Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142805.roa
File: AS142805.roa (raw, json)
Hash identifier: amltZILZcwWh9xy1SUmHgpGY7T4FlmRYBYKttBhSzSE=
Subject key identifier: 46:8E:FC:2C:45:5A:EC:C3:BA:3A:48:78:25:69:01:B2:87:F3:E7:7D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6374487F13F46AB60527334C2ACC8DC5157BB241
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142805.roa
Signing time: Fri 22 May 2026 04:26:51 +0000
ROA not before: Fri 22 May 2026 04:21:51 +0000
ROA not after: Fri 21 May 2027 04:26:51 +0000
asID: 142805
IP address blocks: 240a:a09b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:74:48:7f:13:f4:6a:b6:05:27:33:4c:2a:cc:8d:c5:15:7b:b2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:51 2026 GMT
Not After : May 21 04:26:51 2027 GMT
Subject: CN=468EFC2C455AECC3BA3A4878256901B287F3E77D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:33:25:24:40:c2:f4:85:87:0e:5e:da:a8:
f1:63:ff:b4:8a:a9:13:e8:96:9c:86:0e:6e:34:df:
44:02:0c:a7:05:6e:2d:04:3c:38:f9:c4:12:d3:dd:
f0:6e:cf:f0:37:97:87:fd:01:df:5c:c6:f7:97:e6:
a6:c9:85:21:76:08:52:02:26:44:26:88:47:45:80:
b5:df:7c:e4:4d:9e:70:96:70:c5:c1:a3:31:a1:00:
44:9f:15:f4:42:dc:7e:95:a6:4b:d2:b8:1f:86:4a:
4c:b6:fd:27:5d:18:9a:b2:7d:f2:3e:f7:fd:9a:d6:
cd:a3:a9:3d:9b:ad:e4:3e:04:90:1c:b7:68:03:f0:
48:03:05:23:59:34:45:5a:fa:40:7c:65:4d:7c:ae:
8a:94:02:e0:50:85:c8:ab:7a:eb:84:64:bd:bd:29:
aa:0b:9f:3d:93:c0:15:d5:65:90:28:5f:73:89:db:
e3:66:18:a5:cf:c4:ac:c6:de:38:be:89:95:02:0d:
8a:22:d3:e0:67:30:13:1a:3d:0e:83:76:5e:87:d2:
bc:73:c8:a5:b5:36:3f:07:92:15:95:37:65:af:99:
aa:c9:92:83:5c:ca:64:4f:b6:99:c7:4f:58:81:43:
c9:37:a0:fb:6a:ca:1b:ee:14:64:a5:1c:ef:2a:c8:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8E:FC:2C:45:5A:EC:C3:BA:3A:48:78:25:69:01:B2:87:F3:E7:7D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142805.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a09b::/32
Signature Algorithm: sha256WithRSAEncryption
a2:e5:a4:99:16:d1:21:dd:98:17:6f:db:98:79:d9:53:57:bf:
d6:19:0b:c5:6e:1b:55:a0:f9:f3:0a:30:12:02:77:f6:9e:4d:
80:1b:96:ab:7f:ba:d3:a7:2a:f3:af:9e:c9:84:48:7d:11:fa:
29:43:e5:bc:ec:85:1b:ff:8c:f6:3f:37:9d:74:9c:6a:89:ec:
ef:e9:55:10:bd:d0:41:93:5f:87:a2:df:14:2c:db:40:c9:19:
76:e5:89:aa:3f:1e:b9:97:56:a8:ee:0f:31:6f:cc:61:7c:32:
f8:ca:2a:ba:29:16:26:2a:23:52:ca:14:89:e7:1e:fb:51:51:
35:53:76:ee:f0:7f:23:bc:cd:f8:de:90:9f:c7:4f:25:38:a0:
e5:43:31:f7:2a:17:1d:d7:a0:37:fb:ad:06:c7:b3:9e:b7:0e:
80:a5:f8:31:e5:6f:72:f9:01:d1:29:a4:b1:88:bb:b7:f9:23:
e5:7f:b6:75:76:b3:cb:23:dd:8f:61:2f:0d:d9:88:ce:aa:08:
ff:32:db:c3:dd:ad:36:01:25:ea:9a:d0:47:7e:9a:78:f3:b5:
16:7e:dc:21:a9:01:e9:01:41:7c:a1:a1:0a:62:ed:51:73:97:
69:8a:d3:50:ee:33:5e:94:60:7a:9b:f0:73:ba:41:92:5d:db:
17:39:5e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:54 2026 by rpki-client