Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142817.roa
File: AS142817.roa (raw, json)
Hash identifier: WiH+KoUgmyxHtCVMB8bPhF8eRmrR0175EXcHGZqTnUw=
Subject key identifier: 53:20:86:BE:17:FE:FC:16:7F:E3:88:A5:45:5B:C9:30:0D:D3:3A:E3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2066BE283222DCD989AB6F2FF457103B693C06B3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142817.roa
Signing time: Tue 26 May 2026 02:34:51 +0000
ROA not before: Tue 26 May 2026 02:29:51 +0000
ROA not after: Tue 25 May 2027 02:34:51 +0000
asID: 142817
IP address blocks: 240a:a0a7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:66:be:28:32:22:dc:d9:89:ab:6f:2f:f4:57:10:3b:69:3c:06:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:51 2026 GMT
Not After : May 25 02:34:51 2027 GMT
Subject: CN=532086BE17FEFC167FE388A5455BC9300DD33AE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:88:90:11:c3:2c:ee:0b:35:2a:22:3e:d7:
2c:35:1f:2a:6d:66:49:36:79:f1:75:15:a1:4d:13:
ce:7f:1f:09:bd:c3:1b:76:5e:62:27:09:22:cf:83:
c2:62:8f:85:4d:85:aa:aa:b6:ee:59:19:d2:5f:6d:
5b:f4:d2:c1:7a:cb:3a:87:f7:a9:49:e0:ff:74:c0:
61:44:0e:ac:c6:d5:f7:05:ba:02:51:96:3d:24:03:
84:46:dc:2c:98:ff:b8:53:71:73:47:a3:0d:37:98:
87:76:52:82:aa:09:57:b4:bb:5d:44:1b:90:83:df:
85:b8:92:f2:21:4e:3c:3b:72:5f:18:53:95:51:6a:
30:ca:c4:78:e4:71:8a:99:fb:a6:58:de:52:45:65:
d6:97:90:e9:a4:0d:6e:89:18:35:fc:a4:85:1e:6e:
a7:cc:fb:af:1f:60:aa:df:89:84:2a:87:cd:cf:dd:
28:97:47:6e:83:eb:e6:9e:9b:9e:6d:1e:4b:ad:d7:
a2:b9:26:7f:09:9b:9a:f1:01:fa:0a:0f:2a:0f:20:
98:81:f9:eb:20:af:7e:64:56:a5:72:3b:1f:00:b8:
62:09:32:05:b9:d6:f6:87:20:0b:21:dd:99:26:4f:
9b:b7:c8:c8:59:f2:89:c7:c9:9e:b9:e6:e7:3f:9a:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:20:86:BE:17:FE:FC:16:7F:E3:88:A5:45:5B:C9:30:0D:D3:3A:E3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0a7::/32
Signature Algorithm: sha256WithRSAEncryption
50:81:39:1b:07:45:ac:90:a5:08:6b:f6:f3:9b:56:2a:c3:d0:
4f:31:a1:76:c1:4e:09:76:94:25:2e:1e:ee:d3:22:77:39:b5:
6e:b3:45:9c:6e:a7:6a:aa:08:3e:3d:80:39:05:23:8c:9a:ce:
b4:6e:8e:ab:43:66:da:ea:54:4c:a7:47:16:4e:18:3f:9e:98:
ae:6e:c3:40:4b:d7:72:94:b0:ef:84:6e:f0:37:3c:4a:8b:fb:
49:b2:ff:8c:56:81:e3:af:97:34:40:b7:c3:61:15:15:14:14:
56:6b:19:2d:b9:37:0d:8a:81:f1:b6:c0:e7:73:76:99:5d:ef:
70:cf:ec:37:c6:87:05:6f:60:51:9f:6a:2f:ee:5a:1f:f9:ab:
c7:7d:3c:21:e9:1e:fc:ae:07:be:a2:bc:97:2c:dd:92:0f:90:
81:03:b8:ab:6b:3e:1c:75:d2:f0:c7:be:8f:90:57:1f:6c:82:
52:6a:ee:48:52:a8:a2:6c:9f:98:fa:fe:69:ad:5f:4e:0f:a7:
a3:54:f4:ba:34:7d:5e:a6:09:f6:85:0b:36:b6:43:ff:4a:8d:
ea:b7:a4:a8:96:bf:29:90:b5:52:26:ad:d4:69:49:23:4e:e0:
27:05:75:45:3b:9a:c7:ad:77:01:96:6e:38:00:19:b7:27:7e:
84:4d:61:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:45 2026 by rpki-client