Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142856.roa
File: AS142856.roa (raw, json)
Hash identifier: hUs1W3dUSgHbR8iA1dTOT1VT620XJl8pTPmJf7oivrE=
Subject key identifier: 41:C4:BF:50:37:80:EC:1F:DF:4E:D4:7F:36:7D:C7:AA:9A:33:03:B5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D6018896C1F32A47ADD5FAF5F5E336866169181
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142856.roa
Signing time: Tue 26 May 2026 02:35:00 +0000
ROA not before: Tue 26 May 2026 02:30:00 +0000
ROA not after: Tue 25 May 2027 02:35:00 +0000
asID: 142856
IP address blocks: 240a:a0ce::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:60:18:89:6c:1f:32:a4:7a:dd:5f:af:5f:5e:33:68:66:16:91:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:00 2026 GMT
Not After : May 25 02:35:00 2027 GMT
Subject: CN=41C4BF503780EC1FDF4ED47F367DC7AA9A3303B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:39:42:91:36:e1:14:60:18:40:62:fe:26:
85:2e:0b:0d:b8:d7:13:ec:10:93:9d:0c:38:2c:2c:
90:a4:08:c2:0c:4d:2e:d2:2c:e9:03:aa:36:f4:31:
e0:8b:63:7a:45:1c:e0:2e:8c:a1:69:55:de:85:e9:
2f:b3:73:6a:94:b7:77:a4:67:0f:46:10:80:05:7b:
a5:22:f2:65:22:93:9b:a1:47:18:8e:c2:8e:8b:68:
9c:66:f2:c7:ac:a6:68:3f:2d:04:cf:fb:f4:f4:40:
a0:15:28:09:bf:fb:40:ce:63:58:82:08:d8:08:63:
c5:41:bb:c7:1b:e5:f8:11:ef:bb:2b:bc:48:1c:96:
48:00:8c:02:8d:dc:71:19:36:51:a8:c2:3e:cd:48:
31:b9:91:6e:2e:2d:73:53:64:a2:8c:b7:21:15:c9:
0a:8c:68:3b:bd:0d:17:12:75:ed:40:ea:38:a0:69:
ea:fd:15:e0:b8:fb:c2:39:da:99:0e:13:cd:de:14:
71:23:f4:ce:b6:e2:ba:7f:2e:93:b9:8f:28:9a:b7:
17:1b:60:7c:40:08:ca:8d:e0:99:82:ee:b0:fb:9a:
f6:74:19:55:3b:67:73:1b:73:0c:0e:7d:9c:a2:3d:
c2:8e:48:8f:f4:7a:b7:85:d8:08:f4:87:b6:1d:75:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C4:BF:50:37:80:EC:1F:DF:4E:D4:7F:36:7D:C7:AA:9A:33:03:B5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0ce::/32
Signature Algorithm: sha256WithRSAEncryption
4f:47:a0:d4:65:15:58:19:bb:cd:d7:06:db:72:5d:64:7b:8e:
81:66:da:6e:b9:7c:ce:9a:a7:26:af:4b:0c:4c:22:b5:47:65:
ec:7c:8a:0a:e2:90:2f:8b:4d:5c:fc:7a:82:85:d2:d3:b6:29:
aa:09:a3:a2:d0:55:bc:46:6d:ae:6a:c7:e5:1b:a4:f5:b2:e7:
c3:45:b2:99:88:8a:bf:e9:5c:66:54:0b:82:17:a2:68:7d:ea:
4d:99:ac:3d:7a:1d:80:7d:96:4c:c6:e9:52:77:5d:42:cc:73:
af:fa:61:43:3d:d3:2b:72:4f:ef:f5:41:fd:a7:92:10:81:00:
fe:a4:a4:5b:be:14:03:08:34:97:12:2a:9c:7f:16:56:df:63:
bc:75:99:7b:61:23:a5:23:52:a0:02:eb:ff:8e:41:97:5f:3f:
50:0c:d2:41:90:83:67:3b:29:94:cd:61:01:35:56:ef:ba:1b:
27:f6:08:64:6a:b8:cf:b2:eb:46:b5:1e:ae:ae:d0:b5:0b:12:
a3:10:5d:8e:db:f5:79:3b:dc:b4:a8:f5:76:a6:d1:a2:33:dd:
21:02:6b:62:e1:e2:95:8f:17:cd:0d:70:f8:16:38:dd:41:71:
52:43:16:76:5a:2f:15:37:02:33:89:e4:68:12:ce:78:3d:90:
95:67:52:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:14 2026 by rpki-client