Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142848.roa
File: AS142848.roa (raw, json)
Hash identifier: IUuYfv/lh+Yg5oEdAKCK7PBe2xwSfXEMQQMaucKYClg=
Subject key identifier: F0:93:C5:6B:0A:0F:09:5D:50:DF:75:CF:72:AA:93:B5:95:B8:EE:32
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6BD0D9F49D24B3C1E6A46BAFA2EE9BA460A24638
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142848.roa
Signing time: Mon 25 May 2026 01:38:29 +0000
ROA not before: Mon 25 May 2026 01:33:29 +0000
ROA not after: Mon 24 May 2027 01:38:29 +0000
asID: 142848
IP address blocks: 240a:a0c6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d0:d9:f4:9d:24:b3:c1:e6:a4:6b:af:a2:ee:9b:a4:60:a2:46:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:29 2026 GMT
Not After : May 24 01:38:29 2027 GMT
Subject: CN=F093C56B0A0F095D50DF75CF72AA93B595B8EE32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:c7:b1:ad:83:6b:35:b8:a2:4d:1e:8c:a2:
50:6f:a1:85:67:c1:c0:16:31:57:5e:af:91:94:81:
fd:60:fa:56:3b:55:29:db:a2:32:f4:09:76:c9:b6:
2c:71:69:cf:3e:85:75:96:8e:18:29:86:8d:54:c1:
e7:c0:8a:b1:01:f0:aa:8d:ad:9a:45:44:3b:20:6c:
f9:ea:e6:79:ba:d8:82:0e:5f:00:a7:a0:c4:f7:36:
5f:13:21:1e:be:02:f7:cf:e2:0c:25:f5:2e:d5:83:
09:ad:e2:90:70:23:4c:b3:ac:a0:30:f5:9c:ca:7e:
fb:76:e2:86:4f:92:a7:6b:0b:1c:92:26:5e:5b:f7:
db:ff:f7:33:a1:4b:7b:2d:30:b0:88:fc:fb:83:7d:
99:26:44:2a:62:88:f0:8c:cd:83:ef:5a:16:6a:40:
0a:e1:ef:e4:66:aa:d7:ad:41:18:30:31:b7:93:5c:
66:14:8f:20:17:47:cf:df:9e:55:5d:f2:e7:61:39:
70:33:4e:ec:47:5f:50:f3:88:8d:c5:1e:37:29:c7:
4c:f9:f6:45:f9:9c:64:ce:66:d7:6d:36:6c:de:6c:
14:28:cf:e8:2b:45:09:74:05:54:e5:4f:a8:38:ef:
c1:4c:8d:e7:a8:da:ad:e6:b3:a7:1d:89:54:ce:bf:
68:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:93:C5:6B:0A:0F:09:5D:50:DF:75:CF:72:AA:93:B5:95:B8:EE:32
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142848.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0c6::/32
Signature Algorithm: sha256WithRSAEncryption
3a:dd:f1:56:2d:1f:6e:64:35:1c:f9:9f:ad:02:2a:ba:1f:7f:
56:ac:e3:20:0e:f3:d2:b1:43:65:1f:e8:49:7a:c1:5e:d7:ad:
8f:ce:ec:9c:1a:71:ae:97:45:e0:58:04:e1:28:7e:38:15:4c:
a2:89:92:c9:0e:8f:bc:ab:c9:e2:a9:27:95:3c:24:7d:f3:d3:
ee:c1:16:65:2c:29:ad:ea:24:6f:ab:3b:46:e9:28:4c:b8:9c:
4a:62:d7:82:78:34:2c:e7:fb:af:6e:71:3d:54:be:90:5f:53:
4d:8f:2a:6a:5f:b3:58:31:83:02:81:18:88:1d:2d:af:91:1f:
bf:84:07:c4:c5:5a:a3:58:6c:1c:4d:f2:38:e0:44:1e:fa:73:
f9:24:f6:f3:5e:2b:f2:83:8c:fb:21:f1:d4:de:4c:b0:2a:75:
33:cd:40:b7:e5:12:8b:2e:6b:33:55:5c:d2:ed:88:16:47:7e:
7b:1a:89:f5:54:aa:96:79:ef:94:81:82:40:a8:7e:48:9d:f0:
b2:a8:0e:1f:ef:30:c9:92:f5:22:d0:6a:af:5c:10:d4:5c:46:
24:a5:7f:4b:c1:df:75:65:cf:a6:be:f9:12:61:03:05:f0:30:
f8:4a:e6:0b:bd:18:ed:84:55:6e:40:c6:b1:f4:4f:13:6e:3a:
1b:73:2c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:42 2026 by rpki-client