Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142844.roa
File: AS142844.roa (raw, json)
Hash identifier: h1Le7bJY85ZK8Zgc4l1XmzBO6nu0yopJHCRNqlTOeIk=
Subject key identifier: 9B:8D:35:D6:78:36:D8:A3:7C:CE:E3:07:F4:2D:E3:E6:C3:99:11:D6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 04E15A7F14BF88A5DBF3450F690255F23ACF204E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142844.roa
Signing time: Tue 26 May 2026 06:12:46 +0000
ROA not before: Tue 26 May 2026 06:07:46 +0000
ROA not after: Tue 25 May 2027 06:12:46 +0000
asID: 142844
IP address blocks: 240a:a0c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e1:5a:7f:14:bf:88:a5:db:f3:45:0f:69:02:55:f2:3a:cf:20:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:46 2026 GMT
Not After : May 25 06:12:46 2027 GMT
Subject: CN=9B8D35D67836D8A37CCEE307F42DE3E6C39911D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:c8:a4:9a:84:fa:d4:ad:f0:4a:75:fd:6a:
b8:d2:b2:17:c8:b7:03:1b:65:db:48:d4:4c:58:6e:
a2:71:d2:93:29:90:e8:5a:66:d0:71:e4:54:82:09:
01:f8:2d:02:79:2f:cb:5e:d5:7f:a6:0f:35:d1:14:
d5:c9:7d:96:06:92:ac:77:29:23:07:ce:cb:42:60:
ed:88:0b:e6:ac:09:fc:58:9f:74:2e:9f:b0:b2:38:
c6:bc:02:33:59:ce:0a:a9:d0:54:4a:c2:f0:84:41:
b8:5c:c2:f5:1e:fc:64:71:78:c9:69:9c:78:7d:7e:
db:63:19:b7:24:0a:a6:81:7c:3e:ea:83:d8:8a:7e:
29:c9:a7:15:1e:d0:70:41:3d:c5:0a:08:b0:fd:91:
53:d0:ee:f5:25:e1:3f:6e:38:f8:93:a2:33:79:fe:
b9:11:ec:6a:83:24:e6:50:92:64:63:e4:d8:36:c7:
9f:e2:93:52:36:35:87:da:8c:d7:c7:3e:41:9c:2f:
f5:4d:92:d5:9a:f3:8e:e9:ec:8e:f1:16:71:44:0f:
e7:bd:da:79:f3:89:d3:b4:f2:b9:4f:21:b8:9f:c9:
45:9e:29:f7:07:91:09:ce:0a:47:78:5e:97:3c:29:
7c:15:ab:8d:c5:11:8b:18:75:d2:de:e6:aa:50:c8:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8D:35:D6:78:36:D8:A3:7C:CE:E3:07:F4:2D:E3:E6:C3:99:11:D6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0c2::/32
Signature Algorithm: sha256WithRSAEncryption
57:73:e0:27:18:36:b6:71:87:ac:30:f8:45:49:8c:b5:d4:e2:
f3:8f:51:e8:9a:5e:75:6c:aa:eb:cb:42:8d:aa:f3:24:b2:0a:
c2:b6:36:dc:12:93:1f:4c:ca:63:5a:e1:62:b9:34:d6:11:fd:
c8:d8:d6:06:53:ca:00:c9:ee:af:df:c3:cc:fd:87:54:bd:f6:
fa:ad:be:cf:75:80:c6:2b:94:5a:2a:3d:5d:02:69:bb:84:96:
a4:47:6d:c4:bf:61:61:68:90:95:20:a0:a7:af:3c:ea:6a:85:
7b:64:d0:93:f3:b7:3b:0b:2d:38:ae:cf:47:3e:b2:b5:dd:db:
97:35:e9:25:f8:03:aa:a5:2e:1f:b2:a9:90:d4:b8:a5:62:5d:
d2:8c:8a:22:eb:e1:b8:83:06:36:c4:3e:9f:81:4b:80:9e:cf:
ad:3c:8c:2e:2e:8e:25:97:b0:4c:45:fb:5a:59:d9:95:f2:55:
63:f9:4f:42:5e:97:fd:f1:c7:f3:b8:a4:5f:dd:d0:ab:d6:3c:
10:b6:7d:8f:54:3f:0a:22:8e:85:18:84:2a:39:72:07:ad:b7:
3d:cc:82:e8:02:44:00:10:61:21:78:c8:60:df:6e:86:49:2a:
60:f7:9f:5e:63:4e:43:fc:47:17:0c:65:21:97:60:a8:9e:4c:
8e:30:f1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:23 2026 by rpki-client