Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142853.roa
File: AS142853.roa (raw, json)
Hash identifier: IknFl6+GTqyrzD48oO1FrkFgPvS8OwLlOsDGVaTvmDI=
Subject key identifier: D5:AD:9C:AF:84:EA:F3:54:1F:8B:36:F0:BC:C0:F4:80:C6:E0:0B:3D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 29517E596A95DD8BC470E4BC313AF798C8F08967
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142853.roa
Signing time: Tue 26 May 2026 01:12:59 +0000
ROA not before: Tue 26 May 2026 01:07:59 +0000
ROA not after: Tue 25 May 2027 01:12:59 +0000
asID: 142853
IP address blocks: 240a:a0cb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:51:7e:59:6a:95:dd:8b:c4:70:e4:bc:31:3a:f7:98:c8:f0:89:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:07:59 2026 GMT
Not After : May 25 01:12:59 2027 GMT
Subject: CN=D5AD9CAF84EAF3541F8B36F0BCC0F480C6E00B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:f7:d7:eb:25:d9:7c:b3:04:2d:69:5b:c1:
a3:3e:01:7f:75:d6:a2:9e:8e:ff:85:f1:d0:91:a3:
5c:50:a8:7a:11:5c:fd:21:34:6b:60:18:93:d6:4b:
12:46:c3:ea:15:08:63:3c:b1:91:ff:90:1c:3b:7c:
97:85:56:43:1d:65:c7:e2:af:f8:37:42:29:e7:c8:
73:0f:e9:e6:f4:fd:8a:0f:c3:da:bb:18:2e:e1:0a:
55:35:e4:01:2e:81:0a:87:cc:5d:2f:0b:f0:95:24:
4f:93:92:9d:58:20:1b:35:f2:0a:2c:3c:e4:75:50:
d5:1d:1a:c3:1e:bb:e1:8e:3a:58:13:f3:6a:91:3c:
bc:2b:c5:da:b0:ea:43:55:69:10:5e:82:3d:55:f4:
7f:38:36:d8:22:91:fa:b9:85:c4:bb:f2:d3:9f:ac:
86:d0:6a:5d:ff:50:d3:50:e0:f8:4a:1a:7e:1b:b5:
7f:27:98:51:dd:c6:04:aa:a3:ff:39:22:e7:aa:50:
eb:37:53:c0:c9:c0:7e:bd:05:e9:b6:50:3a:25:72:
e3:70:e1:2e:59:4a:c3:0a:36:04:65:33:8a:a8:66:
fa:73:da:9c:a9:6c:3c:bb:3c:6c:17:9e:2f:d1:2d:
1b:dc:cc:49:b2:7c:c2:da:49:e3:51:e7:ce:a8:23:
aa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AD:9C:AF:84:EA:F3:54:1F:8B:36:F0:BC:C0:F4:80:C6:E0:0B:3D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142853.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0cb::/32
Signature Algorithm: sha256WithRSAEncryption
35:f2:05:d6:8c:17:59:11:e3:6c:79:27:5c:bb:61:c6:44:89:
60:14:f9:bf:88:f8:a6:9a:a4:4e:1c:b1:9e:cb:c2:9b:ec:24:
06:b4:bd:68:65:fe:95:51:fb:07:45:0d:1e:5e:57:87:ba:f4:
33:8d:73:b3:1c:10:1e:1f:18:de:43:38:c2:b0:d4:29:96:50:
af:32:87:1a:5f:c5:d0:df:8c:6a:d2:b8:e5:c2:29:4c:a7:89:
b5:9c:68:5b:d5:16:0d:4b:62:6b:0b:1a:7d:86:29:26:92:01:
b2:fe:7b:69:cc:ee:58:f3:69:96:40:b0:a6:34:c6:6f:d3:0d:
b2:cd:d5:d8:d7:7e:b5:f1:51:e0:e5:32:98:6e:4e:9c:96:53:
55:a2:c3:69:11:a3:f3:f7:eb:aa:6a:fe:35:29:dd:5c:2b:8c:
6b:fd:bf:0f:35:2d:bf:af:43:5f:f2:97:a7:e9:fa:f7:34:e9:
ed:69:ba:c2:72:90:77:12:1a:22:03:fb:f0:44:e8:c3:c4:37:
dc:6c:d3:74:16:e1:bf:e1:31:70:52:34:2c:37:5b:3b:68:1e:
d3:47:62:ef:2b:17:81:cc:1b:cd:10:d8:5f:42:91:7d:b4:7e:
f8:c7:e8:e4:57:94:32:b0:a2:00:90:22:1d:a8:c5:43:6a:a7:
8c:e1:99:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:47 2026 by rpki-client