Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142842.roa
File: AS142842.roa (raw, json)
Hash identifier: NAiPD6x3pUCa4WmFile8etQOuJUezn1V/00I6Zj6XD8=
Subject key identifier: 9E:06:C7:60:59:AB:1D:DB:10:65:C7:9C:4E:04:56:AF:73:03:56:0C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A32F8F078F4CA88EE8DA90A87D67B8861027442
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142842.roa
Signing time: Fri 22 May 2026 07:41:02 +0000
ROA not before: Fri 22 May 2026 07:36:02 +0000
ROA not after: Fri 21 May 2027 07:41:02 +0000
asID: 142842
IP address blocks: 240a:a0c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:32:f8:f0:78:f4:ca:88:ee:8d:a9:0a:87:d6:7b:88:61:02:74:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:02 2026 GMT
Not After : May 21 07:41:02 2027 GMT
Subject: CN=9E06C76059AB1DDB1065C79C4E0456AF7303560C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:e2:99:a0:bf:5c:59:23:63:ad:de:4c:1f:
66:f9:bb:ba:a4:43:e9:f9:46:b6:75:ff:fc:ff:d7:
bf:dd:a0:4c:f5:d1:0a:34:64:82:f0:8d:fa:fd:95:
b9:f6:4f:d4:8c:49:97:1e:a1:23:e6:e6:6c:cd:ec:
8d:cb:04:90:d2:ae:1a:94:b8:4f:65:79:3c:7f:a3:
5c:95:95:b4:e5:c8:2f:95:2c:90:16:83:41:2d:3f:
11:72:a7:e3:92:e9:da:60:67:f8:76:a7:ab:a2:4d:
15:73:3a:d1:6b:b6:6f:41:9b:4b:eb:3e:2f:33:9a:
c1:0e:3a:82:e6:4c:02:83:82:46:e1:2b:99:85:82:
68:c8:d8:08:5e:13:67:24:f0:df:90:b1:51:88:f3:
fd:90:78:7d:33:8b:0f:c6:0d:bb:6d:f1:ad:cc:d8:
87:86:3e:d4:fd:e9:75:e8:7c:1a:55:44:9a:e0:ab:
eb:b2:a8:2c:51:45:c7:ba:32:c0:3d:9e:12:b6:ff:
21:38:07:5c:31:12:18:35:ff:1b:0f:c3:77:04:93:
84:32:34:62:ab:a8:80:95:bb:02:4e:18:a1:1e:2f:
2d:f1:42:6b:c6:de:44:4f:0e:3b:f7:cf:06:a9:8e:
27:0d:73:70:83:f6:f2:92:b9:6e:da:bf:d4:98:b4:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:06:C7:60:59:AB:1D:DB:10:65:C7:9C:4E:04:56:AF:73:03:56:0C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142842.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0c0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:74:2b:ba:bd:24:04:31:de:05:0b:0d:e9:e4:fd:70:bf:a8:
07:60:44:4a:3f:14:be:91:64:a2:49:74:dd:e3:ae:4a:49:4d:
91:7e:84:00:0b:81:05:d5:b7:3a:eb:fb:57:09:f0:85:21:58:
d3:74:d8:42:8e:7e:20:f0:35:41:bf:99:ab:87:0f:e5:85:65:
7b:69:b8:f8:29:38:0d:47:2b:ec:7d:2f:9e:49:8e:ae:6b:25:
49:53:97:7c:8a:39:0a:03:89:c7:34:eb:9c:5e:79:c0:75:ec:
7f:08:19:f1:75:c7:37:2a:9b:dc:f0:2f:a7:69:f4:90:55:1e:
bb:27:1f:fd:d8:09:ef:1e:d8:3c:97:cc:3e:20:41:be:84:bc:
5b:bc:bd:80:c7:e1:60:55:7b:f6:5a:0e:6e:dc:87:ad:b1:3f:
3e:a9:86:15:89:a0:13:84:2e:96:02:2a:fe:26:19:ae:91:86:
f7:1a:8b:e3:29:ad:04:65:46:02:92:35:31:79:1e:ff:5b:64:
ac:b0:b6:52:52:6b:f2:bd:f8:a2:10:f3:ac:0b:4d:88:f1:c7:
d5:cb:33:0f:ce:be:63:c5:f3:b1:d3:d9:8b:4a:35:8a:fd:b5:
d8:34:20:02:1b:30:6f:b9:68:97:8f:a4:d6:1b:78:0c:25:f6:
e8:7d:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:21 2026 by rpki-client