Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142822.roa
File: AS142822.roa (raw, json)
Hash identifier: j1fsmUXYCiKenHTwspx6RpjSBHNR9yD1M5KKv2s/CvI=
Subject key identifier: 35:B5:A5:E6:0F:13:22:A3:EA:58:BB:76:37:BC:23:A6:B0:1D:7A:D0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32AD9C57C6C7CAA18D35529A1586C2BC5A2E2087
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142822.roa
Signing time: Mon 25 May 2026 01:20:10 +0000
ROA not before: Mon 25 May 2026 01:15:10 +0000
ROA not after: Mon 24 May 2027 01:20:10 +0000
asID: 142822
IP address blocks: 240a:a0ac::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ad:9c:57:c6:c7:ca:a1:8d:35:52:9a:15:86:c2:bc:5a:2e:20:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:10 2026 GMT
Not After : May 24 01:20:10 2027 GMT
Subject: CN=35B5A5E60F1322A3EA58BB7637BC23A6B01D7AD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:61:e1:4c:dc:a5:ef:f4:e8:f0:b7:c3:10:
6f:4b:6b:21:20:1f:78:7b:aa:0c:a7:35:0d:37:7e:
10:dd:eb:63:1f:39:9d:4e:15:61:96:87:e6:ab:ef:
ce:ec:99:83:ba:8f:79:e3:f6:7b:c2:15:13:f8:ac:
df:6f:88:26:90:d5:f1:cf:87:6d:ff:fc:ab:31:46:
95:2a:34:8f:4a:f8:8f:2b:9f:a0:a0:d1:27:04:ab:
1d:83:23:68:62:80:4f:6e:73:ee:fe:fe:cc:70:5b:
e1:85:63:cb:4d:6b:e2:31:98:6b:ef:ee:c3:fc:89:
72:0f:c5:78:0f:b0:9c:34:44:4a:b9:f2:f6:41:d1:
06:48:f3:0c:41:05:ea:34:72:c0:3c:99:be:f9:03:
44:27:1e:65:f8:dd:96:7d:5b:78:35:30:31:19:a9:
8c:76:51:51:cc:db:de:ff:6f:f1:86:66:d6:28:d1:
1c:e4:d4:e9:5b:98:ca:5f:77:47:6b:93:ff:5b:b7:
75:68:67:eb:58:63:63:b5:cc:fe:50:3d:f6:7d:9b:
ac:30:97:9f:41:65:d0:ee:3a:00:5e:16:1a:c4:ed:
48:10:c7:ec:32:d3:a7:34:f7:97:02:ab:86:d4:88:
51:f3:bd:07:1f:63:70:1a:65:05:e0:8e:09:81:b0:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B5:A5:E6:0F:13:22:A3:EA:58:BB:76:37:BC:23:A6:B0:1D:7A:D0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142822.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0ac::/32
Signature Algorithm: sha256WithRSAEncryption
a8:7d:38:ee:c1:93:81:a2:e9:e0:7c:21:88:9c:17:df:b8:f0:
c6:ea:eb:7d:a3:82:d0:f5:ee:41:c5:8a:7b:c7:cf:b8:f1:1c:
4f:11:f3:a5:77:6b:86:02:8e:b8:21:26:5d:07:6c:ec:d8:66:
9d:eb:fe:6d:de:4b:86:b2:15:64:ed:64:e6:a2:bd:72:d0:55:
31:68:b5:20:e0:82:6b:f3:65:d5:1c:4d:65:78:b3:eb:d2:fe:
67:12:b2:d5:17:58:7c:e3:5a:74:3b:ae:84:b0:50:a7:10:dc:
3a:14:32:45:8a:52:fd:36:2a:2d:a4:de:fc:c0:9f:13:57:b1:
92:6a:2b:fd:1a:d7:ff:79:d6:06:be:5c:58:db:d2:22:38:25:
e4:6b:9d:6d:90:3a:b6:25:30:7c:a3:99:bc:e5:7e:2d:fa:5c:
1f:ee:5c:6a:39:a0:d0:3c:81:fe:83:fb:1a:4b:b1:16:b9:97:
96:1f:ab:f8:9e:e9:e8:ed:d4:44:1b:fa:46:0d:b5:bd:ad:82:
2b:1b:44:de:68:36:8d:fc:65:88:ca:2c:ef:bb:53:d0:17:fb:
31:47:c3:e8:f7:fd:c9:d4:34:dc:3d:ab:a2:1a:9c:33:38:c6:
c9:4e:3b:8e:08:8d:2a:ed:b8:6f:f8:a3:09:8e:22:5e:ac:22:
4d:2b:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:42 2026 by rpki-client