Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142749.roa
File: AS142749.roa (raw, json)
Hash identifier: KfraRyVzBJfBPYNe+HHrWaFZjcvGQ0Tdc9Dqe0OoQWU=
Subject key identifier: B7:15:41:BE:9A:52:5B:CA:CE:45:6E:C8:F9:E7:D0:68:BB:AE:4F:58
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 75AEBCA2C5F490C5CF2D1022428589280D2B89FB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142749.roa
Signing time: Fri 22 May 2026 06:05:17 +0000
ROA not before: Fri 22 May 2026 06:00:17 +0000
ROA not after: Fri 21 May 2027 06:05:17 +0000
asID: 142749
IP address blocks: 240a:a063::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ae:bc:a2:c5:f4:90:c5:cf:2d:10:22:42:85:89:28:0d:2b:89:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:17 2026 GMT
Not After : May 21 06:05:17 2027 GMT
Subject: CN=B71541BE9A525BCACE456EC8F9E7D068BBAE4F58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:23:58:e2:fc:06:4b:cb:f9:71:9c:5c:f6:
50:21:c2:39:70:1a:ed:93:6d:76:47:73:66:6e:3f:
07:c7:e7:b3:78:35:80:2d:79:bf:c9:0a:a0:3e:a2:
da:35:6b:e3:a5:44:97:37:77:35:6b:74:fa:97:db:
9d:dc:38:b0:05:a0:d2:3d:09:4e:32:9d:ee:14:34:
fb:56:fc:03:1b:a8:43:23:c0:f4:f8:2b:8b:14:d7:
85:a0:5f:f8:85:13:e2:fe:ed:a3:53:4e:1b:f5:f5:
00:60:89:a3:bd:bd:2b:0b:83:99:44:72:4d:a9:c5:
ee:04:e7:29:ed:89:a2:80:23:24:95:28:bb:3e:c4:
4b:3e:c8:49:f2:40:98:ce:56:92:76:f0:ee:05:5e:
00:ed:42:cb:ab:58:39:36:8e:05:bb:79:7e:9a:66:
98:b3:c1:ac:33:9c:52:c6:61:0c:6c:8a:37:fc:9f:
3e:75:b7:51:43:34:e5:c6:6e:1f:8b:a5:cc:8f:aa:
49:89:7a:67:5c:d7:7b:26:99:03:ca:21:f0:ec:aa:
ff:74:ca:0b:ea:f7:06:04:6f:d5:94:54:84:df:ae:
f9:26:24:7d:99:40:57:61:c5:6a:a6:56:1b:68:63:
bd:09:55:b4:b0:8b:bd:10:01:21:33:a5:d9:0f:50:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:15:41:BE:9A:52:5B:CA:CE:45:6E:C8:F9:E7:D0:68:BB:AE:4F:58
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142749.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a063::/32
Signature Algorithm: sha256WithRSAEncryption
7d:d9:68:6a:f4:d8:b0:ce:14:70:0f:18:58:a7:ac:c8:1e:1a:
70:bb:4a:0d:06:93:ae:4d:37:70:dd:80:4c:d6:f3:01:82:a7:
39:1b:06:79:7c:7b:8a:e6:50:34:78:07:d3:a8:e1:95:58:24:
63:80:11:ce:58:51:0d:1f:23:26:35:e7:f4:9b:9f:27:6d:35:
51:e2:e4:fe:bf:77:45:59:96:da:23:cf:30:62:ad:a7:cb:43:
be:c9:4e:d5:f2:d2:2d:45:29:29:c6:b8:54:de:55:c5:48:21:
da:6c:57:8b:be:33:fa:c9:97:a3:b7:fa:81:e1:1a:7b:a9:3a:
c6:09:35:9f:83:99:69:be:48:c1:8c:f5:5a:80:e0:de:fe:3d:
45:13:13:fe:da:a8:f4:91:9e:33:a9:bf:df:26:94:fc:6b:6e:
c0:e0:35:ba:30:e1:1b:90:f3:af:65:f6:43:19:d9:71:b5:91:
03:78:6f:d5:75:73:30:33:c2:a6:df:f0:25:9f:84:b1:a1:d3:
92:44:3f:b5:45:9f:a3:1b:6e:b5:8b:c4:a6:87:1b:10:cd:4f:
53:2f:7a:b3:46:67:fe:19:65:df:ee:ca:05:c9:5b:4d:23:15:
4d:1a:bd:f2:56:1a:a1:de:9e:f8:0d:a2:16:ba:62:cc:aa:ac:
a7:be:2e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:12 2026 by rpki-client