Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142834.roa
File: AS142834.roa (raw, json)
Hash identifier: 3go6t91J6gPczUzmSaKNEdkEhoAo+GbTN/K+D8zSDjo=
Subject key identifier: C2:D2:75:0D:0A:C5:51:60:FC:63:90:55:0B:07:54:F4:10:1E:8B:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 24093E19E9F786E135532EB774BB7DBB0266C0F1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142834.roa
Signing time: Tue 26 May 2026 06:30:41 +0000
ROA not before: Tue 26 May 2026 06:25:41 +0000
ROA not after: Tue 25 May 2027 06:30:41 +0000
asID: 142834
IP address blocks: 240a:a0b8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:09:3e:19:e9:f7:86:e1:35:53:2e:b7:74:bb:7d:bb:02:66:c0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:41 2026 GMT
Not After : May 25 06:30:41 2027 GMT
Subject: CN=C2D2750D0AC55160FC6390550B0754F4101E8BE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:14:5d:75:df:04:ed:7b:61:6f:89:3d:ef:
96:bd:08:d7:86:7d:03:19:fe:87:f4:9c:b4:c7:ec:
d1:f8:9d:77:0a:04:2a:44:3b:78:94:e2:50:f9:67:
8c:59:b6:b5:96:07:4e:63:a7:15:b2:35:96:85:ca:
29:e5:83:af:90:87:78:f6:c6:5e:ce:ee:1f:1b:33:
cb:d6:c3:ea:56:b8:05:1e:27:41:1c:a9:05:06:95:
41:c5:22:08:78:66:2b:a1:7a:ea:0b:78:66:a0:15:
3f:02:25:58:08:27:4b:74:5f:0f:91:f9:9e:2f:dc:
76:4b:96:7e:10:88:d9:fa:00:96:da:19:84:86:be:
42:d5:3a:68:d1:b7:60:66:f1:92:f2:f7:59:51:d8:
8c:4e:c5:6f:a9:20:e6:2d:25:9d:94:f1:6f:af:5f:
e8:76:5b:f0:d1:90:26:2b:4e:86:74:de:f4:19:99:
07:9f:eb:f7:1c:93:a3:8a:c4:92:db:51:42:d7:5b:
cc:c3:d2:ac:e8:a6:54:ee:ca:48:da:2e:c8:24:77:
89:92:24:9d:43:92:cd:6b:43:b4:63:90:65:f6:fb:
a1:d4:91:de:cf:ba:3c:7c:41:94:0e:55:56:ad:74:
90:fb:89:cb:9e:06:35:2b:a2:cb:8e:f0:6e:e4:d7:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D2:75:0D:0A:C5:51:60:FC:63:90:55:0B:07:54:F4:10:1E:8B:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0b8::/32
Signature Algorithm: sha256WithRSAEncryption
b4:c3:50:a4:fc:16:15:85:5b:ec:88:7d:b0:53:28:8e:21:d6:
02:24:90:eb:a4:48:2f:94:1d:65:46:fe:59:ed:f2:83:d1:0c:
10:3b:b6:51:f6:7a:41:bc:25:0a:66:b3:a6:99:3b:7e:eb:b1:
5c:44:9b:44:10:a2:be:ce:a5:55:39:ed:9d:67:7b:2e:99:ce:
d7:c6:25:65:c8:38:aa:10:7e:2f:05:40:f9:e6:2f:bd:7a:39:
70:b0:3f:a5:9c:7e:4f:3f:93:04:6f:8d:6b:6c:20:23:0c:3d:
1d:69:fc:6b:09:a0:63:15:61:87:c7:7f:8e:2c:53:8d:0b:e9:
7e:6b:02:b8:82:5b:65:19:36:0b:70:ed:dc:31:af:a2:76:1a:
24:80:23:1a:8f:03:76:68:ea:24:16:90:ae:7f:8b:85:e1:d5:
4c:99:6e:45:ff:17:6e:21:ac:c8:1c:5c:c6:6e:30:54:9f:0f:
ad:ed:2c:ce:ea:65:e5:b6:3a:c5:7c:60:f5:8c:af:f5:ed:03:
3f:6b:09:85:08:c0:14:76:43:75:91:73:a6:23:d8:7f:0e:dd:
97:bc:bb:74:28:cf:d2:f0:77:6e:f6:d3:c5:0a:82:11:cc:d6:
67:ed:43:85:1f:db:c1:41:06:52:b9:0c:67:b5:3f:eb:69:df:
3d:c6:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:05 2026 by rpki-client