Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142803.roa
File: AS142803.roa (raw, json)
Hash identifier: 9oWIJiRboBJ1GXlqb00WluFVerU8Y0uiBs0haVheGHQ=
Subject key identifier: 76:CC:0F:10:0F:1F:40:93:4E:14:02:1F:27:91:C5:EB:CF:D4:B5:CE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5EE64A19E7A0B10FC7DA8FEF734715BDBEDCDC2E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142803.roa
Signing time: Mon 25 May 2026 01:38:09 +0000
ROA not before: Mon 25 May 2026 01:33:09 +0000
ROA not after: Mon 24 May 2027 01:38:09 +0000
asID: 142803
IP address blocks: 240a:a099::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e6:4a:19:e7:a0:b1:0f:c7:da:8f:ef:73:47:15:bd:be:dc:dc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:09 2026 GMT
Not After : May 24 01:38:09 2027 GMT
Subject: CN=76CC0F100F1F40934E14021F2791C5EBCFD4B5CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:59:bf:90:22:f8:2c:a5:b3:2f:77:9f:94:
00:a0:13:07:94:f8:66:35:89:37:82:28:94:0e:c8:
bc:45:48:a6:2f:3e:cf:30:a9:90:4c:f3:ac:28:5a:
e8:15:af:b4:96:3a:d1:20:17:48:13:8e:f3:86:34:
e3:b0:5c:b8:4c:95:d4:69:f1:76:e5:83:65:04:27:
37:30:a9:d2:db:1f:fe:cc:ae:e9:11:99:ee:db:2d:
28:f2:ef:50:ae:f3:c7:6e:59:b9:dd:d6:5d:7f:fa:
d5:77:46:43:d6:99:96:99:51:6b:08:c3:4c:58:f2:
d5:57:13:3c:0b:14:44:7f:b9:cf:bf:af:61:30:39:
f2:31:7d:65:60:ac:24:c9:08:0f:42:83:61:a5:a1:
2f:14:4d:17:64:29:c6:d2:4f:ed:f5:93:5d:16:92:
28:d6:19:a2:40:5f:41:72:ce:2f:1e:be:32:0e:40:
5d:dc:7f:b6:04:59:93:82:91:1d:e0:2d:ca:ac:ee:
d7:0e:cb:7f:80:29:a1:7f:20:3c:b8:d9:25:e7:01:
26:f0:f5:47:c7:bf:a7:f2:2d:b9:27:22:b8:5d:84:
48:f2:8f:e5:dd:bb:15:2d:2f:0b:ab:41:a6:ab:99:
aa:c0:07:e3:ae:bf:cc:e1:f9:13:b8:33:58:cd:93:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CC:0F:10:0F:1F:40:93:4E:14:02:1F:27:91:C5:EB:CF:D4:B5:CE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142803.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a099::/32
Signature Algorithm: sha256WithRSAEncryption
56:45:d7:5f:b5:de:93:f0:83:c8:e8:f3:f5:bd:a5:a1:33:ae:
63:c6:2f:04:44:51:4e:50:e5:d3:33:e8:89:1c:48:3f:35:92:
cb:ab:c8:f0:ac:69:36:a9:04:17:04:f5:2e:3f:61:04:da:5f:
e4:d4:e3:24:7b:a7:69:d4:53:2e:b1:f3:e7:5e:34:b6:9a:6b:
3c:c6:34:3d:fe:de:4e:4c:44:03:a9:8e:83:be:b6:29:48:51:
e3:1e:64:f9:72:5f:6d:a8:ec:12:93:cf:cc:6b:e4:33:18:80:
29:d7:ba:6d:cf:ee:7e:c1:c4:72:5d:b2:08:63:7c:66:37:30:
19:e4:ba:a8:00:08:46:d6:10:76:27:1a:65:96:69:8d:05:de:
d1:ab:26:77:1d:9a:2a:c4:22:25:c2:69:51:d5:4a:a7:20:99:
fc:6f:05:de:6c:d2:61:a0:d9:06:87:9f:ee:1b:be:6a:63:ce:
f1:9b:e1:b7:ae:0d:e2:cc:9a:1a:cd:50:66:91:76:17:64:55:
d4:f6:13:40:a3:10:0d:04:79:70:99:9f:2e:67:82:97:47:5b:
ba:a4:51:51:98:36:ea:0b:33:b8:87:8e:25:83:89:17:98:94:
ad:76:5f:a3:45:2d:b5:14:3c:5e:54:b4:42:f1:85:9f:33:1f:
40:44:d0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:59 2026 by rpki-client