:2e:65:22:51:a9:2c:d4:13:8c:95:b9:d4:09:86:59:e0:58:
dd:71:4f:fa:38:f2:8f:65:62:6e:ef:59:86:63:0d:d1:7d:4c:
7e:ed:b3:5e:5e:c9:b3:ef:70:8a:70:a7:29:e5:49:60:78:d9:
a2:c6:1e:1e:72:03:cd:47:89:84:9d:f4:9c:78:48:94:0a:e9:
a8:16:24:19:39:79:45:6a:aa:4e:42:47:7f:44:88:ad:02:84:
ef:3c:f6:45:08:7c:9a:d7:97:e3:55:9f:d6:fe:23:6a:74:1c:
e0:68:2c:73:47:db:9a:0c:31:20:c3:21:53:fd:24:e8:df:84:
c9:43:fb:58:cf:39:40:86:f0:cb:d1:84:74:a2:f4:4a:ea:03:
71:36:18:14:f0:e7:ec:7b:53:7e:ea:c3:cd:ac:36:a7:8e:03:
81:35:56:fb:bf:72:46:c9:bc:3b:be:68:fc:23:1d:52:80:89:
52:79:c6:21:42:bd:86:0b:7c:1b:69:98:f2:42:d2:46:40:5b:
89:f0:d8:60:e4:5c:c5:9f:54:ba:f9:d8:b3:4e:d4:ff:fc:95:
4e:51:3c:0c:4b:5c:69:fa:c6:88:ae:ec:67:82:8b:4a:77:a5:
a6:7e:d1:bf:c8:2e:8e:0e:0f:fa:60:d5:48:56:90:a8:a4:a3:
3b:ce:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:09 2026 by rpki-client