Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142794.roa
File: AS142794.roa (raw, json)
Hash identifier: 97I55dC6WP58Tupm6Ck0uhjS1rumWx18mbw0ZWKCWSY=
Subject key identifier: 1E:A4:03:5C:0D:1D:EE:9C:50:EA:04:0A:85:0C:C6:23:65:E5:3B:B7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 631E4AEEF1DE288D97B6B58C331ABE8E625293AE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142794.roa
Signing time: Fri 22 May 2026 07:09:01 +0000
ROA not before: Fri 22 May 2026 07:04:01 +0000
ROA not after: Fri 21 May 2027 07:09:01 +0000
asID: 142794
IP address blocks: 240a:a090::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:1e:4a:ee:f1:de:28:8d:97:b6:b5:8c:33:1a:be:8e:62:52:93:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:01 2026 GMT
Not After : May 21 07:09:01 2027 GMT
Subject: CN=1EA4035C0D1DEE9C50EA040A850CC62365E53BB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:91:88:85:85:6b:c4:6a:84:81:09:91:c6:
31:19:31:5d:24:a7:35:e5:bc:4e:f2:11:6f:d3:c1:
5f:b8:68:d9:19:6f:54:97:a0:f2:9d:9f:33:94:53:
99:fb:e8:37:ae:a3:a1:25:ca:3d:98:f6:31:db:5e:
34:75:37:f3:af:3c:6b:9e:be:ae:bb:e8:4a:84:db:
54:a7:be:2c:55:2d:c4:92:d1:52:fa:5b:b4:40:30:
50:f9:1a:2d:23:e3:58:e4:74:8f:a9:9f:fd:77:c7:
56:2c:79:f8:08:5b:8e:b0:0d:e2:f5:07:24:eb:e0:
f8:ac:2f:32:cf:39:36:6e:06:95:5e:18:30:a4:f7:
cc:a5:ab:26:6b:ad:48:f8:aa:5d:71:ac:55:c5:77:
1a:28:c0:ed:eb:7d:ea:d7:36:07:f1:df:11:4c:2f:
ba:b5:1d:c8:0d:1d:e0:b1:36:11:22:a4:9b:4c:ac:
02:b7:9b:fc:bd:a3:61:5d:0c:21:33:ab:4c:77:f3:
88:12:87:fc:11:83:20:7c:e1:75:6e:63:df:e9:93:
34:d7:89:90:ea:6c:10:3e:7e:1b:2b:f5:48:fc:95:
52:fe:2e:11:b5:d7:79:02:86:25:ac:6a:bf:fc:b7:
27:65:4b:af:e7:83:17:f4:71:ec:90:10:62:22:df:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A4:03:5C:0D:1D:EE:9C:50:EA:04:0A:85:0C:C6:23:65:E5:3B:B7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142794.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a090::/32
Signature Algorithm: sha256WithRSAEncryption
78:b3:36:f4:73:92:1e:1a:88:e8:4c:e3:f4:47:c1:8a:bb:93:
b8:4f:e9:55:64:21:b8:1c:f5:36:00:ed:91:e7:b9:ed:64:b1:
24:b9:3b:d3:48:cb:f1:c7:45:f6:6b:ca:21:e8:e3:51:80:ba:
58:d5:09:49:f8:8c:2e:f4:8d:b7:d1:c6:17:98:c6:42:d4:36:
1d:43:3b:32:01:c0:36:7a:43:7a:57:b8:30:7d:bc:1b:6c:05:
a3:d3:1c:52:a3:ad:cf:96:3f:ce:41:a5:28:a1:4d:dd:1b:95:
97:70:70:0d:1c:4e:ac:cb:39:ca:a5:78:de:84:d5:2d:c1:89:
b2:80:22:01:f2:74:15:d4:08:b9:8a:8c:1e:dd:e1:67:d8:a2:
de:bd:fd:ec:84:0f:24:6a:f2:4a:81:fa:42:ed:22:22:23:e1:
7c:f8:18:0b:10:b5:44:9a:4e:e2:11:80:fd:fb:12:76:0f:e3:
00:09:bb:fc:3e:7d:31:01:0f:cb:61:18:e1:cc:65:bb:f8:70:
f4:55:18:85:68:93:fb:81:87:3a:a9:a2:57:98:39:f3:3a:8b:
b0:9c:43:75:fb:d8:b5:b9:6a:25:cb:fe:b9:38:4b:3f:b6:2a:
d0:6f:74:72:70:9a:f2:8a:03:ca:3a:50:4d:98:66:6f:ec:a4:
97:e9:c1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:40 2026 by rpki-client