Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142757.roa
File: AS142757.roa (raw, json)
Hash identifier: baaNuvLUELnQMmw1C6OUaNfLZ3tlsPm1xyQWnbN2kcs=
Subject key identifier: CB:99:10:6A:13:97:9D:46:16:E7:49:8C:CF:45:66:1E:15:59:B6:E0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 40B30F0DD5D6614A1115675A4E7760FDF37E3D8A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142757.roa
Signing time: Tue 26 May 2026 02:35:05 +0000
ROA not before: Tue 26 May 2026 02:30:05 +0000
ROA not after: Tue 25 May 2027 02:35:05 +0000
asID: 142757
IP address blocks: 240a:a06b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b3:0f:0d:d5:d6:61:4a:11:15:67:5a:4e:77:60:fd:f3:7e:3d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:05 2026 GMT
Not After : May 25 02:35:05 2027 GMT
Subject: CN=CB99106A13979D4616E7498CCF45661E1559B6E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:f1:f9:30:d2:ca:c6:1e:36:8c:c1:79:1e:
ea:53:98:42:01:cc:62:b6:1d:e5:22:93:1e:28:d2:
ee:40:94:71:ef:50:32:eb:d5:9d:6c:f7:e4:cf:98:
f4:54:de:6a:2f:2e:b9:8b:e3:f5:79:8e:1a:0e:3c:
ee:cd:1d:97:6a:27:f6:ec:22:63:4c:37:7d:a3:a3:
7d:a4:36:5e:f7:4a:d9:a3:d1:32:f5:5c:5d:ea:c1:
20:f1:2c:fc:02:05:26:5f:0a:dd:e5:26:f2:97:e9:
df:6f:11:3c:54:55:dd:1a:29:01:6f:fe:de:a4:2f:
5a:66:f3:82:88:5c:36:60:75:23:d6:bd:82:6d:f8:
97:d4:31:01:40:7d:60:7d:42:45:6c:b2:e8:b8:0a:
37:54:88:77:cc:a0:c6:01:b5:92:1b:c1:86:24:64:
66:5b:01:1d:b5:56:07:9b:f7:75:40:1d:58:45:eb:
b7:55:dd:cf:78:4d:31:2b:69:b5:43:8a:ff:19:9b:
e0:cf:a3:24:12:ee:e8:e7:7e:a8:50:07:01:7c:16:
3b:47:dc:bd:38:d7:a9:c2:ac:69:df:03:24:3c:be:
9b:81:a4:19:02:76:08:63:bc:c3:09:b2:d2:ec:31:
89:75:a6:02:e2:c8:77:a7:38:0b:da:7e:90:64:d5:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:99:10:6A:13:97:9D:46:16:E7:49:8C:CF:45:66:1E:15:59:B6:E0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142757.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a06b::/32
Signature Algorithm: sha256WithRSAEncryption
6e:fb:00:31:82:ea:f8:a7:59:9a:64:08:a0:1a:93:34:2f:1e:
c7:a6:ee:6d:f1:5f:b1:29:33:ae:ca:9b:76:bc:6d:65:48:a5:
87:c4:08:a8:c2:23:9a:5d:05:69:29:50:72:15:ac:7c:16:91:
70:3d:60:6e:2b:08:0c:f6:52:e3:29:b4:5e:3b:37:17:f1:17:
95:32:ee:3d:7a:27:fd:17:fb:41:c5:8e:0f:b3:a2:7e:8c:76:
77:d7:c8:02:f7:76:0f:a7:55:46:07:4a:83:1d:b8:f2:b2:b9:
68:86:65:19:48:55:ba:8d:19:90:0a:01:05:7c:74:d5:cd:b2:
36:60:87:53:bf:74:ce:4c:fa:e6:4a:15:49:5e:6e:7e:19:86:
49:88:f6:fd:5b:41:6a:76:4e:19:c8:3d:8b:98:e5:b9:2c:a2:
76:21:f4:7c:4c:97:44:0b:a3:ee:c7:3f:1c:0c:3e:22:54:84:
56:87:9f:a5:98:de:6f:e8:b6:7a:f1:47:a1:05:a1:57:00:59:
db:00:a3:5b:77:28:b4:61:63:85:c1:4c:51:08:20:07:87:fe:
fe:13:64:b2:1d:1d:86:87:46:68:fc:04:a1:51:88:cd:12:f0:
d0:7c:3d:b9:01:a9:38:7d:55:43:8b:6f:fe:f5:a8:dc:7e:d6:
61:93:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:51 2026 by rpki-client