Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142804.roa
File: AS142804.roa (raw, json)
Hash identifier: yUdccfWSBoSJrWyNP29l6gyod03dQ9AbwnEJZpdzMUI=
Subject key identifier: DE:C6:A4:A4:90:E6:F1:36:16:7E:E1:1D:50:AD:78:CA:1A:57:4C:CA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 54FAE75075810C58B9060594B0303AAF6FDACCA7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142804.roa
Signing time: Mon 25 May 2026 01:51:05 +0000
ROA not before: Mon 25 May 2026 01:46:05 +0000
ROA not after: Mon 24 May 2027 01:51:05 +0000
asID: 142804
IP address blocks: 240a:a09a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:fa:e7:50:75:81:0c:58:b9:06:05:94:b0:30:3a:af:6f:da:cc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:05 2026 GMT
Not After : May 24 01:51:05 2027 GMT
Subject: CN=DEC6A4A490E6F136167EE11D50AD78CA1A574CCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:40:5e:6f:ca:29:97:02:47:11:19:90:c8:
3b:dd:8f:39:4f:fa:30:f5:dd:bc:0e:7b:66:00:80:
74:a8:a0:59:7c:68:db:50:4a:8c:6e:98:30:95:c0:
51:4e:56:96:b3:f8:bf:5b:39:6c:ba:05:44:06:8a:
7e:fe:d4:37:0e:e4:ec:ac:c9:12:f4:6e:ca:53:c9:
f8:62:33:ca:6e:6b:ff:c9:af:7b:8e:99:f4:ed:89:
2a:58:1c:87:ae:ce:ac:2e:85:42:c7:10:48:96:3f:
b5:e1:93:c0:ed:3f:41:1b:fe:3f:0a:9c:a4:d4:c3:
a0:f1:f0:73:4b:f1:ab:e5:79:10:1c:eb:de:96:df:
93:7b:0b:38:f1:98:a4:7a:87:68:c1:2a:da:ae:28:
6e:10:51:91:94:00:a4:a1:e1:75:e1:dd:ea:23:be:
c6:f0:34:a1:83:b5:38:96:93:4e:0c:00:d3:09:4f:
07:d5:c2:14:0d:d0:75:13:c4:1d:d0:86:32:fc:d5:
af:af:fa:6c:18:53:72:f2:e1:1c:84:4a:65:ed:97:
10:90:64:0b:24:aa:7c:ef:b8:3b:3a:e0:62:cc:38:
35:0e:2f:4b:a8:ec:53:f1:44:54:f6:19:b5:54:ef:
4f:f5:fe:aa:9c:9d:e4:64:93:7e:80:49:c1:be:52:
6d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C6:A4:A4:90:E6:F1:36:16:7E:E1:1D:50:AD:78:CA:1A:57:4C:CA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142804.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a09a::/32
Signature Algorithm: sha256WithRSAEncryption
aa:41:71:e4:e7:af:59:79:51:08:b4:59:27:6b:00:00:9b:58:
18:47:3b:d6:fd:b2:2f:09:50:ab:b8:44:01:b1:a1:09:ae:5a:
94:d4:bd:50:da:5d:31:bd:91:1d:87:8f:b2:74:2f:d9:be:31:
aa:49:a9:c4:e8:2b:66:af:f4:02:55:47:00:78:75:40:de:bf:
e5:a7:57:ed:43:f8:bf:0d:db:63:b1:f5:09:c5:95:a1:61:d6:
21:9f:1f:6e:55:78:55:67:27:bb:1d:dd:6d:de:04:41:1d:92:
31:ac:f8:12:7a:ad:08:ab:91:e7:7f:de:d8:2d:80:f9:17:a9:
6e:f0:8f:66:06:8c:67:94:98:51:35:cd:5d:73:fa:0c:31:b3:
17:ac:d8:b6:18:e2:8b:07:40:99:6f:30:31:a6:73:23:cd:b8:
0a:73:22:69:1e:2e:7d:44:85:5c:79:71:97:5f:23:41:82:47:
b8:fc:c2:ee:34:d6:24:ad:f0:1f:ab:7d:d0:33:41:c0:d1:5e:
54:ce:a4:e0:13:48:39:4e:bc:78:f0:97:4c:9e:46:9d:be:23:
57:7f:47:f7:16:f9:53:0d:5c:6b:5c:58:2c:58:8a:1d:9f:f8:
86:72:00:70:92:30:1b:67:61:0b:2e:8e:95:dd:50:a6:8d:29:
87:82:c2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:57 2026 by rpki-client