Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142835.roa
File: AS142835.roa (raw, json)
Hash identifier: FlQ5wclXW8HNlUIGwu/J2YurnvGwuujJXx4rw+jN8g8=
Subject key identifier: BA:7E:95:A5:A2:CF:EE:0F:63:21:15:26:B0:EF:6D:F9:0B:EE:E2:08
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7651995E640F0B9EA710013380DE3B76DFC040D0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142835.roa
Signing time: Fri 22 May 2026 07:25:03 +0000
ROA not before: Fri 22 May 2026 07:20:03 +0000
ROA not after: Fri 21 May 2027 07:25:03 +0000
asID: 142835
IP address blocks: 240a:a0b9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:51:99:5e:64:0f:0b:9e:a7:10:01:33:80:de:3b:76:df:c0:40:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:03 2026 GMT
Not After : May 21 07:25:03 2027 GMT
Subject: CN=BA7E95A5A2CFEE0F63211526B0EF6DF90BEEE208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:f2:1e:41:e4:3a:05:7a:c0:a6:31:b0:06:
5e:b3:e5:bd:7f:20:0f:ea:85:1c:77:dd:18:e8:bd:
18:1b:79:09:e6:91:e4:43:ad:cf:ed:f3:de:08:27:
24:7f:ec:d2:33:46:ba:7f:a5:41:47:db:00:d0:e8:
7e:db:f8:bb:15:82:b1:ee:05:a6:f9:19:d0:fe:47:
1d:2c:d5:24:23:1c:66:fd:ef:84:0c:89:fa:b0:bb:
ac:4b:a7:b9:55:2e:f3:dc:41:a1:6e:8d:2e:47:9c:
bc:d0:1f:c3:6f:7a:4f:e6:a5:00:cb:1c:1a:a6:15:
08:07:93:d5:5d:33:22:1a:60:a9:ab:70:67:4f:a2:
b7:a3:54:a9:eb:c0:03:1b:89:3f:eb:d4:07:e7:c3:
e8:3f:75:3a:79:42:48:98:f2:20:e4:f9:c8:f5:e9:
b9:d6:b0:3c:07:31:fc:2f:0b:88:93:b3:90:6d:72:
bb:b2:2f:d6:9f:9f:19:a4:1c:46:9b:06:f6:dd:32:
26:fd:42:b1:e9:86:f7:ea:c1:d2:3f:83:67:f0:62:
e7:11:8d:21:7b:20:5c:23:3c:34:45:1b:46:1f:a2:
1c:65:51:70:9d:cd:14:70:69:f3:cb:bf:7c:05:ab:
f2:6f:d6:d6:71:0b:bc:92:cd:87:76:7a:5a:4e:f9:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7E:95:A5:A2:CF:EE:0F:63:21:15:26:B0:EF:6D:F9:0B:EE:E2:08
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0b9::/32
Signature Algorithm: sha256WithRSAEncryption
5f:52:8f:fd:16:e9:22:46:58:87:9f:ed:63:12:f4:c7:16:36:
1e:01:73:ad:83:29:a3:d9:86:3b:ed:67:1a:13:af:3c:88:7f:
cb:84:d0:42:18:6b:ff:18:a1:42:e2:be:3a:c3:04:90:79:a7:
7d:a9:6e:34:14:ee:8d:ba:5f:81:1a:18:ac:10:4e:bb:ae:6b:
ec:22:60:e0:86:01:85:11:e0:fb:0a:4f:db:c7:c5:46:22:d1:
b6:d9:f2:8c:64:15:71:7b:ad:9f:eb:ae:ed:65:0f:26:aa:63:
91:92:b4:01:f5:59:58:78:54:f7:0e:0b:73:95:94:e3:b0:c0:
44:4f:63:f4:4a:6a:1f:1c:aa:86:6e:a3:df:bc:fa:37:33:5e:
f2:e3:24:de:74:91:8d:e3:3d:37:96:7a:14:04:dc:67:87:e3:
5e:c0:5a:bc:e3:4d:3c:3e:95:14:57:33:fd:de:cd:e8:c4:72:
46:80:11:02:76:71:53:18:8c:3b:f3:f6:8f:7a:f4:38:b2:46:
c2:f4:ec:e2:ed:61:b5:5c:1c:88:09:9e:09:55:80:de:04:93:
06:c6:ec:c2:c1:27:34:ce:47:de:81:50:0b:ac:f5:e5:15:1d:
72:ca:99:17:4e:89:f9:08:32:0a:87:e0:73:66:d3:2b:a1:dd:
50:4b:95:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:45 2026 by rpki-client