Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142827.roa
File: AS142827.roa (raw, json)
Hash identifier: YKMSDGXa1fBWJqnrB8LF+Nhl2NPglYdOt3OPG7QJUaA=
Subject key identifier: 41:32:BA:22:52:31:39:42:A4:BD:F2:62:66:52:01:AF:83:D9:91:52
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D9ED8FA41DD88E40A6723DEBA556D97C47C5C66
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142827.roa
Signing time: Fri 22 May 2026 06:46:14 +0000
ROA not before: Fri 22 May 2026 06:41:14 +0000
ROA not after: Fri 21 May 2027 06:46:14 +0000
asID: 142827
IP address blocks: 240a:a0b1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:9e:d8:fa:41:dd:88:e4:0a:67:23:de:ba:55:6d:97:c4:7c:5c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:14 2026 GMT
Not After : May 21 06:46:14 2027 GMT
Subject: CN=4132BA2252313942A4BDF262665201AF83D99152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:5c:42:3c:ea:06:db:b5:57:f9:ee:55:e5:
d5:b0:87:30:6a:e0:87:c1:b9:ce:bd:50:c3:96:ec:
7c:77:5e:bb:76:f2:83:18:d4:ec:fd:a2:66:95:32:
11:33:6d:8b:d2:78:c9:ea:84:e8:df:b1:e0:11:74:
4d:5a:de:85:4d:eb:a4:0e:3f:6e:b7:06:21:49:59:
88:e2:97:46:60:27:f9:95:ae:49:8f:05:1e:1d:93:
06:1a:c9:d8:fc:8b:9f:98:57:fd:3e:8d:23:b5:93:
7f:9b:5b:ac:41:f8:5e:b9:d2:ee:e9:49:b1:fe:4c:
0e:87:26:f9:67:73:32:47:35:7b:00:17:ec:d3:10:
3c:39:e9:46:b8:4f:e0:fd:88:8a:dc:0e:c1:35:9b:
45:80:d7:67:f5:95:50:78:5b:6a:58:44:44:29:3c:
ab:f0:4c:ea:2d:3a:3e:7f:8f:7c:23:e4:5a:9f:f0:
16:05:5e:f9:5f:65:11:52:2e:57:0a:02:60:37:83:
da:83:54:2c:6a:65:05:8b:06:df:b8:b2:a9:8f:ac:
c2:5b:eb:0b:98:e4:62:14:4b:10:8c:4d:8a:9c:72:
f8:7b:be:da:fe:de:21:c3:31:a5:25:4f:7b:0b:30:
80:1b:1c:fa:bb:7e:e7:32:84:64:65:9d:92:ac:de:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:32:BA:22:52:31:39:42:A4:BD:F2:62:66:52:01:AF:83:D9:91:52
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142827.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0b1::/32
Signature Algorithm: sha256WithRSAEncryption
54:33:d4:d2:29:0b:42:e8:ab:99:0e:db:26:cd:02:b0:fa:72:
6c:8c:52:8a:ff:05:1a:3a:98:08:81:fe:31:a0:46:99:d8:7a:
ea:a0:4f:00:af:5f:e1:4d:cd:af:7f:2f:fb:77:af:c7:63:87:
9c:71:16:04:ce:33:9d:e1:df:69:0b:47:11:bf:d9:46:17:db:
14:86:9a:7b:e4:08:b0:41:7f:a5:85:11:39:15:70:07:ea:ba:
4a:cd:f4:6e:c1:a3:b3:e4:2f:20:90:88:13:67:a1:bd:6a:1e:
b4:f9:04:e3:39:2e:87:a3:e2:bd:d0:79:57:20:0e:96:08:75:
f1:8d:97:96:43:81:a2:0c:b7:c3:ae:0d:8b:85:fc:71:85:7d:
54:53:53:0c:11:bd:21:2c:c2:da:1d:88:62:da:cf:38:6d:8e:
48:fc:c5:71:8d:64:c2:2c:90:81:29:e8:64:f8:52:e3:7f:d8:
8f:33:6a:6c:e6:d4:f4:a2:52:a0:3b:6e:1d:97:d1:fd:49:8b:
9e:b2:d8:01:f0:96:72:ae:98:1a:b0:bc:ef:af:b5:7e:a9:d2:
f7:0d:5c:a8:26:29:5e:e4:1f:b6:7a:75:4c:36:ce:71:8b:7c:
6b:74:34:eb:64:de:d1:32:ee:e9:de:4d:62:ff:11:19:52:76:
90:34:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:24 2026 by rpki-client