Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142839.roa
File: AS142839.roa (raw, json)
Hash identifier: kYtyQygFsaJXHb285c/TM2rNGyFA0oQn4cq2ip25z30=
Subject key identifier: 19:6A:86:FF:8B:79:25:B0:13:CF:47:87:3A:57:D4:3B:1E:FE:47:F8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0902A7650CF198CFB88CA53AA7285300E85CF6A1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142839.roa
Signing time: Fri 22 May 2026 07:24:37 +0000
ROA not before: Fri 22 May 2026 07:19:37 +0000
ROA not after: Fri 21 May 2027 07:24:37 +0000
asID: 142839
IP address blocks: 240a:a0bd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:02:a7:65:0c:f1:98:cf:b8:8c:a5:3a:a7:28:53:00:e8:5c:f6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:37 2026 GMT
Not After : May 21 07:24:37 2027 GMT
Subject: CN=196A86FF8B7925B013CF47873A57D43B1EFE47F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:b1:3c:9a:ac:65:7d:f1:a4:0b:f7:0d:1e:
75:31:db:ad:59:a5:47:bf:46:94:b2:a1:d7:c1:ad:
84:ec:bd:b3:aa:b0:a7:dc:10:92:eb:43:f9:f4:e7:
12:d9:1f:07:98:66:3e:f4:e8:48:13:2b:e3:5d:52:
d2:dc:1b:57:c6:19:6a:14:78:47:2e:f5:79:29:87:
39:be:26:b9:24:00:a7:8b:d8:71:14:91:df:b9:94:
c4:20:4f:7f:37:72:bc:84:fb:93:27:77:87:d4:af:
9c:0e:30:46:b1:21:e7:90:99:c2:fc:4c:31:aa:e1:
01:a2:b9:f1:f3:0e:d0:b5:9d:8b:a7:f9:92:22:ab:
a9:da:49:a2:72:7b:3b:56:d2:b1:38:8a:8c:2e:53:
3c:54:5f:8e:3c:e4:71:b1:2e:ba:dd:63:70:92:bc:
af:35:68:9b:85:04:fd:a9:7b:18:0d:48:f4:91:fd:
e6:00:f6:67:12:4a:c3:0b:cf:42:aa:3e:41:c7:31:
77:68:d6:74:28:31:ea:81:58:43:0e:6c:b1:e2:86:
e0:82:d5:25:74:87:80:37:33:79:0c:54:b2:d7:9b:
f0:e4:c9:f7:9d:5f:da:87:a3:44:17:23:0a:ba:0f:
f7:01:55:29:ab:4f:3f:2b:6e:98:53:9f:4f:c3:c9:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6A:86:FF:8B:79:25:B0:13:CF:47:87:3A:57:D4:3B:1E:FE:47:F8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0bd::/32
Signature Algorithm: sha256WithRSAEncryption
6a:bd:26:7d:45:be:8d:19:85:1f:a3:b6:63:3c:08:67:db:bf:
d4:52:f5:b1:b5:d0:cb:3f:a0:f3:fa:ed:fe:a9:37:2e:9d:ab:
e8:cb:65:5c:1b:eb:49:4d:09:ff:f4:c8:47:63:bd:bc:06:c9:
c0:03:35:15:9f:4f:c6:ff:28:a7:82:a5:8b:0d:36:ca:e0:31:
09:74:e2:8a:f4:85:f3:35:f1:9e:e3:6b:27:42:d3:44:c2:0e:
73:92:17:48:20:d7:88:b7:48:4a:56:dd:8a:3a:6a:ea:62:d4:
ca:90:10:95:e1:69:eb:62:2a:ac:32:0a:ae:a4:06:49:52:bf:
6d:c2:ae:83:bb:64:72:12:41:66:cc:6a:3e:ac:8f:80:8c:59:
87:08:a6:fe:5b:88:1e:6a:dd:7c:3c:52:6f:f3:b3:e0:88:3c:
62:94:ec:db:24:f5:ef:23:6b:95:53:6c:50:19:b7:f4:2d:9c:
d4:fb:ae:00:76:4c:f8:e0:ad:0f:af:02:4e:21:c9:8d:2a:5d:
df:b2:61:88:ee:05:41:a6:4b:32:db:45:18:41:89:a6:09:71:
bc:01:62:ba:c8:1c:03:a1:e2:5d:30:1e:ef:d6:69:90:68:a4:
31:44:77:9e:45:ae:5e:d1:9c:b6:23:2e:02:e3:aa:02:ce:ad:
7a:4c:24:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:00 2026 by rpki-client