Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142845.roa
File: AS142845.roa (raw, json)
Hash identifier: 2Ee52qv5nT0f8hbhY3JNUJHXqfcRWGDOL/p3v/JxuJw=
Subject key identifier: 82:22:5C:08:FA:15:38:02:D5:81:C2:9B:07:6A:88:DA:95:36:FA:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 446593833F6B8C7FB6B770CA13883011BD85C4F6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142845.roa
Signing time: Fri 22 May 2026 01:50:40 +0000
ROA not before: Fri 22 May 2026 01:45:40 +0000
ROA not after: Fri 21 May 2027 01:50:40 +0000
asID: 142845
IP address blocks: 240a:a0c3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:65:93:83:3f:6b:8c:7f:b6:b7:70:ca:13:88:30:11:bd:85:c4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:40 2026 GMT
Not After : May 21 01:50:40 2027 GMT
Subject: CN=82225C08FA153802D581C29B076A88DA9536FA79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:9a:00:9e:4c:7f:17:06:cc:8d:66:6f:c2:
36:8a:de:23:54:b1:f0:91:91:21:ac:2c:bc:13:ba:
3a:44:c5:16:a7:ee:e1:98:9f:f0:3d:1b:82:3e:7f:
af:e3:28:4d:7b:c0:1e:1f:b5:25:bc:59:4c:7f:ad:
93:c0:70:d6:b2:5d:68:80:71:51:4f:a2:2d:bf:3d:
2e:84:ce:ea:8e:d6:3a:5e:8b:81:a7:ed:6b:48:fe:
47:1d:20:6d:c6:14:12:b1:f0:6b:50:af:1b:b9:2f:
fd:bd:0d:d1:85:c0:97:fe:98:4a:30:6b:71:24:91:
3b:f2:48:3c:97:2e:71:7b:34:b2:0c:5a:13:67:77:
0e:ff:a5:e2:d8:85:f7:56:f7:34:48:a7:19:41:50:
16:af:34:58:a1:6f:70:14:dc:22:b5:78:ba:b5:91:
7e:2c:b9:ea:49:eb:07:32:d5:61:cb:15:b9:62:e0:
46:01:c1:5a:c9:37:15:a9:6b:e1:7a:dc:0f:61:5d:
9d:ea:a4:7d:c3:69:d0:6f:4c:bd:22:4a:45:f1:56:
e6:2e:32:a9:d4:c5:e1:2e:ad:cd:27:51:e4:1e:c0:
6c:38:e9:a4:9f:df:ae:b8:db:09:9f:32:00:cf:64:
55:3d:69:6b:f1:9b:da:1f:2d:7c:37:0f:b4:fd:d9:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:22:5C:08:FA:15:38:02:D5:81:C2:9B:07:6A:88:DA:95:36:FA:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142845.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0c3::/32
Signature Algorithm: sha256WithRSAEncryption
6d:41:42:61:6a:30:fc:2e:e1:39:dc:1b:20:11:17:66:36:fa:
40:a9:36:c7:20:26:ab:56:e1:0a:35:17:fd:32:af:62:33:93:
ea:9a:c4:e0:d9:28:37:86:1b:52:43:97:e9:ce:d0:b7:53:20:
9c:94:fc:87:7e:02:3b:10:81:33:30:4e:0c:78:25:7e:26:72:
6f:7f:fb:56:67:b0:da:e4:78:7a:30:40:0c:ca:0d:14:19:ab:
f5:f5:7e:57:b6:9b:0a:de:01:a7:1f:63:16:d3:18:5d:3d:9d:
2b:ce:5e:b9:17:01:33:1b:16:2c:b6:54:74:b4:a4:cc:ce:16:
6c:6c:c9:ec:55:f1:9f:25:e8:9c:9d:cb:a6:4e:e3:70:b2:a9:
60:82:45:8b:95:81:58:51:0b:f6:86:d2:58:71:1a:a2:91:1f:
01:09:ad:1b:d0:de:0d:f8:a8:1c:b6:70:11:2c:6f:90:1e:16:
08:b7:af:79:3a:d8:72:32:24:38:e9:fa:79:fc:66:dd:d5:cb:
84:e9:3a:5b:73:77:c1:66:72:f0:a3:fb:14:52:43:e0:c4:b7:
6b:1f:9b:1e:14:34:99:34:c2:1d:7d:f3:98:78:37:d5:97:75:
42:c6:30:32:7f:a1:70:69:9c:53:de:d6:6b:ad:e5:b7:74:78:
c0:9f:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:32 2026 by rpki-client