Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142837.roa
File: AS142837.roa (raw, json)
Hash identifier: Wip9RSTrSnaI5fE3FJxlMSz3MhwzspjLXGi+E0yLbOk=
Subject key identifier: B4:BA:17:66:71:67:68:CE:9C:A0:1A:BD:5F:BD:05:96:2C:8D:E3:11
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 72928B7306958BD2AE99BADD77BD4F7C56EC0301
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142837.roa
Signing time: Tue 26 May 2026 02:35:15 +0000
ROA not before: Tue 26 May 2026 02:30:15 +0000
ROA not after: Tue 25 May 2027 02:35:15 +0000
asID: 142837
IP address blocks: 240a:a0bb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:92:8b:73:06:95:8b:d2:ae:99:ba:dd:77:bd:4f:7c:56:ec:03:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:15 2026 GMT
Not After : May 25 02:35:15 2027 GMT
Subject: CN=B4BA1766716768CE9CA01ABD5FBD05962C8DE311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:d8:1b:87:eb:82:9b:fa:0c:df:03:db:fc:
6e:7e:a7:ff:a5:9a:99:dc:93:9c:98:f4:6a:e2:35:
b2:a7:bd:6e:6b:b8:65:dc:67:0a:e3:4f:60:d2:1c:
2c:55:1a:4a:9a:66:a7:9e:ab:d3:4c:9a:df:ed:ac:
5f:9d:2d:d4:0d:72:c8:df:ea:b2:c0:ec:13:c6:fd:
38:84:69:f7:44:b5:51:85:40:df:b7:01:a8:ec:dd:
4a:be:5a:73:22:a5:45:56:4e:d0:51:38:6d:b7:9e:
ea:3a:97:53:5d:46:5b:ba:16:fa:f1:6e:86:4f:bb:
f1:07:87:1a:28:47:55:b3:01:b6:d8:ff:f2:00:5f:
74:01:50:4a:17:8d:cb:f3:fd:b1:f5:4f:9a:5a:f0:
cf:e4:77:11:9a:ee:15:a2:e3:59:2e:32:fb:45:0a:
86:38:07:22:f6:9c:25:8c:d5:b7:39:2e:d6:c7:2f:
5f:b0:2a:ee:b6:73:98:18:74:4c:04:0f:5e:c3:7f:
c1:9c:b5:de:c2:90:bd:c7:57:a8:2e:87:58:60:1a:
f0:75:97:9f:65:0f:c5:6e:38:39:4b:78:7f:af:5e:
c2:66:3d:3e:9f:f6:30:45:f3:a1:12:20:e6:9d:26:
c1:a7:b6:70:bd:a3:06:dc:4b:2c:ee:e1:65:89:36:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BA:17:66:71:67:68:CE:9C:A0:1A:BD:5F:BD:05:96:2C:8D:E3:11
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0bb::/32
Signature Algorithm: sha256WithRSAEncryption
8e:b5:77:da:75:a7:e4:ab:4b:eb:95:fd:87:7f:66:f9:60:86:
0f:f6:ff:ab:d5:7b:95:07:90:1e:db:a9:a1:71:bc:e6:0e:d1:
00:4a:59:91:e8:e0:0e:8f:38:6c:d8:31:6a:08:24:9e:7e:1f:
7c:df:6b:ed:5b:e1:7c:3c:5d:96:5d:0f:23:0c:24:64:8d:b4:
82:31:45:be:b3:55:4e:12:9b:f0:5a:3a:b3:0a:e4:c0:2a:46:
23:f3:69:92:f5:44:94:8b:0d:43:5d:63:6b:73:31:c6:b9:32:
52:40:d0:98:f5:b1:4b:60:be:3a:65:f3:b7:6b:d6:21:76:a3:
ec:e3:2c:4a:4c:40:6a:01:bc:14:1a:53:ff:a8:7b:60:d7:c1:
0a:2e:df:cf:05:dd:2a:4b:0d:73:25:6f:3f:c3:db:8e:4e:be:
f4:be:66:ce:13:fd:bf:0e:57:62:dc:af:09:3f:05:11:b4:2f:
f1:9b:48:ce:ea:80:fb:f9:0f:15:af:b6:58:25:db:59:dc:11:
f9:a3:11:aa:74:92:7f:b3:d0:9e:b2:7a:66:8b:a9:63:f2:07:
4c:ff:60:cd:6e:b2:b9:21:a0:0b:ea:da:42:84:00:83:b5:b5:
d4:a0:c7:29:3a:49:8e:4d:7d:f4:57:d7:48:ac:57:51:b2:96:
39:76:d9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:22 2026 by rpki-client