Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142849.roa
File: AS142849.roa (raw, json)
Hash identifier: fmefgifbR5tcRM59BcOVpPRlNKEgH9gHRLHmfXOx0B0=
Subject key identifier: CA:1A:B0:8F:58:1A:BD:13:67:85:47:8B:39:40:4E:9F:92:6B:4B:FF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7A24776E7084FAE73EBC56B5D61FF2CA93323C0E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142849.roa
Signing time: Fri 22 May 2026 06:46:23 +0000
ROA not before: Fri 22 May 2026 06:41:23 +0000
ROA not after: Fri 21 May 2027 06:46:23 +0000
asID: 142849
IP address blocks: 240a:a0c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:24:77:6e:70:84:fa:e7:3e:bc:56:b5:d6:1f:f2:ca:93:32:3c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:23 2026 GMT
Not After : May 21 06:46:23 2027 GMT
Subject: CN=CA1AB08F581ABD136785478B39404E9F926B4BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cc:3f:6a:0d:a2:31:6c:4e:23:ff:ea:46:03:
09:8f:35:f7:1b:e7:96:69:c6:99:85:17:5d:47:05:
02:28:b3:57:f1:fe:af:fd:50:1e:2d:50:d0:86:9e:
d2:22:7b:66:72:69:b8:5e:8d:72:ea:13:bd:2c:e5:
0f:e2:96:29:2f:00:3b:8f:b4:35:af:b7:9f:f1:a3:
0f:92:65:fc:7c:8c:e3:15:90:18:6c:3c:42:e7:88:
07:58:50:00:6b:05:c9:ac:24:e8:a0:6c:14:13:d6:
04:39:0b:dd:15:c4:62:03:78:45:83:06:2c:a2:74:
16:32:48:c4:b4:52:06:19:99:c6:8d:4c:86:6c:85:
d2:22:61:9b:47:e1:1b:fc:b2:9b:d3:e6:12:c3:85:
ea:1b:88:a4:c7:ad:1d:c5:94:fb:ee:06:7f:e6:32:
2b:45:7e:22:ed:b3:5d:d1:7b:a0:88:ff:a9:a3:48:
a6:25:7b:cc:d7:54:7b:a0:1f:a2:b3:ba:d1:b8:5d:
a8:c9:4e:b4:f6:63:ee:23:4a:00:ba:32:af:c1:78:
a8:28:e5:84:6e:ab:50:41:f1:2c:29:fa:20:12:6b:
ba:32:08:03:22:df:29:3f:2e:df:32:49:1b:4c:37:
db:33:31:4e:47:c8:28:8f:2c:88:47:1b:92:09:85:
2c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1A:B0:8F:58:1A:BD:13:67:85:47:8B:39:40:4E:9F:92:6B:4B:FF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142849.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0c7::/32
Signature Algorithm: sha256WithRSAEncryption
80:5f:75:92:2f:58:4a:f9:a7:d7:71:1c:07:f1:c4:05:ea:d5:
46:2c:e6:5c:54:16:9b:96:0e:3c:3f:81:45:ed:24:88:81:a7:
be:59:02:91:d4:88:90:0a:fc:09:be:70:8c:30:06:9f:14:90:
8a:28:bc:4a:2a:54:b1:a0:7e:07:7c:41:95:8a:93:35:c4:be:
be:73:2b:bb:7c:a5:3c:76:38:b9:9e:24:cb:10:94:b5:d4:9f:
4a:df:02:47:94:fe:c8:ad:95:7c:06:19:7c:e0:16:cf:50:3a:
e5:34:f0:40:43:c4:45:c8:ce:c2:ab:f3:60:85:8a:9c:3b:e3:
6d:57:d4:cf:73:81:83:99:da:85:8c:da:c4:95:46:3f:23:95:
b2:c2:65:03:5e:da:37:ad:5a:60:48:e8:52:dc:38:aa:98:2f:
56:2a:2f:17:0b:80:4d:a6:f8:6c:ec:0f:8f:47:20:6c:92:2e:
40:4d:ee:95:d0:c9:73:f4:ee:2e:22:e3:dd:b5:a0:d4:ca:ab:
9e:62:ae:ef:d7:f1:48:39:93:02:19:6c:5d:5d:aa:c7:e4:60:
7c:7a:00:de:b0:81:b6:4f:51:af:fd:0a:81:74:8b:2a:50:1b:
20:42:e0:b6:e6:5d:75:0b:6a:6a:9d:3d:69:02:18:68:76:2e:
c3:b5:c6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:24 2026 by rpki-client