Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142786.roa
File: AS142786.roa (raw, json)
Hash identifier: BPL26xbTT7VqLAFBwH+bQdBj9XdaeA47Ux1esuHoHy8=
Subject key identifier: 9B:2A:55:56:0E:FD:E3:68:6C:94:BF:77:3E:C6:36:AD:CD:A0:16:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 501673C51DBC3803C5AAEC96C96B0CE4ED9FDDFB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142786.roa
Signing time: Mon 25 May 2026 02:22:20 +0000
ROA not before: Mon 25 May 2026 02:17:20 +0000
ROA not after: Mon 24 May 2027 02:22:20 +0000
asID: 142786
IP address blocks: 240a:a088::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:16:73:c5:1d:bc:38:03:c5:aa:ec:96:c9:6b:0c:e4:ed:9f:dd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:20 2026 GMT
Not After : May 24 02:22:20 2027 GMT
Subject: CN=9B2A55560EFDE3686C94BF773EC636ADCDA016D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:6c:c7:4e:1c:1c:b4:cc:42:96:95:2c:26:
fd:99:16:8b:54:d3:17:ef:ce:c0:17:c7:26:c5:24:
54:f4:a4:fe:31:ed:4a:f8:c0:b7:71:a0:2e:e7:60:
ac:9f:5f:2e:8e:b4:9f:2a:9b:3c:0b:9d:7a:85:b5:
8a:ac:98:1c:de:d5:b3:a8:23:82:a2:53:88:3e:73:
dc:0a:3b:67:7a:99:1b:81:bd:67:47:ad:29:5c:6d:
a0:e2:b8:22:c0:a5:4a:3a:5a:61:2c:37:bf:d8:48:
4b:8b:14:f1:a0:8d:2d:a2:db:5f:4e:38:5e:5c:ff:
7d:68:da:d4:87:df:dc:9c:30:e7:29:07:aa:3f:a5:
e0:07:16:f0:84:a0:60:44:5a:79:c2:d4:3d:43:af:
b0:42:34:5b:d7:90:a7:4e:40:9e:59:a0:94:64:cf:
3f:8f:6d:fa:f2:42:23:37:cf:bd:db:f3:fc:b5:1d:
9c:42:56:1a:89:f2:7f:7b:2d:3b:93:63:62:84:82:
0e:91:82:bd:a1:c9:c2:08:ea:4a:d1:22:ec:37:10:
e6:72:01:58:7a:c3:d2:48:68:d0:dd:fd:bb:92:71:
8c:08:c7:02:85:06:ca:b8:38:8b:59:d4:21:28:36:
0a:36:2f:04:5c:f2:a8:51:a4:cf:75:77:da:10:e0:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2A:55:56:0E:FD:E3:68:6C:94:BF:77:3E:C6:36:AD:CD:A0:16:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142786.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a088::/32
Signature Algorithm: sha256WithRSAEncryption
0f:5e:b4:d5:90:87:2b:47:c7:9d:62:59:aa:99:08:00:52:96:
dd:10:a8:b4:b8:fb:48:91:40:dd:b2:49:d9:f5:00:6e:2c:dc:
20:55:8c:7a:05:2e:83:d9:48:e2:87:30:c1:9c:dc:ba:b0:a6:
4f:94:ed:c3:bc:ad:d7:5c:04:a3:b7:f4:f1:5b:3a:cb:71:d1:
95:b6:ce:d4:89:5b:0c:bd:41:df:55:96:c1:0e:2d:eb:fb:b1:
a6:3b:f5:fb:c7:c9:ab:0d:ce:a6:71:41:58:5e:18:1e:b6:c7:
1f:a7:a6:f1:20:7c:d2:8f:bd:3c:ee:a1:a2:96:64:b9:7a:8f:
2b:e0:e0:50:91:21:ab:83:e9:b1:dd:15:d7:ae:c5:80:8a:91:
e5:b3:cb:ba:ff:33:c4:ac:86:f1:40:6c:b3:c6:ed:c0:b9:cb:
a6:52:6e:8c:50:37:1d:69:54:ce:29:83:20:ec:cc:58:64:01:
16:5e:f0:e7:e5:6d:d3:00:e0:f1:c8:b4:c8:ce:f7:95:cc:59:
df:1a:f4:b7:0a:62:b1:42:0b:fe:46:e8:ef:47:75:73:be:3a:
52:5a:31:f6:ed:19:6f:d3:86:57:95:ff:6e:e5:f5:d2:41:b4:
79:7d:f5:ca:af:c4:b2:94:76:23:73:43:26:a9:90:33:ea:74:
30:d9:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:07 2026 by rpki-client