Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142825.roa
File: AS142825.roa (raw, json)
Hash identifier: lmg5vKfjKRyHNYVqsbUdoAlU1YvU7UmFBjrdxyY+eN8=
Subject key identifier: 67:A2:75:C5:B7:CC:C4:9C:8B:7A:44:8B:85:DD:43:0F:B9:F4:D1:DB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7FB7969DE23103D16C8A6A335BEFC9343385FB5F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142825.roa
Signing time: Mon 25 May 2026 06:49:03 +0000
ROA not before: Mon 25 May 2026 06:44:03 +0000
ROA not after: Mon 24 May 2027 06:49:03 +0000
asID: 142825
IP address blocks: 240a:a0af::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b7:96:9d:e2:31:03:d1:6c:8a:6a:33:5b:ef:c9:34:33:85:fb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:03 2026 GMT
Not After : May 24 06:49:03 2027 GMT
Subject: CN=67A275C5B7CCC49C8B7A448B85DD430FB9F4D1DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:a1:6e:fa:ca:13:9c:68:ff:94:3f:be:19:
89:e5:ce:7a:10:2f:53:51:4f:a3:ad:ee:a7:03:e3:
8e:69:91:d5:12:04:70:4f:76:ff:a0:2e:ca:a6:a8:
4e:e5:9b:8b:b6:58:12:c4:c8:67:ca:b2:de:a7:b1:
9b:97:ac:c7:55:73:e7:9c:ff:22:6a:7e:25:53:f8:
8b:a2:15:d1:d2:d3:3c:26:5b:4e:07:34:3f:95:f3:
79:d9:6b:2c:c3:2b:04:c8:84:58:47:dc:97:07:e3:
ae:eb:ec:16:da:18:3c:4e:c6:9c:45:e8:aa:8d:e1:
48:2b:53:e4:63:ed:6a:91:96:3f:ca:33:31:68:13:
b0:64:dd:02:47:53:38:e3:0a:34:75:40:2c:a0:68:
15:b4:2b:fa:ad:7d:a1:d2:7a:a4:10:76:ac:96:2c:
a1:fd:64:ec:1b:b4:97:6c:8c:b4:bb:f9:e6:5d:28:
6e:ff:16:fc:7a:b3:77:cd:2f:6d:b3:6d:84:be:db:
c3:69:5d:eb:fe:79:dc:80:d3:6a:63:c7:a4:71:fd:
b7:45:09:92:06:14:8e:57:49:4c:7b:21:16:e1:06:
bb:17:7d:dc:2d:4a:3e:2c:72:85:9b:a9:7a:b2:87:
48:5c:a0:f6:37:55:74:ca:97:eb:89:a1:85:33:14:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A2:75:C5:B7:CC:C4:9C:8B:7A:44:8B:85:DD:43:0F:B9:F4:D1:DB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142825.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0af::/32
Signature Algorithm: sha256WithRSAEncryption
26:ab:80:6c:ca:76:8b:33:65:d4:27:43:8c:c5:5a:4f:9a:9e:
9c:62:97:44:6a:cf:0c:7e:2e:f6:d4:e2:c0:d4:f9:a0:5c:e7:
11:44:05:4f:bf:ec:a4:d5:1d:ed:39:ce:58:b3:c6:82:aa:5a:
ea:01:c8:90:b2:1c:c6:0b:6f:53:0d:00:9f:7d:9c:88:d1:46:
dd:00:d9:ca:52:88:bd:f1:96:35:db:90:70:13:11:d7:b0:21:
e1:49:33:bd:a3:89:e8:3e:f7:34:84:13:4a:ca:cc:f5:48:f1:
7a:89:ce:6e:93:f4:37:19:83:cf:ff:64:f6:28:bc:32:da:9a:
32:48:3b:e9:f5:f1:6f:fc:b0:c0:72:fd:04:6f:88:6e:2f:ad:
1f:6f:cd:fc:83:6c:88:f0:5e:3e:e1:c6:28:e1:36:af:98:77:
50:b1:28:c7:5b:0e:ba:45:bc:c4:8d:83:bf:f9:b7:45:95:57:
e4:78:74:d7:88:ba:0b:08:2e:5a:f8:33:3e:78:a4:1a:fb:bb:
ca:15:ad:ee:bb:d0:4e:6c:b0:38:97:32:f5:49:73:b8:52:56:
03:c0:f4:fc:16:ca:40:1c:b2:73:f3:29:41:17:d6:5c:8d:07:
e3:65:81:7b:59:10:ac:c8:a9:7f:5c:25:cf:ad:18:55:b5:76:
19:a9:ad:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:03 2026 by rpki-client