Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142762.roa
File: AS142762.roa (raw, json)
Hash identifier: gYzCokC8MJn6P28fYxNZo5zQhOSmtqzh0SYVFwLtdo0=
Subject key identifier: 06:43:92:7C:E4:A1:7E:51:27:85:22:C1:11:25:CF:A5:B9:E7:A4:B6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7610C328393AF3506AFAF7CE0F0ABAA858B9B0BB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142762.roa
Signing time: Mon 25 May 2026 01:38:02 +0000
ROA not before: Mon 25 May 2026 01:33:02 +0000
ROA not after: Mon 24 May 2027 01:38:02 +0000
asID: 142762
IP address blocks: 240a:a070::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:10:c3:28:39:3a:f3:50:6a:fa:f7:ce:0f:0a:ba:a8:58:b9:b0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:02 2026 GMT
Not After : May 24 01:38:02 2027 GMT
Subject: CN=0643927CE4A17E51278522C11125CFA5B9E7A4B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:11:71:d9:cf:43:79:96:0b:9c:3d:7f:84:
9d:0c:d2:a2:94:09:69:b0:fb:65:89:72:04:27:b4:
56:0e:08:a8:7b:05:52:83:96:99:ec:5d:09:04:73:
27:0b:5e:da:8a:96:8e:3e:6b:80:7b:5a:8b:e7:c9:
c5:c0:01:cc:ca:b2:1b:9e:35:4a:aa:bf:1f:d0:a7:
25:4b:a7:0a:3f:6e:e2:77:e4:a4:b8:ba:82:90:c3:
08:4e:9f:c1:c5:77:a4:3e:bf:b2:95:58:0c:fd:3b:
3d:20:4c:f2:15:e6:3a:76:5e:1a:a5:6a:42:b1:a5:
93:76:fa:04:83:e0:1d:9c:c3:c1:25:8c:0d:b2:e0:
63:d5:76:08:24:ad:4c:76:dc:35:af:a3:e2:ca:b9:
91:65:50:0b:a4:fd:97:c3:a6:4c:49:1f:08:a6:cd:
7b:cf:1c:13:da:ab:7d:20:c6:d9:fd:bb:43:f5:fa:
13:5d:3f:78:f5:df:30:23:73:b3:92:ad:e4:c3:08:
2c:c6:70:ec:05:3b:a0:6a:21:5f:d9:53:09:34:38:
ff:57:29:04:95:50:63:e8:94:43:a8:47:71:fe:bc:
ae:da:b1:1d:b0:38:bb:94:d6:34:d0:3d:a2:01:82:
6e:7f:aa:f6:3a:96:02:7e:8f:f3:ca:c5:3a:16:27:
5e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:43:92:7C:E4:A1:7E:51:27:85:22:C1:11:25:CF:A5:B9:E7:A4:B6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142762.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a070::/32
Signature Algorithm: sha256WithRSAEncryption
48:cb:c6:9e:33:5b:c6:0e:46:4a:50:7e:82:b0:65:c6:47:fe:
75:c0:86:7e:7b:f1:ea:5b:b5:1e:ef:8c:8d:38:a0:66:ee:95:
63:48:9e:c7:ca:f6:ae:55:67:3a:f3:ba:44:d7:ac:48:ce:35:
0a:14:06:bc:ad:a4:a6:f5:a2:b3:9b:e6:b4:e2:ce:01:bb:06:
a9:c7:c9:31:8c:37:d0:d5:7b:9c:6a:c8:7c:9f:37:c3:7f:97:
1d:e1:ce:fb:24:13:fc:f8:3c:f8:04:2e:b5:f3:1a:85:c0:58:
dd:3b:9f:79:8c:d1:39:e7:dc:55:cf:7e:25:1a:90:4f:a8:df:
46:53:f7:b6:b7:d5:b8:75:d2:ea:74:cd:7a:45:33:7e:65:3c:
6e:18:16:db:5d:da:11:3c:30:05:07:dd:39:b2:b5:0a:b3:8e:
32:69:27:b8:df:30:25:38:7a:5c:32:78:64:b7:ab:4f:f5:0c:
f2:c7:d2:da:8b:ba:29:66:c4:58:37:9c:c0:ac:64:e4:cd:37:
48:22:25:9f:bc:2d:5a:6d:85:68:93:a2:b0:d5:2b:37:4e:97:
87:77:d6:d8:a9:c4:e0:18:10:48:55:b8:a0:cb:a6:eb:2e:7b:
d3:d6:a9:64:d5:64:41:fd:77:22:86:88:9a:6a:a6:2c:76:09:
f4:06:15:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:57 2026 by rpki-client