Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142748.roa
File: AS142748.roa (raw, json)
Hash identifier: ZvvzGFNreTQcw1whLTSSYHF6i8A1FvJtrnV9OfCuLCw=
Subject key identifier: 32:D3:23:4F:6C:99:46:13:CD:A0:8E:B4:13:A2:30:A3:D8:DE:A9:E4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1F24BF25676C104E2DCE9B7C84CEF83ECBC45B9C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142748.roa
Signing time: Fri 22 May 2026 07:41:02 +0000
ROA not before: Fri 22 May 2026 07:36:02 +0000
ROA not after: Fri 21 May 2027 07:41:02 +0000
asID: 142748
IP address blocks: 240a:a062::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:24:bf:25:67:6c:10:4e:2d:ce:9b:7c:84:ce:f8:3e:cb:c4:5b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:02 2026 GMT
Not After : May 21 07:41:02 2027 GMT
Subject: CN=32D3234F6C994613CDA08EB413A230A3D8DEA9E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7c:56:03:f4:cd:89:d7:cc:83:e0:e6:20:e5:
3c:36:94:b6:9a:df:5a:53:f8:35:d7:4a:01:a3:10:
15:71:29:fe:cc:66:01:70:2f:99:0f:68:24:5f:54:
30:af:87:92:94:27:c5:63:3e:16:d2:e8:46:7c:50:
be:0f:59:f1:50:70:d3:e6:a2:ce:7c:1f:a0:e7:79:
33:d9:e2:0f:7e:b1:67:18:1b:bb:d3:38:19:0b:e5:
99:f1:e7:06:9f:f8:ef:fb:e1:1a:fe:d8:dc:03:26:
09:b2:88:c3:1a:b5:12:68:0f:d7:e3:d7:c6:46:07:
ed:ee:29:ac:8c:02:2b:af:1a:e7:73:a8:87:a4:70:
b4:46:56:ff:9f:85:76:e3:18:aa:23:61:98:22:0b:
10:8a:80:fe:68:8b:6d:6d:51:07:1e:2c:74:6d:2c:
fe:3d:f3:00:54:c8:45:81:63:ff:3f:80:58:ef:df:
3c:aa:58:e6:54:21:89:92:81:62:e5:8e:43:82:a1:
08:3f:42:77:ca:bb:90:8e:af:bd:3c:aa:66:2d:c6:
a0:f8:ca:4b:06:ad:8d:ed:ee:43:82:c4:0d:81:37:
4a:6e:d3:8b:dd:db:89:a8:bf:f5:0b:21:41:cc:3f:
93:a7:e9:32:95:49:65:ab:b2:2d:93:e3:ba:7d:6a:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:23:4F:6C:99:46:13:CD:A0:8E:B4:13:A2:30:A3:D8:DE:A9:E4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142748.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a062::/32
Signature Algorithm: sha256WithRSAEncryption
ad:fe:cf:c3:76:97:2c:30:08:66:7c:3a:84:09:42:9b:90:2c:
90:bc:79:8c:a3:80:65:2d:be:ab:8a:1b:29:05:8c:e0:78:47:
9d:d9:8f:f9:83:d1:3d:72:a7:42:6b:ad:f3:fb:7b:97:15:90:
8b:d2:e7:9b:b4:60:50:e0:c7:5a:13:c4:5d:68:10:31:d5:97:
e1:81:b0:86:53:0e:f2:52:15:38:9d:e2:5a:42:da:9c:61:24:
bf:c9:5a:17:d0:93:83:7b:22:b6:2d:40:9c:95:a7:e9:8e:f1:
fc:dc:4b:8e:83:39:2b:ae:a5:bc:b5:a7:94:3b:dc:c7:a0:16:
4c:fd:6d:f9:8f:42:b7:67:f2:56:44:98:45:e7:c3:cf:5a:18:
4c:a1:37:dc:a8:68:74:16:47:c9:7e:e9:b3:b9:5f:90:b2:f6:
cb:56:31:6c:13:49:4f:a3:c6:b6:d5:53:46:7e:1a:20:20:b0:
32:8c:4e:7a:34:19:dd:31:e8:63:61:1e:e5:09:e9:92:9b:df:
d9:19:94:e3:ac:3e:db:6a:1a:43:a3:fe:b8:b2:ce:ad:64:e6:
44:63:35:44:25:83:1c:01:f1:73:bf:ea:2d:85:a3:ca:17:83:
a2:e8:87:94:ab:cf:d4:38:f2:74:46:c3:7e:35:f4:2a:03:8f:
7d:34:e2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:02 2026 by rpki-client