Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142767.roa
File: AS142767.roa (raw, json)
Hash identifier: srbD8AeszpKSej5WlgIgK3UUZ0owWB+AjOF7C5nR+Ss=
Subject key identifier: 7F:64:D7:6D:48:EC:89:BB:1D:6D:E7:BD:D1:AA:56:02:6E:09:7A:B1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 216A58421768AE1E77EEB92472252835783BBBCE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142767.roa
Signing time: Fri 22 May 2026 04:26:43 +0000
ROA not before: Fri 22 May 2026 04:21:43 +0000
ROA not after: Fri 21 May 2027 04:26:43 +0000
asID: 142767
IP address blocks: 240a:a075::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:6a:58:42:17:68:ae:1e:77:ee:b9:24:72:25:28:35:78:3b:bb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:43 2026 GMT
Not After : May 21 04:26:43 2027 GMT
Subject: CN=7F64D76D48EC89BB1D6DE7BDD1AA56026E097AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:70:c2:89:01:e4:8a:2e:3c:48:4a:98:27:4c:
f4:8a:5c:4f:f2:6f:ca:f4:af:69:9a:1a:7e:c7:56:
c6:6f:06:cd:71:0e:9b:e7:d6:79:45:10:c9:aa:26:
bd:c7:8a:26:9a:6c:f1:19:d2:31:71:a3:03:96:19:
57:33:e9:ac:2c:41:4c:f2:22:85:2f:cc:78:e4:25:
ef:75:b3:c0:1e:e9:ef:ae:3a:87:d1:75:eb:ed:d5:
88:68:08:f5:3c:45:ed:41:c1:61:85:ff:08:ad:17:
90:62:82:e8:cb:b6:4b:0c:f0:b8:25:18:ad:95:d2:
fd:dd:99:93:62:20:3c:de:f0:9a:f0:e6:93:65:6d:
96:2d:d2:1b:a7:d3:f8:6b:0b:38:6c:eb:35:89:57:
c4:00:7c:09:e8:bd:a6:64:bb:b0:1b:c5:98:37:c1:
b3:b1:f1:27:b9:f6:a2:f4:64:be:72:a1:cb:0c:74:
17:f8:0c:e0:22:f1:1c:93:56:ed:04:53:2f:23:07:
d3:2a:70:28:6d:d9:26:cb:b7:b5:a5:39:1c:26:b1:
4e:79:7c:29:7e:3a:54:36:01:ee:a9:29:5d:e1:fd:
1e:28:1b:10:64:a9:d9:7c:9e:eb:f4:a7:58:fe:3a:
5a:09:71:7b:d3:7c:a7:e5:69:b8:fe:09:62:5e:1b:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:64:D7:6D:48:EC:89:BB:1D:6D:E7:BD:D1:AA:56:02:6E:09:7A:B1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142767.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a075::/32
Signature Algorithm: sha256WithRSAEncryption
bc:2c:5b:43:ff:01:c2:19:11:3f:02:67:3c:df:4c:66:a9:34:
03:e5:79:d8:ae:e1:66:e0:4f:a5:14:d0:23:45:ca:19:6d:d7:
13:b6:55:02:94:3a:dd:be:83:e8:b8:86:74:05:d6:93:5a:00:
40:12:fb:7d:b7:72:49:f1:7f:38:11:ae:cc:78:5f:73:02:bf:
8b:c4:1f:33:32:c2:75:18:25:15:1b:c5:e7:47:e1:8a:1b:23:
58:7a:91:dd:4d:55:c8:3a:9c:e1:41:05:57:48:b0:d6:6f:7c:
ef:46:fc:db:29:1d:06:e4:81:f3:88:91:aa:ab:64:c1:82:8f:
a4:2c:2a:78:09:82:08:f1:b1:19:54:81:c5:1f:ab:9c:75:6d:
f2:b8:c6:dd:19:85:ad:61:c1:8a:4e:89:72:e4:74:c6:d1:da:
4b:23:76:3e:fe:6b:84:28:3e:2f:3b:32:90:0a:dd:a7:0e:ee:
47:90:7e:5b:58:77:c5:fd:fe:b3:4c:e9:fc:8d:e7:3a:c1:fb:
5f:94:3e:32:e2:dd:c9:c5:68:f0:ba:da:40:0f:f7:cc:32:eb:
07:cc:a4:5d:6a:f0:f3:89:91:20:94:6c:36:00:53:bd:95:50:
5d:20:70:e6:78:ec:22:d8:0c:7e:dd:8e:79:60:b6:60:d8:83:
d2:ce:8a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:34 2026 by rpki-client