Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142768.roa
File: AS142768.roa (raw, json)
Hash identifier: DsNwvwOmP0Ih8bKNAKzxF5W90XHWmdfbLm+r9Qv6qzE=
Subject key identifier: E5:42:D9:4F:8A:FB:C5:EE:E8:35:DF:A9:53:A8:DB:B9:21:F5:68:96
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 512CA644FDE6D16C10D30207BFEA0A21146B7425
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142768.roa
Signing time: Tue 26 May 2026 02:34:50 +0000
ROA not before: Tue 26 May 2026 02:29:50 +0000
ROA not after: Tue 25 May 2027 02:34:50 +0000
asID: 142768
IP address blocks: 240a:a076::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:2c:a6:44:fd:e6:d1:6c:10:d3:02:07:bf:ea:0a:21:14:6b:74:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:50 2026 GMT
Not After : May 25 02:34:50 2027 GMT
Subject: CN=E542D94F8AFBC5EEE835DFA953A8DBB921F56896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:8e:54:49:ff:e8:2e:a2:72:8e:ff:ef:df:
5a:57:ce:ce:5b:5f:8f:74:02:01:6f:a4:78:a7:f9:
a2:e3:5a:6a:43:2c:1e:95:a8:5c:8d:b3:36:f6:41:
d3:5b:30:41:fb:fe:67:ee:1b:0f:47:23:7a:db:ea:
88:f3:41:ee:7b:72:56:1c:a6:3c:fe:74:c2:e7:34:
4f:4e:c4:f0:f0:b5:4e:9d:08:8d:c3:4e:9e:26:96:
47:88:61:69:f8:6a:9f:0c:45:9f:ad:35:3d:7c:2f:
97:81:44:0a:87:d9:2c:94:a6:87:46:1b:e3:cf:db:
8a:14:a8:f6:af:3c:b9:5c:d1:09:14:b1:51:6f:77:
10:8f:08:69:e6:2f:5d:8c:c8:05:4c:78:40:ce:39:
c0:38:4b:2c:ca:d3:91:1e:21:47:45:b7:f3:f3:3a:
a5:5a:b9:6f:01:83:24:33:b3:66:75:76:33:86:44:
f1:09:6c:26:9c:26:c9:1a:72:f8:e4:fe:89:1a:52:
5a:65:da:8c:0d:fd:d7:ed:72:0c:a7:9e:29:8d:a5:
05:ed:42:de:a9:89:53:a7:59:07:7c:01:23:69:aa:
ed:03:27:b3:b8:91:31:16:2c:c7:1e:4f:8c:32:80:
cd:3b:05:45:a4:c2:0f:99:8f:46:00:d0:a3:37:84:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:42:D9:4F:8A:FB:C5:EE:E8:35:DF:A9:53:A8:DB:B9:21:F5:68:96
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a076::/32
Signature Algorithm: sha256WithRSAEncryption
3c:2f:20:c6:83:4d:20:20:3c:7d:66:3e:23:69:58:5f:f1:07:
c5:2f:38:ef:5f:5c:99:74:db:98:df:0a:5f:cf:d6:05:65:76:
90:ee:76:a2:c8:82:e2:98:6b:5f:10:6f:d4:c1:be:08:5c:06:
0a:00:4a:97:7e:b0:b9:3f:53:da:f5:93:04:1f:30:d1:60:6d:
c2:69:29:ec:f2:51:c9:f2:75:b6:b7:dc:bf:58:fa:0d:1e:41:
cc:0d:83:1e:28:b7:ea:70:a3:9a:c1:e7:74:0c:b8:d8:b0:0f:
de:31:a6:2e:f8:37:f7:40:14:0e:21:8a:5c:7a:b8:2d:b1:5f:
f0:4e:11:b9:52:fd:66:b9:bc:0f:4f:94:75:9d:d0:52:2c:cd:
1f:b8:bb:88:77:fe:ee:a8:f5:5f:d5:aa:8c:99:61:67:e6:9c:
0d:6f:5d:8f:3d:75:f6:8a:24:3d:73:80:22:ff:67:19:eb:88:
b4:d5:55:57:23:30:13:9a:d9:23:a0:83:fe:69:b4:66:1e:a7:
57:a2:6f:fd:f1:56:6b:c7:8a:d4:1f:89:e8:17:6f:f4:f3:93:
25:d5:af:52:7b:95:81:3a:0f:f0:ca:fe:b8:0f:20:c1:75:cf:
7b:b1:03:7b:70:67:1d:ff:74:74:a1:7d:a5:1b:17:ff:b5:d9:
da:64:16:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:28 2026 by rpki-client