Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142807.roa
File: AS142807.roa (raw, json)
Hash identifier: GQpY0+OhP3bTw+278ufry4RHxp0F/WymxUDSLNlcs8s=
Subject key identifier: 37:36:8C:DA:74:76:9E:72:33:19:98:99:07:1C:FD:16:5A:B5:CC:66
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 15BC3828A5F7CD6B43D72B81574B663D7275B7C9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142807.roa
Signing time: Fri 22 May 2026 04:08:07 +0000
ROA not before: Fri 22 May 2026 04:03:07 +0000
ROA not after: Fri 21 May 2027 04:08:07 +0000
asID: 142807
IP address blocks: 240a:a09d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:bc:38:28:a5:f7:cd:6b:43:d7:2b:81:57:4b:66:3d:72:75:b7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:07 2026 GMT
Not After : May 21 04:08:07 2027 GMT
Subject: CN=37368CDA74769E7233199899071CFD165AB5CC66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:0c:f9:a7:5a:5b:2d:d9:65:d9:56:9f:67:
e8:fb:30:bc:c8:ac:a6:ae:e4:3d:b1:31:ec:4e:5e:
74:1c:d8:42:18:3e:1c:71:a4:eb:43:5f:d8:e2:1b:
33:b7:d1:d4:86:a1:e0:79:7c:7c:68:3c:bb:2c:b6:
3c:bb:ae:89:d6:45:2c:30:c7:5a:b6:49:89:b2:df:
a3:07:f0:43:1d:96:de:4d:a2:4e:4a:e5:9d:93:3a:
60:f1:08:07:e9:b2:35:3b:bc:1a:72:0d:b0:39:f0:
35:27:15:38:9f:ee:25:8e:a5:d2:69:0a:8a:27:eb:
17:9f:b9:70:e7:8f:c1:8f:1d:c9:34:36:cf:04:ee:
09:c8:fc:a6:4d:37:38:9e:9d:54:f1:29:72:4b:c4:
44:64:fd:a6:d6:c9:0e:d8:24:b7:7e:f6:35:fc:b9:
a6:c1:dd:27:fb:21:9b:b2:2c:06:a9:08:9c:8f:3d:
35:a0:11:36:81:9d:76:43:0a:35:63:67:88:fb:c1:
b9:38:76:e7:2f:fd:37:e1:c1:8f:47:3e:e9:08:16:
58:96:ff:78:c2:7c:0b:4e:66:62:1b:fb:0d:00:44:
d0:23:88:df:19:f5:cc:7b:30:64:fe:5e:b8:7b:63:
ce:85:6a:fd:d1:e4:ed:98:f7:7b:a1:ca:83:e8:e5:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:36:8C:DA:74:76:9E:72:33:19:98:99:07:1C:FD:16:5A:B5:CC:66
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142807.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a09d::/32
Signature Algorithm: sha256WithRSAEncryption
ac:22:0a:47:e3:39:9f:50:16:24:dd:52:cf:c6:bc:30:31:4f:
e6:b7:b9:a6:14:44:f2:5c:bb:a1:dd:7a:dc:d9:1a:7c:84:ba:
74:b7:96:23:53:f4:3e:ce:00:36:08:9d:53:cc:05:6e:22:97:
02:e1:d9:13:d4:0a:51:3f:b4:de:74:25:d3:4c:12:d8:d7:de:
88:0d:22:56:89:c9:26:77:a7:43:31:56:9c:b9:1d:72:b8:f6:
5a:e8:58:fb:cb:c6:64:d5:5a:95:02:09:0b:a3:ac:12:ec:19:
0f:35:78:a5:75:39:fe:8d:76:f5:14:ad:7a:62:9e:1f:d4:62:
c7:a4:3b:7d:59:41:5d:5b:e6:39:65:43:46:f2:cf:cd:99:b2:
20:96:73:0e:70:da:2e:a4:2a:35:f8:af:e0:b4:9d:f5:b2:3d:
85:82:d1:eb:cc:e9:62:36:a8:cc:ee:ce:fe:e9:aa:43:b1:df:
90:ab:51:14:a8:66:48:d4:7b:e1:28:0d:f4:08:31:24:50:4e:
2a:48:8d:b4:7b:0c:88:f9:63:fa:51:46:b5:81:ca:85:69:ec:
1b:b0:0f:d1:81:86:3d:4e:02:50:45:5f:08:54:39:b7:bd:dc:
eb:77:19:99:57:5f:22:da:30:9a:e2:8c:14:30:13:6a:c3:7a:
b1:bc:23:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:57 2026 by rpki-client