Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142774.roa
File: AS142774.roa (raw, json)
Hash identifier: cg463Bm4N+4eH/eD1Zoy/MkfBbqTY1DNb6cCrHC9TCk=
Subject key identifier: 31:2D:47:B4:A1:8E:94:35:84:7B:1A:03:F4:45:0C:7C:59:EF:CF:4E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 06DFF0ADCC147853723BE30415ECE5388E38AB44
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142774.roa
Signing time: Mon 25 May 2026 01:38:02 +0000
ROA not before: Mon 25 May 2026 01:33:02 +0000
ROA not after: Mon 24 May 2027 01:38:02 +0000
asID: 142774
IP address blocks: 240a:a07c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:df:f0:ad:cc:14:78:53:72:3b:e3:04:15:ec:e5:38:8e:38:ab:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:02 2026 GMT
Not After : May 24 01:38:02 2027 GMT
Subject: CN=312D47B4A18E9435847B1A03F4450C7C59EFCF4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:5e:af:71:6a:eb:a9:c7:76:88:c4:bd:f7:
c9:05:ad:b3:f1:ce:ff:b9:91:85:3a:46:e4:e0:84:
64:a5:78:41:22:34:09:b4:72:04:e3:5f:59:0f:ff:
4e:27:c3:2b:a6:9f:60:10:1e:6a:34:e7:46:c0:a1:
5c:6e:b8:e8:cf:c2:6f:d0:ca:99:e4:4c:3c:93:6f:
cf:c0:b2:03:73:dc:76:ac:ea:ac:1d:da:10:9c:8d:
47:5e:46:de:f6:86:4b:41:34:c3:7a:98:63:65:06:
ec:95:22:86:26:05:61:c1:18:29:b8:6a:58:fb:bd:
87:d9:b4:9f:7b:d0:32:b8:a7:4b:eb:d5:c6:bb:b2:
80:79:6d:74:17:1b:28:bd:b4:5c:bb:77:56:57:66:
3e:23:9c:f5:c5:81:a2:f0:2f:ac:99:06:02:aa:39:
33:e7:01:79:e0:c9:1a:cf:a6:a3:39:4f:3f:5a:fe:
3c:6e:4c:7b:c1:5e:70:14:92:ed:7d:64:57:93:bc:
d8:ab:50:69:c5:2d:1b:44:0d:d4:7f:b8:31:a3:50:
7a:f7:cc:bd:23:c7:87:ad:3c:be:6e:f9:5a:98:cf:
58:2f:26:97:66:79:06:c2:af:b5:60:6a:9e:47:d0:
31:90:b4:e0:57:56:7c:73:bc:93:cb:a5:33:21:28:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2D:47:B4:A1:8E:94:35:84:7B:1A:03:F4:45:0C:7C:59:EF:CF:4E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142774.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a07c::/32
Signature Algorithm: sha256WithRSAEncryption
67:f7:ee:61:45:01:64:6d:57:b8:1f:48:5a:bb:f7:4c:b4:ae:
4b:52:bf:18:67:a7:99:44:61:95:55:d1:23:e9:07:fa:27:82:
e0:2a:ce:8e:cd:12:8a:0d:6d:33:9f:a5:66:76:e6:c1:08:6b:
0c:79:7d:1c:c0:6c:a2:31:9a:ed:df:e9:a2:20:c6:8d:96:d0:
fe:a8:da:dc:c2:54:7b:4a:d2:ad:21:cc:fc:7c:d6:5e:4c:9a:
1f:aa:2e:67:dc:89:ad:0c:1f:2e:9b:17:76:4e:2c:6e:3e:cf:
46:27:ec:0a:73:36:aa:91:2b:9d:94:92:ca:81:db:98:37:a9:
5d:ad:58:bb:4c:b4:ff:2a:b8:1a:e9:95:1b:d0:38:0c:d5:55:
8f:4c:23:cc:56:3c:7b:60:db:8b:c6:93:8b:8a:b5:25:9b:35:
a3:e6:54:04:47:cd:89:17:6d:c9:aa:f5:f6:07:dc:04:94:0c:
45:85:5a:13:38:7d:72:4e:c4:33:d1:60:eb:fe:12:2c:54:51:
0f:c7:24:53:40:f2:3a:8d:b8:7e:1c:59:92:3a:69:f0:4f:af:
1d:82:a5:cf:5c:22:a3:63:89:66:f4:d6:0d:37:25:14:52:33:
11:fb:d0:72:7f:20:f8:cc:39:60:d6:7d:71:f4:61:48:dd:d8:
f8:77:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:43 2026 by rpki-client