Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142780.roa
File: AS142780.roa (raw, json)
Hash identifier: 9xWyr79tc6DQVhik6rKeQ5+5WpMcfwCv9PVLOdwVRF4=
Subject key identifier: DA:F3:6D:83:FF:44:9D:C3:EB:AD:F1:B3:74:25:4C:94:E6:BC:F7:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2C267803B185E0CA76D8112A3E42439C7CE0B741
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142780.roa
Signing time: Fri 22 May 2026 07:24:33 +0000
ROA not before: Fri 22 May 2026 07:19:33 +0000
ROA not after: Fri 21 May 2027 07:24:33 +0000
asID: 142780
IP address blocks: 240a:a082::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:26:78:03:b1:85:e0:ca:76:d8:11:2a:3e:42:43:9c:7c:e0:b7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:33 2026 GMT
Not After : May 21 07:24:33 2027 GMT
Subject: CN=DAF36D83FF449DC3EBADF1B374254C94E6BCF7E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:72:36:05:0f:e5:e4:9b:e2:38:a2:77:3f:
22:f2:1d:c2:15:c5:f4:d7:9a:37:05:c6:67:bc:68:
a9:2d:53:f2:72:d8:f6:4b:16:dc:e9:e0:75:ac:5c:
a9:06:37:94:87:da:79:03:85:29:7d:e9:01:c7:f0:
f9:7e:ac:4e:84:55:b2:ae:57:04:23:1c:73:bd:04:
d1:d2:18:cc:fc:a6:fe:0d:3d:71:41:d5:27:e7:38:
a7:da:d6:a0:82:0e:17:dc:5e:61:13:73:ea:e4:e3:
c4:12:7f:34:dd:dc:9a:a5:db:f1:60:0e:f2:0b:6e:
1e:1d:e1:c5:29:19:4e:aa:c5:48:83:2c:f5:0a:52:
a8:89:d2:a9:5b:c3:4a:bb:cc:57:67:6f:ab:72:ae:
06:90:f1:b5:94:f8:f3:f7:b6:5c:de:2a:5f:12:2e:
e0:e0:4d:00:49:1b:3d:da:38:be:45:09:92:b1:b9:
1f:21:c5:df:52:e9:f2:47:8f:73:cf:aa:9f:5f:2d:
fe:65:cc:3c:00:f3:60:18:ab:96:9f:63:c5:de:6c:
96:61:51:5b:8e:0f:68:89:a0:1d:ee:f0:26:97:66:
a8:39:1e:b3:2e:16:8b:a2:aa:e5:8d:de:23:a9:bf:
e2:3a:b4:23:82:0c:62:2c:5f:34:e1:56:eb:3e:d4:
30:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F3:6D:83:FF:44:9D:C3:EB:AD:F1:B3:74:25:4C:94:E6:BC:F7:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a082::/32
Signature Algorithm: sha256WithRSAEncryption
56:46:64:d8:68:ea:87:73:df:d3:1a:99:63:a0:af:41:a4:8f:
23:d7:d9:bd:66:9b:b5:3d:77:27:95:9b:b8:26:d5:ee:20:37:
f7:31:bb:71:7d:88:97:02:5f:10:0d:9b:75:19:e4:98:6a:3c:
3e:62:5b:e6:93:42:3c:e7:2c:fe:25:a8:1b:ab:17:aa:43:f6:
59:1b:78:dc:05:bc:6c:9c:ba:66:af:66:61:3a:22:2c:e2:16:
fa:09:d3:b1:1f:25:80:46:b4:89:ed:e4:36:a1:8d:a0:4f:c8:
0e:24:5b:71:93:85:9c:16:e3:00:a3:86:67:95:8b:6a:93:db:
b2:91:e3:78:04:3e:09:69:91:16:0c:f1:83:06:15:a3:4b:70:
03:7f:37:75:5a:f7:55:4f:c0:b1:79:8d:c0:be:b1:54:b3:04:
ff:a3:0c:9c:b4:85:b4:1b:af:d0:da:b5:6c:dd:6b:e3:85:31:
9c:13:29:16:ab:29:64:9d:50:5e:c5:dc:65:20:68:82:05:27:
d7:64:8a:1d:d7:45:01:0c:49:83:c0:21:63:94:4d:b5:a4:c5:
86:95:91:25:17:71:4b:c2:61:11:ff:b9:4f:24:4e:47:f7:ee:
31:24:c1:97:01:cb:5a:45:ac:9c:fa:6f:36:3b:61:56:44:4e:
ed:61:c1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:24 2026 by rpki-client