Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142800.roa
File: AS142800.roa (raw, json)
Hash identifier: 5kw/HrVOgmE4JdPgC6HLFO/hsqECTCkL78gib0mm9S8=
Subject key identifier: 47:2E:3A:69:F4:89:ED:05:3B:A9:98:A7:64:C4:B3:C4:99:12:4E:AD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5C160C42F225E0CC7FE81DF90944D655AE09287C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142800.roa
Signing time: Fri 22 May 2026 07:08:55 +0000
ROA not before: Fri 22 May 2026 07:03:55 +0000
ROA not after: Fri 21 May 2027 07:08:55 +0000
asID: 142800
IP address blocks: 240a:a096::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:16:0c:42:f2:25:e0:cc:7f:e8:1d:f9:09:44:d6:55:ae:09:28:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:55 2026 GMT
Not After : May 21 07:08:55 2027 GMT
Subject: CN=472E3A69F489ED053BA998A764C4B3C499124EAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ef:65:6c:11:31:6d:5d:79:82:87:a6:51:84:
4f:df:ec:49:69:d3:a1:11:6d:3d:86:c3:c3:e8:32:
3a:d7:4d:52:7b:63:2c:e1:1b:08:71:e3:35:77:9b:
a5:d1:ce:1f:fe:47:ab:a4:0d:a6:ab:47:5c:a8:81:
53:5f:68:c8:4c:30:6a:e3:0a:e0:6c:8e:68:c4:2b:
25:ef:ad:2e:0b:e7:04:71:28:7b:25:32:d9:a3:2b:
f0:1b:2b:d6:9a:00:11:98:f6:5e:0d:ab:df:89:b9:
7e:4d:b8:36:f2:2e:73:97:39:a8:9b:59:57:f1:05:
1f:b3:b3:92:ea:01:e2:f1:8f:c1:d8:d8:fc:db:50:
6c:91:bc:4c:63:a6:96:c8:0a:b1:ef:c7:7f:39:3f:
46:e7:a2:de:04:9a:1a:33:09:b1:d0:39:3c:10:22:
42:f1:29:8e:f2:11:97:aa:cc:2f:11:48:d1:a5:9d:
7f:3f:02:16:71:f7:9b:da:14:60:82:7d:c1:77:d5:
0c:03:9e:fd:57:c6:ac:db:21:6a:13:0a:62:83:e0:
a7:94:3f:97:98:df:14:70:23:e5:1e:c3:70:cf:c2:
34:9e:ca:7a:2a:0b:24:cd:dd:5a:66:b0:cd:33:1c:
15:23:68:9e:71:b5:c6:c1:b0:3f:c0:71:40:87:47:
58:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:3A:69:F4:89:ED:05:3B:A9:98:A7:64:C4:B3:C4:99:12:4E:AD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142800.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a096::/32
Signature Algorithm: sha256WithRSAEncryption
0f:be:9e:b0:e0:f6:0f:5d:92:1b:b3:fe:1b:07:31:ab:73:d2:
33:64:3d:23:79:70:d1:d2:53:f4:d4:1c:28:c3:ba:c3:9d:68:
11:13:f4:29:61:b5:5a:9f:ed:7e:b9:b2:17:89:c9:94:68:85:
a7:53:28:b2:6d:7a:0a:17:ee:fd:22:1f:2d:af:79:0d:54:62:
9f:ab:9f:f7:89:74:ec:99:e3:49:84:b8:39:c8:bc:22:13:48:
c2:32:10:c7:1f:c9:af:75:07:04:2b:26:d3:14:ea:b1:9b:a2:
99:4e:6a:66:8c:62:34:b7:53:b9:04:c2:9d:0c:c4:16:3a:da:
ac:a4:42:d6:0e:c3:95:bb:b8:96:e4:cc:55:72:e0:85:52:ce:
59:da:67:8b:e2:d0:40:af:fd:f8:36:73:bf:34:5c:98:08:0b:
2f:5a:99:c1:52:f5:ed:3d:e2:54:ba:0b:cb:8a:ae:02:15:8e:
e7:a0:e5:e2:4b:0f:d6:4f:61:d4:c2:da:c9:a4:a2:ee:3f:29:
96:be:a8:4c:cd:9c:b4:83:21:07:ab:ad:c6:e1:ca:a0:8a:09:
6a:ab:dc:7d:75:5c:4c:9a:30:e4:52:e9:2e:51:54:a0:87:ab:
1c:b3:1f:cc:36:6d:f5:fe:21:5a:07:40:3d:d1:c2:ca:0f:a1:
3f:8e:7e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:48 2026 by rpki-client