Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142855.roa
File: AS142855.roa (raw, json)
Hash identifier: FR6QWul23TrqB89X/si/h2Jqb/b5bOJ0mb34/LNaQko=
Subject key identifier: F3:DA:91:75:9B:8B:7F:15:9C:82:F5:20:A9:BB:BA:55:51:8B:FE:4F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 474D6904659BD9BA397BD148A66D0E9F212E20CC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142855.roa
Signing time: Tue 26 May 2026 02:35:24 +0000
ROA not before: Tue 26 May 2026 02:30:24 +0000
ROA not after: Tue 25 May 2027 02:35:24 +0000
asID: 142855
IP address blocks: 240a:a0cd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:4d:69:04:65:9b:d9:ba:39:7b:d1:48:a6:6d:0e:9f:21:2e:20:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:24 2026 GMT
Not After : May 25 02:35:24 2027 GMT
Subject: CN=F3DA91759B8B7F159C82F520A9BBBA55518BFE4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:1d:5c:5f:e1:97:60:bd:73:9b:cd:99:35:
c7:01:49:98:85:c1:39:60:d7:26:a7:76:de:ce:2b:
40:45:fe:e6:4f:2b:83:5b:99:b7:fe:ac:0b:c0:6f:
8a:86:3d:88:ae:e0:e1:80:49:bc:08:da:17:6e:68:
e7:f5:b8:2f:b6:2c:a1:46:0e:b7:b8:1b:4e:ad:8d:
7f:5b:02:a0:a4:ea:99:4c:7d:df:c5:cc:4e:1f:0f:
69:0b:9e:09:67:77:fa:e9:cc:11:b1:91:4e:fe:63:
9b:68:e2:40:38:99:63:67:4e:12:c1:c1:f6:8a:a3:
fd:fc:54:c2:75:8e:d2:3c:b2:c1:83:1a:54:6f:33:
0a:8c:dc:83:e2:df:99:73:02:fb:ed:76:ce:c1:df:
04:1a:f9:40:5f:16:a4:89:02:b0:e5:fa:3c:cc:04:
03:5b:73:d8:d1:02:f7:ca:f5:a6:8f:98:95:89:21:
d3:0e:bf:03:51:3a:66:08:90:cb:67:f1:4e:9e:37:
b0:97:a8:11:f0:c4:71:af:84:e7:80:52:86:ec:32:
b2:c5:92:85:3a:6a:16:70:55:7f:85:96:d1:f1:e8:
54:a5:e6:f5:2f:de:56:21:c5:ab:45:bf:04:86:ca:
53:9a:5b:3d:a4:a6:15:3e:24:ae:db:e8:b1:90:56:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DA:91:75:9B:8B:7F:15:9C:82:F5:20:A9:BB:BA:55:51:8B:FE:4F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142855.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0cd::/32
Signature Algorithm: sha256WithRSAEncryption
b3:0e:fe:a6:b3:da:a1:97:63:18:aa:43:ba:00:63:f3:fe:33:
42:47:92:1e:37:72:26:b0:0e:3b:58:2b:4e:b2:43:99:5a:2a:
bf:dc:5f:2d:4c:eb:1a:1c:25:8a:41:0c:66:70:2c:64:e8:03:
39:a0:b3:9f:42:e2:98:d0:f9:d8:c0:c4:6f:18:5c:49:ed:75:
ea:7e:cb:d9:38:93:63:be:3e:68:30:6a:b0:41:e0:85:2e:e3:
ed:0c:1a:43:5e:a7:70:bc:db:ca:93:e5:93:c9:4d:97:5d:22:
2a:1d:8b:31:fa:01:89:9d:b9:35:d2:0d:0d:c6:db:b6:24:86:
a9:ce:fa:4b:33:e9:4d:cc:96:77:c1:7c:7f:24:a9:df:d6:a0:
15:af:40:79:38:9e:48:34:ab:63:18:86:65:66:5d:71:e6:51:
d2:cf:99:80:17:49:a7:d9:39:04:0b:e4:98:6a:cd:d1:bf:34:
08:06:d1:be:ea:fe:8f:67:38:5a:6e:63:9a:7f:2e:25:d5:09:
ff:64:12:e2:0e:55:f2:da:b1:0d:79:20:b5:c9:9c:66:75:53:
f5:bf:ed:89:26:a6:47:36:5c:2e:f5:c0:ec:90:ed:a3:8f:e6:
9d:65:b6:bd:35:1f:a0:83:1d:f7:8d:fa:c7:88:15:03:3f:ef:
40:72:c4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:21 2026 by rpki-client