Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142750.roa
File: AS142750.roa (raw, json)
Hash identifier: v+pigJzhY8sJP1vXOTJfDbjqqG/GO7HStAatzpJAiBc=
Subject key identifier: 5F:29:56:58:68:89:B9:2C:3C:53:25:6B:CE:FE:D0:A1:1F:61:BB:CD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 22154FAEB66D07D47AD7E51FF28F3200D9D2A4FD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142750.roa
Signing time: Tue 26 May 2026 06:30:49 +0000
ROA not before: Tue 26 May 2026 06:25:49 +0000
ROA not after: Tue 25 May 2027 06:30:49 +0000
asID: 142750
IP address blocks: 240a:a064::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:15:4f:ae:b6:6d:07:d4:7a:d7:e5:1f:f2:8f:32:00:d9:d2:a4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:49 2026 GMT
Not After : May 25 06:30:49 2027 GMT
Subject: CN=5F2956586889B92C3C53256BCEFED0A11F61BBCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:4a:6e:27:70:27:1d:f0:d7:3c:30:e8:df:
96:fb:93:9d:37:9c:4e:80:64:54:9c:19:44:b2:c9:
18:48:61:47:36:9c:af:bf:ac:b6:2f:7b:a2:d4:33:
73:90:12:53:60:95:14:10:a4:fc:98:28:2c:42:97:
93:3e:ee:49:27:9b:61:05:83:a4:c6:46:85:d5:3b:
9f:e8:5c:ef:13:87:3e:29:a6:17:10:1a:fa:0a:eb:
62:84:69:7d:72:97:34:ae:31:5b:ea:68:80:60:e0:
5d:ea:7b:49:30:a5:fd:50:db:07:59:72:3b:3f:a3:
59:37:89:58:4e:a7:0f:c2:8d:a5:17:3d:47:28:0b:
0d:58:4a:31:67:bf:1f:da:13:90:30:a3:24:9d:76:
18:72:64:63:cc:86:a7:a8:fd:c3:46:b0:62:42:b8:
fb:94:30:fc:f8:66:60:7b:8d:c6:3f:f8:e7:54:47:
54:49:39:44:ed:cd:50:6f:75:7a:11:33:12:f0:d3:
21:68:54:86:60:de:fc:a8:9f:02:b1:12:d1:b4:5b:
ae:f0:22:7a:19:e6:f2:cd:98:f3:f5:36:62:5b:e1:
39:06:4a:eb:3c:49:11:67:ca:16:d3:b3:8d:7b:a9:
cf:3a:7f:71:84:88:4e:6d:7d:68:33:0c:2d:2b:75:
2e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:56:58:68:89:B9:2C:3C:53:25:6B:CE:FE:D0:A1:1F:61:BB:CD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142750.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a064::/32
Signature Algorithm: sha256WithRSAEncryption
b1:9a:4c:31:06:6a:5c:3c:1f:52:24:41:45:fb:63:db:cd:dc:
76:03:b4:d3:df:4e:0c:75:62:48:0e:a3:40:50:3a:b2:16:49:
e3:a4:7c:a1:2a:66:33:fe:8f:e0:19:e1:40:22:20:a8:be:06:
b1:38:a6:05:7e:f1:b8:79:87:8d:51:57:2b:10:90:ea:74:a8:
06:22:2b:77:1b:bd:b9:c5:5e:e1:39:4a:bc:4b:92:e9:60:b8:
70:74:a4:ed:91:3d:b1:cb:f3:b8:b8:7b:76:d4:b6:99:5f:74:
54:26:f5:b6:fc:28:d7:83:40:52:05:2a:bc:6d:dd:7f:e7:bf:
b8:12:db:4b:c5:92:f6:ed:ef:f8:d0:0b:ed:e6:bc:9d:09:fa:
20:ce:b0:57:c7:60:e5:0e:81:32:09:3d:b3:b3:82:d2:81:ad:
87:99:32:71:c4:b2:b4:b1:6e:53:df:67:48:d1:1e:3a:e8:d8:
c4:71:0b:0f:de:d5:59:80:04:e6:98:44:7e:61:3e:41:ff:bc:
b3:59:a2:d8:03:46:ad:79:13:93:6a:d7:fe:68:32:f6:25:fa:
1b:9b:d1:27:59:38:3a:b4:fa:6c:f8:cb:76:33:7b:80:14:36:
68:d6:d3:a3:5a:29:05:b5:24:ac:53:36:fc:fb:3b:dd:88:02:
01:95:bf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:21 2026 by rpki-client