Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142753.roa
File: AS142753.roa (raw, json)
Hash identifier: mAmZhz8PQEzzo61DQppPbNYyjs9rdh1ZMBRbz8ixqdw=
Subject key identifier: 2D:58:4D:6D:EB:2E:D1:06:DC:21:F4:85:BC:F2:41:DA:77:4D:16:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5C73C2A2D9F9EB319FDC13A32D38700E15E58A40
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142753.roa
Signing time: Tue 26 May 2026 06:13:02 +0000
ROA not before: Tue 26 May 2026 06:08:02 +0000
ROA not after: Tue 25 May 2027 06:13:02 +0000
asID: 142753
IP address blocks: 240a:a067::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:73:c2:a2:d9:f9:eb:31:9f:dc:13:a3:2d:38:70:0e:15:e5:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:08:02 2026 GMT
Not After : May 25 06:13:02 2027 GMT
Subject: CN=2D584D6DEB2ED106DC21F485BCF241DA774D162B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:e0:e1:22:be:a7:ba:13:6c:1b:3d:e5:fb:
08:22:39:69:7b:a7:f8:5f:83:4e:ed:80:14:dd:15:
b1:fc:65:ee:63:a4:de:51:15:c8:4e:3b:76:6c:63:
2e:02:15:0d:52:08:69:2a:a7:35:23:93:5b:18:c3:
58:28:48:e6:77:04:50:06:98:43:65:5b:59:12:52:
d5:58:3d:c3:b7:47:00:a7:d6:46:3c:91:0d:d9:03:
64:7f:ba:c4:04:71:f5:37:5c:9f:30:60:d8:f2:31:
50:10:99:56:f6:9b:73:93:ac:bf:4e:96:b4:69:b4:
0e:54:2a:7c:be:55:fb:c2:95:bd:f8:6f:8a:84:c5:
bd:b3:c8:0a:aa:67:ce:66:8b:af:12:8b:2b:88:e7:
cb:f8:e6:62:db:4a:31:6f:79:83:46:45:95:86:eb:
f6:b5:50:66:52:69:f5:0b:08:2a:c9:ae:ec:88:29:
45:62:74:aa:7e:81:10:f7:1e:f8:6a:b9:41:c9:6c:
cc:ce:36:f4:ab:46:aa:18:73:3f:10:3c:80:e2:61:
61:03:ea:0c:8d:af:46:d7:0c:81:68:40:68:f9:52:
2e:7b:56:2d:e0:53:ca:32:7c:c6:60:72:bf:c5:9b:
82:10:ad:c1:77:c5:fd:89:4b:e0:13:89:46:f3:57:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:58:4D:6D:EB:2E:D1:06:DC:21:F4:85:BC:F2:41:DA:77:4D:16:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a067::/32
Signature Algorithm: sha256WithRSAEncryption
ae:e2:27:79:db:db:9b:52:39:19:80:ff:44:fc:5b:3a:3d:ec:
dc:f1:bd:f8:0f:ff:c2:80:ae:c6:5a:34:30:0b:cb:4d:b9:a9:
87:5e:0d:ac:dc:67:2e:23:f5:d2:96:06:83:67:8b:8b:3a:bc:
f5:93:64:63:17:17:dc:af:27:46:09:92:e5:cd:99:1a:86:55:
8b:16:db:c4:2e:f3:b2:31:42:c3:d7:82:0a:4b:29:b4:40:73:
e0:3b:35:32:2a:cb:64:dc:87:ab:4c:5a:8e:a9:56:c3:32:25:
2c:e9:73:cb:c8:1d:8a:22:54:4d:ff:c2:0c:3b:7d:82:90:18:
eb:a0:9d:96:d3:35:70:e0:21:a1:8d:00:cf:b3:2e:29:b4:51:
df:c9:bf:33:fd:37:b9:e5:a4:7f:10:bf:20:f3:7b:bf:d9:c7:
c2:2d:22:d4:57:14:28:1f:5d:7b:c9:6d:89:fe:f3:e8:67:b0:
33:cb:54:e6:1b:aa:8c:93:3e:cb:7a:ea:9c:c0:ed:a5:ce:ee:
50:00:41:cd:96:18:c1:e1:f9:e5:a6:e0:89:76:ac:0d:ae:a8:
8b:c8:e2:ec:39:7f:31:7b:19:c5:5a:38:c5:ee:12:e1:09:01:
67:f8:b3:e2:4f:df:c8:0f:14:ab:69:a4:42:c8:89:56:e3:44:
77:9c:a0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:03 2026 by rpki-client