Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142752.roa
File: AS142752.roa (raw, json)
Hash identifier: xkSf8aAc0CsM7bC9c5Di9etRPbehgM0x7thRsiTegKs=
Subject key identifier: 1F:A1:23:B1:99:B7:AA:95:6D:E0:42:8A:06:3A:D6:89:26:19:FD:22
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7D32A786A11BC571F66D51C94E3419308697B922
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142752.roa
Signing time: Fri 22 May 2026 06:46:07 +0000
ROA not before: Fri 22 May 2026 06:41:07 +0000
ROA not after: Fri 21 May 2027 06:46:07 +0000
asID: 142752
IP address blocks: 240a:a066::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:32:a7:86:a1:1b:c5:71:f6:6d:51:c9:4e:34:19:30:86:97:b9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:07 2026 GMT
Not After : May 21 06:46:07 2027 GMT
Subject: CN=1FA123B199B7AA956DE0428A063AD6892619FD22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:c4:08:29:22:57:7a:69:da:e1:d7:08:c9:
71:68:74:4c:22:fe:37:a7:1b:74:ac:78:4d:b9:71:
a3:26:29:78:ea:60:0c:2a:cc:e3:3f:cf:45:2a:ae:
ec:9c:cc:5c:3e:18:22:de:82:b7:73:69:da:a2:04:
f2:44:36:e4:4c:b5:ac:13:eb:f2:5f:c9:1d:74:90:
5d:03:fb:aa:9c:e0:1f:79:8e:5f:5d:2c:67:cb:3b:
9d:ff:54:cf:82:ff:af:3c:c5:8d:f3:0c:82:bb:c6:
ed:3a:24:f5:61:ba:f3:94:30:0e:12:52:d8:09:e3:
48:d1:ca:a9:48:79:a6:ef:1b:41:81:5d:af:7d:e9:
a4:f1:21:1f:9b:7f:f6:6f:43:23:54:fb:ff:33:a3:
79:1a:d0:3b:bb:f3:56:c1:cf:88:f1:6d:42:13:7f:
ff:34:f3:dc:6a:3e:c8:9d:b6:95:cf:3d:65:d2:cf:
28:f0:39:6c:3b:e6:79:34:73:73:2a:63:49:d5:54:
7d:98:75:3a:b7:7f:47:68:5c:05:79:c4:c0:78:c2:
2b:77:54:9f:27:58:fc:dc:0b:d6:fe:e0:b8:ab:5a:
25:a1:d7:80:e9:10:ba:bb:aa:e4:e7:7e:58:2f:13:
af:c9:0e:10:ff:2b:ea:53:d6:4f:0a:3a:13:47:6d:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A1:23:B1:99:B7:AA:95:6D:E0:42:8A:06:3A:D6:89:26:19:FD:22
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142752.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a066::/32
Signature Algorithm: sha256WithRSAEncryption
90:19:92:a4:28:7b:80:6c:c0:58:af:df:54:16:18:91:25:b6:
ff:b2:27:00:db:02:1e:63:2e:55:97:b8:10:4e:a6:9f:b1:4e:
e7:c2:fe:31:52:37:ae:7f:dd:50:3d:fa:e7:4c:9f:da:bc:05:
c6:fb:43:eb:0e:bf:0d:5a:95:df:4f:f4:cf:51:86:a4:74:a2:
65:79:0f:1d:b5:20:ed:b1:5b:89:c8:27:23:bd:65:f6:8c:b0:
5c:9f:43:d0:74:df:36:78:af:73:6a:5c:40:bf:54:b1:da:50:
76:7e:45:bc:86:70:6a:38:42:22:78:89:88:5d:1b:2b:3b:6c:
e3:ae:e5:b2:52:fd:e9:f1:4f:0e:f6:25:85:a6:53:f4:5d:93:
18:7f:79:f1:89:66:cb:ab:d9:45:73:4e:17:ab:50:da:32:7d:
0b:6f:28:e1:4d:28:ab:8b:6d:e1:9b:24:c9:37:40:87:7d:41:
bf:db:7c:7d:bb:23:43:c6:4a:a3:fe:5a:4c:47:53:a7:7c:c7:
6c:c4:27:e2:6c:19:72:2c:44:23:9f:bc:ac:e0:e3:b4:ea:0a:
99:17:64:07:8c:1f:34:cc:7b:91:fc:f7:b1:c8:07:8d:b5:1b:
04:3d:08:41:89:04:84:cc:4a:42:6d:37:85:a1:e6:f1:7c:21:
8c:c1:3b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:30:11 2026 by rpki-client