Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142790.roa
File: AS142790.roa (raw, json)
Hash identifier: ZlXFjYuTcmisYWTAxHpyJhDoU1KHOHSJL9etMo69irk=
Subject key identifier: 46:50:F8:20:89:A8:65:18:F1:4C:06:C8:F3:B8:F3:06:01:E7:D1:1B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 678F081DB1DA8038C2927E1D377C434F8AD5CAA2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142790.roa
Signing time: Tue 26 May 2026 08:52:59 +0000
ROA not before: Tue 26 May 2026 08:47:59 +0000
ROA not after: Tue 25 May 2027 08:52:59 +0000
asID: 142790
IP address blocks: 240a:a08c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:8f:08:1d:b1:da:80:38:c2:92:7e:1d:37:7c:43:4f:8a:d5:ca:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:59 2026 GMT
Not After : May 25 08:52:59 2027 GMT
Subject: CN=4650F82089A86518F14C06C8F3B8F30601E7D11B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:41:92:bd:c7:61:fc:e9:f7:6f:41:fa:ae:
c7:cf:3c:ae:5e:48:7c:e6:2c:7b:7f:d8:25:1c:eb:
ea:f8:ad:07:03:c2:55:19:4a:1a:8e:b8:3e:a0:94:
c7:cd:ab:68:b9:b6:bf:48:83:73:b9:27:d7:f0:cc:
9d:01:f0:e6:71:b9:53:7c:30:0d:cc:36:b5:03:3c:
9f:df:53:d4:cb:3a:e4:e1:46:39:4c:d1:32:93:ef:
b7:67:e9:38:61:ec:0d:f2:10:96:fd:59:d7:31:a3:
39:a3:7b:8a:7f:08:b7:32:08:7e:d6:bf:c4:21:96:
df:e1:4a:6f:9e:64:15:91:4e:51:9e:3e:5a:5e:a5:
ba:e0:ed:90:cd:13:f9:d0:09:ef:92:60:92:3c:fa:
1e:c3:b6:90:81:ef:d3:c2:d8:2a:e1:4c:97:e4:30:
c5:6a:4e:79:42:b8:a7:b2:5b:e4:da:8f:18:10:75:
cf:51:ab:3a:eb:de:74:b7:51:2b:0d:42:20:1f:f6:
bf:c4:53:8a:7d:e9:4c:3e:45:11:37:49:f1:4e:52:
57:cf:d4:49:f3:2e:9b:86:cd:36:48:44:71:d1:94:
fb:bd:30:4a:89:b0:3a:44:4e:45:42:6a:dd:6f:f3:
80:82:ac:ee:db:40:dd:0f:65:ca:33:a9:34:f1:69:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:50:F8:20:89:A8:65:18:F1:4C:06:C8:F3:B8:F3:06:01:E7:D1:1B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142790.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a08c::/32
Signature Algorithm: sha256WithRSAEncryption
72:27:a1:6f:6a:f2:45:22:7b:32:41:d0:90:f7:e1:1f:ea:ee:
02:7b:36:f3:0d:a4:2a:d2:74:14:8a:3a:63:db:6f:ee:60:6a:
76:c9:7b:dd:3f:b1:7d:16:78:6c:a8:cf:7a:f3:b7:17:5e:ba:
7e:a7:0f:16:b9:96:d1:6d:3b:ae:77:e3:66:4f:5b:18:7d:c2:
0e:8a:16:ca:51:04:50:75:c6:18:53:25:9d:12:41:80:2e:11:
e3:ab:4c:b7:0c:a4:ad:79:41:0a:da:08:4f:0c:07:6e:53:b8:
b9:79:9c:10:b6:bf:a0:4a:5c:57:e2:c5:59:0b:73:0f:27:37:
a3:b6:66:12:10:d6:2e:88:13:73:6c:c5:4a:13:39:9e:68:ba:
d8:e2:bd:f9:a9:9c:be:d7:d4:9d:0c:8b:f7:9b:85:87:aa:04:
c0:57:4a:39:67:bd:bb:e6:50:64:06:8f:c7:33:6d:c0:0e:e7:
b5:07:ac:d8:6f:c5:c6:61:58:20:8e:77:87:56:22:bf:11:ce:
76:47:cc:9a:ad:b2:40:92:19:df:f9:99:7d:5e:e4:1a:28:35:
e5:57:55:fb:19:8d:96:83:e2:11:74:20:e4:34:30:fd:9a:fe:
48:bb:79:83:71:2a:a6:46:dc:bd:cc:31:38:43:e5:7f:9d:fe:
40:a2:60:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:10 2026 by rpki-client