Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142858.roa
File: AS142858.roa (raw, json)
Hash identifier: GB+CMpmTg7GgCc+ff1wkep+YGqw3Z1vOPSOPsKdf9eE=
Subject key identifier: 9B:13:BC:27:3E:FC:FD:48:B9:A9:A2:2A:3C:9A:6F:5A:A6:AA:DB:DC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6BF58D1C6C56E6E455EBB3C39FBB7B5DE69D0653
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142858.roa
Signing time: Fri 22 May 2026 07:24:39 +0000
ROA not before: Fri 22 May 2026 07:19:39 +0000
ROA not after: Fri 21 May 2027 07:24:39 +0000
asID: 142858
IP address blocks: 240a:a0d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f5:8d:1c:6c:56:e6:e4:55:eb:b3:c3:9f:bb:7b:5d:e6:9d:06:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:39 2026 GMT
Not After : May 21 07:24:39 2027 GMT
Subject: CN=9B13BC273EFCFD48B9A9A22A3C9A6F5AA6AADBDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:32:97:eb:28:23:fa:cf:80:e2:db:cc:b4:
7a:3c:bd:e2:cf:7e:5f:5a:86:e1:fb:c0:7b:5d:17:
f6:82:d8:f6:f3:69:0a:05:d6:8b:ae:17:ae:cc:01:
6e:94:47:2d:57:02:32:2b:71:84:17:ca:18:f3:01:
9b:ba:ea:1b:92:c6:ed:39:00:14:85:57:e0:1f:78:
73:b3:be:a1:2d:b6:58:a7:a5:58:e3:35:19:c2:78:
df:15:11:24:6b:65:0b:22:a5:a3:19:c6:c7:f0:80:
64:46:fa:0e:a1:0a:d5:da:82:ee:f5:0c:8b:0e:63:
ca:74:4d:2c:c6:42:45:56:cc:69:8e:34:a0:3a:9c:
a6:03:67:84:51:32:50:b4:99:d0:a3:cc:d2:81:89:
38:29:98:2b:dd:cc:ff:a6:d3:ad:4c:62:db:19:c0:
80:df:c1:a9:f3:41:81:8b:8d:ee:4d:27:e0:4f:1c:
c3:aa:35:b5:26:9b:ad:bf:20:96:bf:37:fd:7d:75:
53:90:d2:c5:57:3e:ce:89:2e:8d:ff:5d:a7:64:77:
de:63:83:1b:6b:db:ca:39:96:93:17:b5:50:4b:f9:
af:dd:58:02:44:32:75:4c:31:e9:cf:a9:ec:54:55:
6b:27:19:98:54:25:dc:a4:7c:83:ee:99:d3:af:88:
c7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:BC:27:3E:FC:FD:48:B9:A9:A2:2A:3C:9A:6F:5A:A6:AA:DB:DC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142858.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0d0::/32
Signature Algorithm: sha256WithRSAEncryption
b0:12:4b:6c:d2:76:5d:23:80:31:aa:cb:63:a4:9b:4a:f6:61:
3f:d4:f5:77:4a:5e:16:c7:20:46:b1:f4:5e:a4:40:83:2f:e4:
a6:6b:5b:aa:d2:fe:08:a2:78:75:f2:0e:40:25:4a:98:b7:de:
2d:5a:48:43:7d:1e:1b:53:da:7e:b2:c7:6a:5a:ba:dd:bb:50:
69:31:8e:f8:ec:bc:12:18:b4:a0:2b:4f:df:4b:25:ea:f0:cd:
e8:72:76:e5:7f:48:a2:c2:af:36:98:b8:37:be:5d:73:cc:1a:
17:38:f6:c7:11:f7:cb:3b:60:1f:9d:1f:79:8e:68:40:18:0f:
58:82:95:50:17:21:cf:c6:1f:66:82:d2:fa:5e:18:4b:54:e9:
5b:85:21:d9:10:29:1b:5d:83:07:fb:6b:71:e4:53:14:ad:84:
ce:9d:41:01:55:0d:a4:cf:c6:73:5f:ed:22:6f:7d:d2:e6:71:
dd:43:48:ff:57:b3:7f:d2:ec:10:bd:21:6d:ba:1e:ab:37:c5:
0e:28:fc:5e:92:0e:3e:46:3c:92:78:43:54:46:a4:f7:b6:ae:
0e:fe:a8:39:29:6b:bb:58:50:3d:4c:66:dc:8b:22:09:bd:f1:
d1:e5:2c:88:2f:d5:84:ca:79:8b:99:ba:56:9c:ba:e9:1e:ac:
c0:60:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:11 2026 by rpki-client