Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142798.roa
File: AS142798.roa (raw, json)
Hash identifier: 0wVOKOkB7br3x/RSH73cbVbLl49RC/eyfV4P06AEkwc=
Subject key identifier: 6D:85:19:F4:29:E4:7C:EA:8D:07:85:11:9D:48:D9:B2:5B:91:41:92
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7FE94CBAB69CB5DCDB23CA14A808B14D00DE5FAA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142798.roa
Signing time: Mon 25 May 2026 03:19:31 +0000
ROA not before: Mon 25 May 2026 03:14:31 +0000
ROA not after: Mon 24 May 2027 03:19:31 +0000
asID: 142798
IP address blocks: 240a:a094::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e9:4c:ba:b6:9c:b5:dc:db:23:ca:14:a8:08:b1:4d:00:de:5f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:31 2026 GMT
Not After : May 24 03:19:31 2027 GMT
Subject: CN=6D8519F429E47CEA8D0785119D48D9B25B914192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:52:71:78:d8:7c:0b:c0:7d:17:65:f5:79:
eb:d9:8f:03:f8:f1:67:9b:b8:9b:82:ed:09:6a:66:
23:87:b4:7c:85:e6:4a:61:3b:66:5a:38:ee:92:c1:
13:29:c0:0e:65:d6:39:3d:95:76:ba:5a:1e:0c:3d:
9f:93:0f:bc:03:5f:6f:d9:a3:a1:32:04:7f:84:7d:
5e:93:69:72:c9:70:d2:ee:9d:26:37:9b:23:e3:6a:
86:55:d9:b5:89:2f:25:0e:d9:38:1c:d0:3b:ce:ed:
85:a7:d0:f7:04:f9:8e:a4:5e:41:19:99:14:d5:a9:
3f:e7:07:1e:26:1f:1d:0e:3f:43:e9:35:f9:7d:37:
03:a8:96:47:a6:60:08:89:f7:0c:71:33:50:8f:e5:
f6:23:30:be:ef:ab:55:ce:ac:b6:f8:42:f5:b2:3b:
74:c1:eb:ff:12:a8:ff:b9:75:4b:61:35:6b:de:2e:
6e:60:a0:e0:a1:6a:af:72:94:f1:ae:2d:b8:54:13:
58:fc:2f:dd:f2:51:f9:6b:cc:54:87:6f:ea:8e:b3:
4f:0f:a6:40:3b:85:7d:3e:c4:ca:56:4e:db:13:80:
90:a5:88:e3:91:17:93:75:2f:64:2a:fb:77:7d:05:
c5:39:7b:c8:99:7c:dd:39:be:9f:11:d1:bc:64:36:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:85:19:F4:29:E4:7C:EA:8D:07:85:11:9D:48:D9:B2:5B:91:41:92
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142798.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a094::/32
Signature Algorithm: sha256WithRSAEncryption
5d:b7:8c:69:65:d6:ea:90:e4:d5:c7:6e:42:ba:1b:a4:36:78:
6f:07:b5:a8:c4:da:2c:38:47:15:2a:a9:c3:4c:5e:18:3d:19:
79:6a:9a:3a:13:3e:da:d5:9e:0c:8f:a8:00:65:cf:30:d6:7e:
84:7c:db:c1:84:44:e4:3e:83:1b:cb:34:2a:eb:6b:1b:40:cb:
bf:0e:88:a0:55:27:d5:66:9d:c8:0a:64:c1:7e:81:00:67:7d:
ce:5f:4b:1b:cd:d4:2e:20:97:0a:d9:60:ff:f7:bc:e2:5d:f0:
c2:d3:77:50:3b:d3:fc:e7:79:d4:bb:af:63:55:f5:b7:d5:3b:
07:41:43:db:45:0f:e9:19:76:a4:9f:df:2a:32:b6:b9:cb:29:
9a:48:32:8c:48:85:fa:66:28:ab:7e:3a:5f:7f:d1:2d:1e:4b:
47:33:a6:9f:d5:cc:b8:df:b7:21:bf:62:fa:7e:65:8d:27:c4:
68:8e:ab:ca:27:c0:7c:f0:63:fd:df:0a:d2:dc:92:be:18:4a:
13:8a:23:5d:08:3b:f6:15:b1:89:2d:b9:5f:1b:30:d8:ee:bd:
b9:5d:ec:08:20:ab:6b:ef:76:21:c4:80:09:b7:86:b4:32:7d:
be:e6:1b:07:f9:cd:04:62:6f:f6:49:eb:77:c6:f9:86:92:58:
bc:a9:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:07 2026 by rpki-client