Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142814.roa
File: AS142814.roa (raw, json)
Hash identifier: 2sgQ1vqK3H3h3jnceaFq5uDJbXjSHBCDtOsDLYSxlSo=
Subject key identifier: 4C:79:A7:68:A2:59:87:5C:BC:54:A3:D2:D5:A5:AC:BD:FE:7E:47:6E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 67DBF3F1CACD33F2984D90EC3FEB38013A0D59A9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142814.roa
Signing time: Fri 22 May 2026 04:08:20 +0000
ROA not before: Fri 22 May 2026 04:03:20 +0000
ROA not after: Fri 21 May 2027 04:08:20 +0000
asID: 142814
IP address blocks: 240a:a0a4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:db:f3:f1:ca:cd:33:f2:98:4d:90:ec:3f:eb:38:01:3a:0d:59:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:20 2026 GMT
Not After : May 21 04:08:20 2027 GMT
Subject: CN=4C79A768A259875CBC54A3D2D5A5ACBDFE7E476E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:89:eb:26:89:08:34:f5:c0:91:13:cd:49:
7a:47:78:6e:d7:6c:23:3f:df:07:35:a9:38:7a:dd:
15:6a:f6:bb:3c:e0:79:f7:64:a4:73:a2:64:d2:7a:
d7:db:dd:6d:de:db:bd:9d:b3:1d:af:81:1b:22:14:
52:28:05:0d:21:9c:2d:48:48:fe:0b:31:6c:cc:22:
1e:b7:68:1c:c7:84:b6:1e:b9:73:89:69:a9:28:b9:
5d:ac:94:a5:b4:da:1d:be:3b:30:70:1d:61:0f:03:
a2:d7:11:60:e1:de:8b:73:54:e2:ab:7a:eb:77:9a:
86:64:15:9b:4f:a6:c0:19:4a:95:54:5f:17:fb:fb:
3c:59:da:8a:fa:f4:d8:ef:06:d7:5b:36:f2:46:99:
ff:68:8b:d3:08:9b:aa:b5:1f:49:43:23:51:80:d0:
2c:c3:dd:1d:af:94:8c:6d:55:b3:ac:25:85:8f:6f:
0a:4a:9c:66:ce:9a:64:99:c4:86:99:80:38:00:9c:
a7:a9:89:20:10:9a:40:42:23:4b:ec:b6:c8:6e:d5:
91:54:5d:a5:d9:83:e8:19:85:6d:f5:76:05:ad:8b:
64:65:4d:eb:22:93:81:f3:75:5b:43:4a:aa:ba:5c:
a8:ce:a5:5d:ba:5c:29:93:4f:96:5f:00:f0:76:1b:
64:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:79:A7:68:A2:59:87:5C:BC:54:A3:D2:D5:A5:AC:BD:FE:7E:47:6E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142814.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0a4::/32
Signature Algorithm: sha256WithRSAEncryption
82:c8:7a:aa:7e:a2:07:58:32:31:c0:b2:bf:f4:26:a1:a3:c8:
12:98:51:61:18:06:90:f4:ea:ca:c3:3f:ab:19:82:b0:d8:9e:
a3:04:43:12:f4:c1:b9:58:ec:7f:31:02:8e:86:93:29:25:49:
15:d6:ea:fe:29:0f:7f:a1:80:d4:c5:25:19:94:ba:88:b1:c2:
b2:57:4e:f0:0f:f8:fa:9a:f7:a7:b0:c9:b8:e4:0d:73:7e:f0:
c8:2a:34:dd:86:6f:43:7c:96:77:d5:de:b0:68:15:8f:c5:38:
99:56:af:b4:c5:f8:ec:03:12:89:fa:4b:9e:b0:97:b7:46:05:
5e:06:f8:7f:0a:7f:77:01:0e:76:15:2a:30:81:71:d2:41:78:
e5:d5:0c:3f:5f:be:02:89:69:03:33:26:54:86:0d:4d:5f:b4:
df:a2:03:f8:7a:1a:ac:64:c6:cc:bb:64:15:41:22:96:71:26:
24:96:05:46:b3:8b:ec:43:33:a5:bb:0e:a4:a0:2a:05:d1:58:
eb:27:10:8d:e6:85:19:94:3d:18:df:b3:6c:4a:7c:57:59:c0:
38:71:a4:70:1d:08:12:96:86:3d:de:f4:b9:3f:9d:10:16:65:
14:14:12:a1:49:b6:73:f5:09:f5:44:47:c0:9d:f9:68:44:33:
34:f5:e9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:08 2026 by rpki-client