Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142836.roa
File: AS142836.roa (raw, json)
Hash identifier: Rdkbp1k37fzjBPxcuqvo2VrktNJKxvUkbU662Xbdmr0=
Subject key identifier: 69:38:6C:AA:EA:61:8A:A6:D2:69:3A:3A:46:D1:49:30:B2:8A:0A:F3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4EEA02572DA6469C2CB8EAC9EED3A6905F2494FB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142836.roa
Signing time: Fri 22 May 2026 04:07:52 +0000
ROA not before: Fri 22 May 2026 04:02:52 +0000
ROA not after: Fri 21 May 2027 04:07:52 +0000
asID: 142836
IP address blocks: 240a:a0ba::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ea:02:57:2d:a6:46:9c:2c:b8:ea:c9:ee:d3:a6:90:5f:24:94:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:52 2026 GMT
Not After : May 21 04:07:52 2027 GMT
Subject: CN=69386CAAEA618AA6D2693A3A46D14930B28A0AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:bd:4b:c3:12:8f:62:f2:96:53:0b:fb:d8:
47:62:b7:82:41:03:30:19:10:b2:e5:99:86:87:95:
38:79:3c:c7:c6:52:f0:65:8b:6f:d8:c2:0c:12:70:
8b:92:51:4d:07:52:fb:e0:31:98:d8:d5:62:f4:0a:
6f:1c:7b:fb:f9:77:29:2d:d6:e5:3b:99:23:13:07:
87:eb:56:26:19:8f:b8:ce:b5:8a:04:12:3e:cb:41:
75:25:cb:82:a1:e0:fc:5c:ec:68:f6:49:fc:3c:a2:
ec:05:eb:d5:ab:be:67:45:ed:4e:c3:ca:83:f0:ce:
57:43:d0:81:36:8b:94:31:f5:52:cf:c7:1f:ad:61:
b2:48:6d:39:d9:9c:eb:44:b0:54:1a:45:a6:ce:1a:
ad:1b:50:15:2e:5d:7a:1e:93:ef:ce:d5:d5:f3:67:
a2:a8:e2:a8:24:cc:0c:96:20:d5:58:e1:c4:41:0a:
e6:67:77:70:3e:f1:fe:2b:a7:ba:57:bc:0c:dd:af:
6a:a7:49:dd:60:5a:ea:19:a7:b7:0a:27:92:09:3e:
ae:6d:ed:95:84:ed:bf:5b:6d:48:59:53:b8:11:30:
af:28:5f:ab:b8:fe:5b:d8:4b:61:e4:49:4e:bf:3a:
79:71:97:d7:52:5a:0a:2d:aa:87:d5:a4:0a:d5:3d:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:38:6C:AA:EA:61:8A:A6:D2:69:3A:3A:46:D1:49:30:B2:8A:0A:F3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0ba::/32
Signature Algorithm: sha256WithRSAEncryption
11:e3:8d:12:5f:8b:44:29:ba:32:8d:6d:09:79:c2:36:1f:e2:
af:a1:4f:95:04:1c:6f:84:e5:17:f0:cc:2c:a4:ff:c8:24:73:
33:28:38:c2:4b:90:ed:32:bb:0b:d4:78:5b:e1:00:81:0a:8d:
08:b3:c0:8e:54:b5:b1:19:95:66:46:36:27:44:c9:81:93:bc:
6d:21:99:4c:4d:51:75:fa:b5:2e:dd:61:d2:a3:a2:dc:a0:50:
69:95:78:01:75:17:86:e5:4d:3f:2f:b7:0a:6a:7a:37:1d:86:
fe:39:c1:b4:ae:b6:d8:ad:3b:ba:7b:56:cd:2e:63:6c:90:48:
22:a2:aa:8d:c5:a2:d0:ab:49:49:81:a5:66:68:d5:03:e0:95:
29:dd:ac:85:c8:34:a2:4e:61:aa:bc:02:e1:00:b7:fd:f5:29:
5e:6d:a6:fd:52:69:98:2a:e2:36:c0:0f:a6:9b:a6:f8:9e:6d:
5b:71:53:d6:78:45:ed:64:55:1c:4a:65:0e:6f:97:16:74:a2:
e3:bf:fa:24:96:7f:0e:61:9a:5e:cc:d8:9b:22:3a:98:a1:fe:
26:c4:f9:37:b2:ca:3f:8e:71:71:e1:71:f7:16:eb:62:eb:a5:
31:09:64:70:cf:3a:4d:d3:00:b1:e6:0b:39:64:2f:77:e2:b2:
8b:82:01:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:14 2026 by rpki-client