Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142810.roa
File: AS142810.roa (raw, json)
Hash identifier: /hXw+Ge9B7vHsfG9+jHWOL2KZrE5zVhDbg4mC7gLUZ8=
Subject key identifier: 72:BA:26:B9:40:AE:06:9B:3C:40:BE:7F:DB:3B:09:5C:CA:D4:20:51
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 72936E250C914DD1C0405DC657FB1F6E421A843C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142810.roa
Signing time: Fri 22 May 2026 06:58:34 +0000
ROA not before: Fri 22 May 2026 06:53:34 +0000
ROA not after: Fri 21 May 2027 06:58:34 +0000
asID: 142810
IP address blocks: 240a:a0a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:93:6e:25:0c:91:4d:d1:c0:40:5d:c6:57:fb:1f:6e:42:1a:84:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:34 2026 GMT
Not After : May 21 06:58:34 2027 GMT
Subject: CN=72BA26B940AE069B3C40BE7FDB3B095CCAD42051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:32:1f:c6:a8:19:f1:14:bb:08:cc:4f:ff:
5f:62:d0:5b:93:1e:f1:1c:88:b1:30:2b:d5:8e:d6:
bb:33:c6:76:7e:a3:55:18:eb:7e:df:62:49:0b:99:
94:0a:b2:2d:35:5e:1d:45:a2:65:64:78:4c:3c:00:
b7:7f:cb:c7:0c:7f:2a:ea:14:af:e8:c1:9a:02:02:
f1:c6:db:00:cc:f5:04:b4:59:52:76:b4:39:c8:73:
44:f5:a3:87:c8:1c:2b:cb:05:75:0f:c3:e0:90:59:
d1:68:64:4d:a7:27:e7:64:ba:78:3e:42:6e:11:35:
21:0e:fb:c9:37:df:2d:bb:01:23:d5:d4:a3:19:23:
50:7c:e7:61:c4:72:4c:6d:90:16:6f:0d:90:ef:6d:
8c:6a:df:34:98:67:24:ca:7c:fb:0a:8f:73:00:22:
a2:8b:47:cf:41:21:6e:47:f7:76:4d:6e:9a:9f:3f:
0a:49:59:c6:e6:75:be:10:01:f8:31:29:f4:9c:07:
b4:e8:32:1b:41:79:a2:af:f9:72:63:2c:7d:f8:45:
d0:52:ee:b5:ef:65:10:8c:73:a9:d6:f9:a2:fc:83:
57:bf:28:8b:85:34:db:5c:64:24:7d:20:0f:0b:69:
e5:42:97:2e:78:8b:1d:28:71:54:02:5c:71:8d:6d:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BA:26:B9:40:AE:06:9B:3C:40:BE:7F:DB:3B:09:5C:CA:D4:20:51
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0a0::/32
Signature Algorithm: sha256WithRSAEncryption
36:77:dc:a7:8c:ce:96:93:a9:0c:20:b0:8f:27:3d:8d:a3:95:
a0:31:6d:df:b8:52:cd:0a:a5:0e:08:ca:e2:10:28:08:3b:4d:
9f:a2:13:48:95:73:67:15:0a:1b:f4:78:4e:f5:d4:27:cc:03:
5c:35:80:ef:38:83:90:1d:84:be:a7:8f:e0:32:49:76:4e:64:
f3:04:39:2c:98:5a:13:9a:0c:6e:85:ba:f0:76:e1:5c:f0:bf:
76:53:62:ed:f0:0b:b8:ca:f7:ce:5f:db:ae:76:70:0b:da:07:
5c:14:d7:66:62:e4:e6:0a:df:da:e1:19:c6:2c:88:ed:24:33:
84:8c:03:c7:1e:b7:85:03:58:b6:b5:d7:0e:46:b9:c6:26:5a:
01:54:93:16:7e:a9:3c:bd:ac:98:79:87:29:1d:cd:e2:b8:21:
02:b9:88:55:cb:e4:7c:49:8e:da:8c:08:fe:41:e2:ab:70:22:
b7:bf:7b:08:1e:a2:ac:e7:fb:0f:ce:70:3b:f7:b2:70:5d:bf:
31:84:dc:4f:b1:6d:0e:01:a8:81:01:3d:44:2a:05:56:93:99:
ec:14:33:97:d0:9c:7a:f1:f3:c6:19:1f:e4:e9:38:f8:92:d3:
32:16:f2:20:49:03:b6:0c:06:37:90:f0:08:c9:bf:86:69:d1:
b9:ab:47:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:50 2026 by rpki-client