Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142789.roa
File: AS142789.roa (raw, json)
Hash identifier: BfJW015vukSOa4yvydChFZrpUBXzSPIVLCD6P8ADAls=
Subject key identifier: 99:B7:CE:AC:85:55:1F:32:1B:DD:98:39:6D:7B:D4:17:D1:3D:9E:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 54D14BAE5F87ED8278A153C6739D64BE1D6569A2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142789.roa
Signing time: Fri 22 May 2026 04:08:17 +0000
ROA not before: Fri 22 May 2026 04:03:17 +0000
ROA not after: Fri 21 May 2027 04:08:17 +0000
asID: 142789
IP address blocks: 240a:a08b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d1:4b:ae:5f:87:ed:82:78:a1:53:c6:73:9d:64:be:1d:65:69:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:17 2026 GMT
Not After : May 21 04:08:17 2027 GMT
Subject: CN=99B7CEAC85551F321BDD98396D7BD417D13D9E70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:d0:76:d4:2f:f9:83:14:b6:cf:83:e6:1c:
63:2e:36:76:16:4c:85:d8:2a:63:e0:ab:58:6c:35:
45:8d:2b:e6:82:c3:83:81:aa:13:aa:e9:c0:80:03:
75:6e:5a:24:7c:aa:ea:cb:74:61:5b:8a:b3:2b:9f:
80:63:b7:af:33:c4:fd:e4:72:96:ef:b1:b7:bb:ff:
a4:24:fd:80:f5:3e:95:3f:5e:81:cd:b3:da:10:6b:
2a:0c:85:0f:70:dd:1c:63:86:af:ec:9e:9c:0a:6a:
bd:49:51:9c:28:c3:c3:b0:17:9e:8e:af:ee:ee:8b:
c8:77:7e:1e:7e:21:26:ab:1e:bc:96:e0:3a:8e:8d:
aa:50:10:8e:d5:b7:76:15:2b:9f:c7:bd:9e:78:21:
00:d3:04:08:66:75:11:7a:4c:f8:58:c3:ec:3d:8b:
cb:64:4d:c7:71:6b:60:19:2a:a2:1a:eb:1b:d1:1a:
7c:87:75:0b:f4:13:af:56:3f:a4:49:88:c3:3f:16:
2b:67:31:66:ec:ce:2d:08:ad:fb:ab:d8:98:bb:5c:
52:41:52:43:fa:cb:4a:b3:c0:ea:24:13:79:a5:b6:
30:29:35:30:da:2b:49:fc:2d:2b:fa:ae:af:d0:41:
a5:87:88:f1:7c:6f:b1:43:8d:07:73:89:6a:db:ad:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B7:CE:AC:85:55:1F:32:1B:DD:98:39:6D:7B:D4:17:D1:3D:9E:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142789.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a08b::/32
Signature Algorithm: sha256WithRSAEncryption
25:23:0e:66:03:b9:ea:21:f2:37:af:40:5d:df:c6:28:c3:e6:
dc:b6:b7:69:43:c2:aa:55:25:06:3d:73:97:8d:05:01:41:a2:
d9:af:8f:94:90:98:a4:22:dc:4b:8a:ce:62:c5:1f:ee:d1:09:
1b:3e:6c:28:6c:df:4f:43:e4:93:d6:a5:06:d4:47:60:a5:ae:
06:17:f5:a0:ba:9c:63:50:12:32:e8:c3:ee:2b:7c:94:a2:c4:
5f:dc:1a:33:dc:b1:ab:bd:61:f6:94:b0:fb:73:6c:7e:e3:2a:
b0:66:6f:c2:b0:56:e2:94:cc:26:f5:c6:f7:a7:84:71:fe:30:
4c:b3:62:9d:f4:e1:ef:a4:bf:d9:2e:ba:f5:60:80:eb:d9:a8:
95:f3:47:4c:3f:47:69:1f:d2:d8:8b:a1:ef:54:bb:b0:bf:c5:
de:a9:54:e9:cf:27:81:23:60:ce:88:d1:04:fe:60:98:dc:33:
96:f6:08:20:32:9d:48:10:d5:81:74:75:4e:b7:9f:5b:86:64:
75:3e:56:cf:b3:5c:6b:09:73:be:0a:02:f9:93:57:d2:47:22:
5d:1f:a4:9e:a8:3d:e1:c7:28:cb:f7:8f:bc:e1:70:25:2c:b1:
c8:de:f9:ea:ca:dc:77:42:d4:43:8f:ed:6f:b5:27:1d:75:be:
4a:f5:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:12 2026 by rpki-client