Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142764.roa
File: AS142764.roa (raw, json)
Hash identifier: BX8+KtAmqqDQpOSd/vP6CcXR08XW3FESXX3xvmNpj58=
Subject key identifier: DC:9A:34:B0:6B:B7:29:D0:32:63:FE:3C:4B:51:E7:89:5A:4B:DE:AE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 756BD285DE9F2B9263388D4265C78CFF6B131727
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142764.roa
Signing time: Tue 26 May 2026 01:13:02 +0000
ROA not before: Tue 26 May 2026 01:08:02 +0000
ROA not after: Tue 25 May 2027 01:13:02 +0000
asID: 142764
IP address blocks: 240a:a072::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6b:d2:85:de:9f:2b:92:63:38:8d:42:65:c7:8c:ff:6b:13:17:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:02 2026 GMT
Not After : May 25 01:13:02 2027 GMT
Subject: CN=DC9A34B06BB729D03263FE3C4B51E7895A4BDEAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:9f:14:5e:e9:f7:2f:e9:d5:a2:20:ba:45:
4f:d9:ca:e9:fd:40:33:d1:0e:ae:49:18:30:7a:33:
23:6a:69:92:5e:7b:c6:fb:40:95:8a:18:e3:9a:17:
73:65:3e:68:df:96:10:ee:c6:64:b2:0f:db:b3:00:
49:7a:71:33:cf:3c:92:87:fa:7c:c9:53:c2:eb:52:
68:1a:00:58:8f:e7:89:34:fc:4e:37:a6:f6:2a:0c:
09:e2:3c:25:02:06:16:17:ef:f2:62:99:38:4c:7e:
33:c3:d9:63:ab:9a:5f:ef:47:84:9d:f1:bb:90:c2:
dd:8b:3e:50:45:d2:f0:95:70:03:3d:5d:55:3f:f1:
b9:33:b5:b3:40:e3:aa:7c:e4:a7:0a:e5:41:af:ee:
83:4b:db:8a:97:ce:aa:d3:17:3f:32:c1:0b:53:31:
65:0a:08:21:38:b7:ef:56:8f:cc:86:42:55:85:96:
fc:d2:79:91:83:41:66:1d:ad:bb:1a:d3:12:f0:4f:
25:dd:4f:04:f0:db:73:83:ed:ff:e0:e0:b0:bc:7f:
9b:95:61:6f:18:86:66:d9:3e:d9:4f:eb:d5:52:65:
96:e2:32:2a:60:fa:cc:47:13:ee:48:a7:c5:bb:f9:
06:3e:b3:87:5a:60:96:3b:71:c2:2a:9d:42:21:bc:
0d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9A:34:B0:6B:B7:29:D0:32:63:FE:3C:4B:51:E7:89:5A:4B:DE:AE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142764.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a072::/32
Signature Algorithm: sha256WithRSAEncryption
41:6b:06:4f:31:45:10:a3:d3:25:65:9a:5e:75:0a:19:1d:b6:
39:4a:46:9d:4b:57:4e:35:d9:8b:ed:61:eb:f4:ed:19:0e:cc:
9a:9c:1f:b4:1c:cd:a0:84:15:cf:87:90:39:92:38:89:95:9e:
e2:f4:83:0b:81:05:1a:e4:24:51:d2:a3:24:63:50:00:db:be:
fc:aa:93:4c:98:a3:e1:9b:8b:7a:b1:9b:bc:55:16:a3:80:89:
88:66:19:26:e5:c8:f6:07:48:59:63:35:37:7a:f3:06:ab:94:
62:a2:ed:2b:4b:0f:96:4a:78:06:b4:5e:39:8d:7d:fd:c9:66:
3b:b7:0d:b9:6f:a1:e3:c7:36:67:25:8d:2f:77:6e:2b:06:d6:
82:92:37:6a:4a:cb:4f:e2:d3:cc:8c:f5:32:68:c0:9f:5d:f7:
95:36:5c:9d:2d:19:d7:08:90:26:11:af:b2:e2:52:32:b4:de:
4f:ba:c6:19:66:a1:ca:f5:03:4e:0e:30:1f:b3:6f:cf:0c:1a:
46:23:d8:45:09:69:a8:9d:f5:56:36:29:27:df:26:8b:d6:f4:
53:d8:cd:2b:8d:2c:32:31:46:c8:dd:25:8a:b5:64:74:3d:dc:
f4:97:97:80:a4:27:27:f3:06:87:d8:12:63:67:b2:b7:9f:f4:
7b:f0:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:57 2026 by rpki-client