Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142843.roa
File: AS142843.roa (raw, json)
Hash identifier: QOYEc/yUHOA/ilMh2kwHnrCp/EHLOVVnDbKL3KYvVAU=
Subject key identifier: 3C:7A:34:71:4E:43:C8:C5:A1:6C:E9:C8:AF:78:65:76:8E:3E:14:34
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4C868B31A5BDBA36E1739DCD612893D01A735886
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142843.roa
Signing time: Mon 25 May 2026 06:48:58 +0000
ROA not before: Mon 25 May 2026 06:43:58 +0000
ROA not after: Mon 24 May 2027 06:48:58 +0000
asID: 142843
IP address blocks: 240a:a0c1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:86:8b:31:a5:bd:ba:36:e1:73:9d:cd:61:28:93:d0:1a:73:58:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:58 2026 GMT
Not After : May 24 06:48:58 2027 GMT
Subject: CN=3C7A34714E43C8C5A16CE9C8AF7865768E3E1434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:4e:c1:f6:f1:d8:06:7c:63:48:88:02:02:
09:ec:51:5b:fb:db:e1:0a:e8:93:2c:cf:d1:63:1a:
1e:63:51:a4:de:21:03:7a:c2:e4:b9:33:d9:b6:05:
e4:1d:c3:a2:11:14:12:bd:ac:22:5f:3d:da:2a:ee:
eb:8c:2c:ae:45:b0:bc:ad:a0:91:d3:99:6a:24:49:
9c:ca:1d:60:16:6f:46:97:0c:fb:a9:a3:c5:de:37:
b0:42:6d:ec:a2:ab:1f:b6:04:d1:7f:a3:2e:04:64:
51:a6:cc:d0:72:55:46:c3:b0:db:bc:4c:ef:ec:a0:
ea:1a:77:0a:47:c3:c1:44:3e:97:d9:b4:bc:fb:09:
13:51:99:13:d6:5f:8e:43:ae:bf:f5:d1:25:62:d0:
fe:c7:9e:b9:c3:01:f4:5c:b9:7a:f6:65:2c:1c:e7:
05:df:61:e8:e5:7b:aa:df:c9:b0:c8:7f:f1:f9:b5:
fc:bb:61:79:de:b5:52:79:6f:13:33:31:4b:4d:da:
27:3f:03:8d:20:2f:32:76:76:79:98:c3:a4:c5:b4:
f1:7d:64:45:b9:0e:5f:2e:0e:d8:d0:9d:e9:f8:99:
f0:d9:da:77:dd:ee:2c:23:bc:c8:f9:2a:64:22:ca:
af:24:af:b3:97:1b:25:2f:48:2c:cf:fc:77:d7:21:
c1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:34:71:4E:43:C8:C5:A1:6C:E9:C8:AF:78:65:76:8E:3E:14:34
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142843.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0c1::/32
Signature Algorithm: sha256WithRSAEncryption
27:9e:c1:24:b1:99:5b:9c:e1:35:06:75:12:9d:07:55:a1:10:
52:00:4c:fc:c7:e6:0e:7d:b3:0f:0f:4a:8a:9a:40:55:4d:19:
82:4f:c8:08:b2:09:4e:ac:3a:60:14:2d:86:e1:8d:dd:03:75:
3c:b1:ff:0a:63:8e:44:95:57:0b:e9:26:a0:10:ba:77:1f:78:
bb:73:52:40:e5:f8:1e:29:4b:d7:6e:e9:5f:c5:b1:97:60:d5:
5a:d8:f1:d3:05:dc:5d:e6:90:f5:3b:e9:f1:35:4c:4e:01:06:
66:da:29:6e:c2:cf:29:b9:9e:d8:61:0c:32:52:6f:b3:5a:17:
50:82:92:81:68:1a:33:9b:d6:07:cd:21:e5:83:19:9d:7c:0d:
5e:33:92:17:c4:bc:f4:c2:23:a9:67:82:39:b6:e4:b9:fb:53:
a0:9d:5c:d0:46:88:41:82:09:6b:59:cd:81:0d:d7:b2:93:17:
94:09:da:ec:36:4b:36:d0:61:10:40:c8:78:48:de:9c:8c:50:
5c:7e:33:90:2b:ed:52:04:be:f9:52:bf:05:2c:0c:0a:43:15:
3e:7a:48:5f:ef:01:e5:97:0d:35:bf:d4:0a:a5:ef:ab:7b:28:
95:76:a8:3c:ee:6a:ef:76:cc:24:5e:4a:ce:85:63:1f:cc:54:
1a:d0:65:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:17 2026 by rpki-client