Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142784.roa
File: AS142784.roa (raw, json)
Hash identifier: iRMTjrR5hvKlwAnc/fxNG0c918Doks+h/xKIX6nEb2s=
Subject key identifier: 1E:0E:21:72:B6:56:58:84:C2:3E:1D:7C:24:96:DE:E2:3C:72:D3:AE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 06728FA03E51C8879D4720F7A4121E412D269624
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142784.roa
Signing time: Fri 22 May 2026 06:28:03 +0000
ROA not before: Fri 22 May 2026 06:23:03 +0000
ROA not after: Fri 21 May 2027 06:28:03 +0000
asID: 142784
IP address blocks: 240a:a086::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:72:8f:a0:3e:51:c8:87:9d:47:20:f7:a4:12:1e:41:2d:26:96:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:03 2026 GMT
Not After : May 21 06:28:03 2027 GMT
Subject: CN=1E0E2172B6565884C23E1D7C2496DEE23C72D3AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:26:99:39:f5:9e:64:b9:26:66:d3:28:41:
2b:4f:01:66:fa:dd:36:bd:28:59:70:e5:e3:e5:92:
54:47:e5:b7:c4:db:b3:ac:93:e2:30:5b:42:18:58:
ca:51:8c:6c:1a:b9:12:6b:0f:4c:a3:89:15:41:ba:
a2:64:3e:bd:b7:cd:f1:55:ee:22:37:eb:e8:d6:0f:
a3:f8:89:f2:f4:02:e9:d4:24:0c:9f:f2:8a:b6:9d:
a5:4e:f8:5b:a1:88:21:c2:80:68:b0:31:25:97:28:
cc:c5:d0:e8:b2:cc:8f:58:df:1e:3a:93:47:10:63:
96:c3:a5:cd:99:b2:61:72:76:a4:b1:ba:54:d2:d8:
88:ab:1b:ba:9d:9b:1b:85:5e:1a:de:79:49:99:0d:
70:59:eb:d3:22:55:63:a9:06:10:71:93:10:67:1b:
a2:1d:ac:61:e1:55:4a:d0:ef:87:e0:63:3a:bc:29:
11:11:6c:70:bb:22:3e:cc:8c:23:43:98:a1:f3:49:
cf:de:4f:9f:52:e3:75:4f:0b:c6:b8:8a:5e:69:f4:
aa:4b:7f:da:14:3d:51:9b:88:8b:6e:26:bd:30:c1:
d0:21:51:55:cd:69:f2:28:7c:f6:7f:21:ed:de:13:
24:97:cd:86:15:68:70:c0:7e:10:33:cb:46:ea:d2:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0E:21:72:B6:56:58:84:C2:3E:1D:7C:24:96:DE:E2:3C:72:D3:AE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142784.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a086::/32
Signature Algorithm: sha256WithRSAEncryption
75:49:87:b0:b1:96:a1:cb:f5:e8:1d:ad:64:17:e7:a6:03:46:
92:1f:7e:d9:8e:b2:51:c3:b1:7d:89:42:5a:1a:5d:0d:33:08:
99:39:d3:68:3c:a1:5a:c0:09:6d:a7:5e:bd:14:2e:8a:b8:1e:
62:96:bb:06:a3:4d:e0:d2:92:f7:e1:b9:fe:e5:97:41:a1:f7:
16:7d:83:62:c9:1d:a7:17:fe:7e:d5:a7:7b:de:5f:00:f3:c5:
4a:fb:ca:58:8d:61:28:b3:31:45:41:51:ff:56:76:43:4f:ec:
91:79:56:76:a2:e5:fa:16:e1:c7:ee:f6:1c:d7:1b:a3:d6:60:
a8:c7:8c:96:9f:8d:9c:30:76:ef:3c:68:ae:5a:fc:d4:d0:0d:
4c:95:c4:8b:49:41:0e:b4:09:85:cc:4f:71:42:54:90:c3:ed:
a0:a9:55:c1:24:bc:3a:f8:fd:5f:11:ab:6d:d2:02:25:d5:d8:
26:7f:21:17:df:52:d5:91:85:f6:1f:5a:d6:05:3d:e5:a6:57:
82:f6:4b:6c:12:ae:48:a3:3b:33:39:d7:36:42:33:cc:1d:5b:
3e:7a:78:2d:09:20:66:a7:63:43:ab:78:e5:c9:80:7f:68:d3:
e7:dc:00:ab:e0:4b:2c:98:b1:70:91:d7:79:71:68:35:dd:99:
02:b7:5e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:05 2026 by rpki-client