Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142751.roa
File: AS142751.roa (raw, json)
Hash identifier: bCSrci0ZFaCWFVPvQFO/R9hlx3vZupn4H4F21ZLsPxw=
Subject key identifier: 39:60:3A:A1:61:83:DD:34:59:AC:DA:8D:7B:A0:8D:E0:75:6D:14:F8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4E4F8DC12BE0A4942B761C269323AA9D3C8A4488
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142751.roa
Signing time: Fri 22 May 2026 04:27:16 +0000
ROA not before: Fri 22 May 2026 04:22:16 +0000
ROA not after: Fri 21 May 2027 04:27:16 +0000
asID: 142751
IP address blocks: 240a:a065::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:4f:8d:c1:2b:e0:a4:94:2b:76:1c:26:93:23:aa:9d:3c:8a:44:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:16 2026 GMT
Not After : May 21 04:27:16 2027 GMT
Subject: CN=39603AA16183DD3459ACDA8D7BA08DE0756D14F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:65:6b:ba:41:92:99:5d:33:90:09:ea:f2:
1c:30:34:c4:4f:54:1a:33:95:f5:e4:19:4c:5d:47:
18:68:cf:cc:57:94:e9:42:12:db:4d:ce:c9:a5:66:
c0:25:e4:77:f1:aa:ad:03:ae:a5:6d:29:18:10:15:
63:f1:6f:6c:b5:3f:88:41:ab:a8:c6:b7:ea:d7:4d:
a3:7f:3c:09:00:d4:b6:bb:da:3f:d2:3b:41:28:0e:
a5:32:b6:69:5b:d5:46:48:63:12:9a:8a:94:f0:0a:
3a:fd:4c:65:5f:95:89:0d:a3:2b:c7:e5:20:2c:75:
df:fa:98:f9:72:95:6a:5e:13:9f:68:1f:b7:74:6d:
e4:9d:8f:4d:07:f5:82:ad:c5:67:be:e5:61:01:44:
a0:a2:19:c2:4a:77:e7:26:a1:53:e8:d6:b0:b0:c8:
b2:06:40:5f:6c:ee:f0:f5:18:95:30:2b:16:d8:44:
35:5a:db:0d:cb:7b:70:2d:1f:9e:de:56:25:bf:ab:
3a:ff:58:1d:2d:60:59:d5:07:c5:d3:16:3e:c1:0b:
f7:86:e8:77:34:fc:0c:53:68:5b:3a:ce:70:47:ab:
e2:20:1b:d8:de:a3:5d:3a:e2:89:36:c9:69:a8:90:
43:b6:7f:75:40:ba:d4:4a:fc:41:0d:ba:bb:06:46:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:60:3A:A1:61:83:DD:34:59:AC:DA:8D:7B:A0:8D:E0:75:6D:14:F8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142751.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a065::/32
Signature Algorithm: sha256WithRSAEncryption
2f:1d:c8:36:08:5d:be:48:90:1e:be:54:c2:e2:b0:2b:a1:b7:
b9:8a:1b:0b:8f:c9:85:d4:0f:ef:31:e6:3b:d6:d4:af:ea:04:
d1:16:2f:02:42:f9:56:31:9e:09:89:4f:c1:ce:f2:bf:8a:58:
37:16:36:94:de:53:76:72:da:cf:ea:13:ce:4f:0e:cd:00:3b:
87:9a:e8:9d:f1:df:83:12:1e:7c:7b:fa:2d:b9:e1:cf:03:6d:
72:20:8e:d3:41:91:00:b9:4b:78:63:bc:b4:de:e0:d3:94:90:
e0:e6:72:64:58:ec:22:a2:d8:52:06:8b:06:f1:50:1b:bc:48:
75:9b:d5:cd:84:6c:b6:c4:3e:1f:b7:c2:5e:10:ce:57:2a:04:
93:8e:a4:6c:53:1e:00:54:30:44:08:5a:41:e7:4e:21:9c:b7:
97:ee:61:8a:0b:0c:ed:a8:98:ae:42:31:b7:4f:7e:9e:21:5f:
a5:5c:87:55:b2:3b:52:89:10:3f:82:51:13:d8:c2:88:24:91:
99:d2:47:f1:a1:77:dc:c6:8a:b7:68:32:1f:2f:44:70:9c:ef:
e8:1d:ea:cb:27:d6:02:3a:42:e1:40:13:b1:91:60:34:ef:7f:
39:df:f1:e4:61:2a:d7:b0:d7:f1:76:e9:1b:5c:aa:9c:43:1c:
dc:ad:72:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:56 2026 by rpki-client