Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142743.roa
File: AS142743.roa (raw, json)
Hash identifier: BQzmjsQrKCAdF8PxJ+764558W9T7+vHNPha4Eb8Z4ZE=
Subject key identifier: 01:92:16:AF:90:0F:D1:59:80:1D:BF:60:AB:23:57:45:F8:F8:50:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: B0F66525B28E6D949A3BB47133E643F83D750D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142743.roa
Signing time: Fri 22 May 2026 07:09:18 +0000
ROA not before: Fri 22 May 2026 07:04:18 +0000
ROA not after: Fri 21 May 2027 07:09:18 +0000
asID: 142743
IP address blocks: 240a:a05d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b0:f6:65:25:b2:8e:6d:94:9a:3b:b4:71:33:e6:43:f8:3d:75:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:18 2026 GMT
Not After : May 21 07:09:18 2027 GMT
Subject: CN=019216AF900FD159801DBF60AB235745F8F85017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:74:40:ce:76:e6:4c:d8:2b:21:b1:2e:49:
b8:79:92:6d:bc:7c:d6:3c:32:d9:34:dd:4d:4b:c1:
35:48:6d:29:b5:32:41:4b:dd:bf:5b:62:61:7b:73:
57:1e:47:35:8e:e7:80:59:89:7a:24:ce:78:82:e0:
07:72:93:3f:e0:94:fb:44:2a:69:da:3d:69:42:27:
7b:44:ab:68:b3:a7:a8:50:36:3e:01:d9:01:a3:ef:
ae:8c:96:7d:ca:6d:79:b9:a8:25:95:ce:3a:a4:29:
d4:33:fa:55:13:a4:30:b8:d6:97:e1:de:14:ba:04:
4d:c8:a4:97:fe:a2:46:72:d9:5c:aa:ae:fc:4f:80:
58:50:a6:20:4e:9f:e4:99:8b:97:25:44:88:57:ad:
e5:e0:d8:93:5d:47:30:a6:26:ae:14:94:33:6d:e7:
91:1f:a7:53:7d:2b:1b:37:d1:d7:57:fb:7e:ba:6e:
85:1b:37:e1:ef:fc:0d:a6:78:27:63:2d:81:7b:f2:
9f:62:75:d3:17:52:94:eb:43:01:fb:ba:66:b9:fb:
d9:71:a3:ae:9b:c6:7b:f1:a1:ab:3c:a5:73:19:41:
3d:d9:e4:10:3d:e3:6e:5e:92:16:8b:0a:71:9c:56:
1d:2d:65:67:dc:12:55:9c:46:0f:ee:4b:d7:2b:2d:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:92:16:AF:90:0F:D1:59:80:1D:BF:60:AB:23:57:45:F8:F8:50:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142743.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a05d::/32
Signature Algorithm: sha256WithRSAEncryption
57:ab:a0:0b:9a:27:ee:d2:59:e6:92:00:cf:76:b6:31:15:32:
3c:f3:87:7f:a2:df:7f:20:16:2f:dc:48:27:7b:59:be:1c:4a:
b8:14:73:ed:ae:3d:d7:86:28:46:24:78:aa:d9:26:1d:0b:c0:
55:ba:04:67:a9:ba:ee:3f:ab:e2:28:d8:61:f0:b7:8f:c4:3c:
9a:6b:a6:95:29:f8:73:6f:02:47:76:de:bd:0d:f9:99:0b:19:
c8:bf:f0:c8:b0:54:69:f7:f5:c7:31:8f:be:9a:e1:60:27:06:
d3:d4:9c:92:c2:63:59:e1:96:11:15:51:6e:16:c5:9c:53:f5:
81:10:73:a1:e4:13:ab:77:e8:78:06:4d:ab:57:06:24:d1:9e:
79:2c:d3:2a:c9:2a:a2:06:18:b0:50:00:61:00:f0:1e:8c:69:
42:4a:da:73:85:97:13:f9:90:ed:76:21:e4:b1:a1:fb:c5:a5:
93:17:4d:4a:db:e0:1f:eb:1e:09:31:c3:14:67:16:5c:cf:6e:
bc:09:ed:d4:e5:5e:c7:43:d2:c7:4f:7e:12:66:b1:c4:a1:2e:
bf:61:fa:0f:48:96:51:60:af:c9:52:f7:0d:39:c9:a3:63:7d:
25:27:07:a5:63:00:47:42:b0:1f:29:c1:8d:e9:cb:e2:d3:ad:
89:5d:14:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:19 2026 by rpki-client