Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142859.roa
File: AS142859.roa (raw, json)
Hash identifier: 0OECaLamQA9w+qCRnj/N6swCGEVtVnVfbRmCn8kG358=
Subject key identifier: 3E:1D:89:68:68:FA:6A:08:5C:47:D9:73:B2:46:00:94:4F:D9:FE:A0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 60EEE3C6B5DCEBF275B55DD8B8E9B75881B95C56
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142859.roa
Signing time: Tue 26 May 2026 01:12:54 +0000
ROA not before: Tue 26 May 2026 01:07:54 +0000
ROA not after: Tue 25 May 2027 01:12:54 +0000
asID: 142859
IP address blocks: 240a:a0d1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ee:e3:c6:b5:dc:eb:f2:75:b5:5d:d8:b8:e9:b7:58:81:b9:5c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:07:54 2026 GMT
Not After : May 25 01:12:54 2027 GMT
Subject: CN=3E1D896868FA6A085C47D973B24600944FD9FEA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:61:a1:b1:d6:31:b1:f5:96:ee:69:90:d2:
4b:d7:64:2e:70:90:23:5c:b8:ef:d6:92:1a:0e:ae:
f6:f0:d2:25:03:70:46:98:23:0e:d6:8d:0a:f4:c6:
8c:fd:6a:77:84:1e:f7:51:19:74:8a:75:f8:9f:b1:
4e:bd:0f:d1:23:58:65:94:58:f3:6f:50:47:49:7d:
3e:0c:24:6d:8e:76:5c:5b:dc:8b:0e:4f:bf:1d:bf:
2d:88:b7:5a:88:d9:e3:d1:1b:fd:91:2f:4a:20:77:
7b:f9:46:c4:9a:53:68:72:b5:96:d8:cc:73:0d:ba:
bf:1e:90:89:89:0e:67:e2:bc:3e:5a:bf:8a:ee:50:
c6:9e:b0:f1:89:ed:77:1b:55:04:ac:b2:0b:97:85:
30:35:5f:19:92:c9:b1:d7:88:2f:2b:00:6d:10:67:
8e:d5:fd:47:83:6d:4d:1e:6d:e9:f0:c2:72:69:ae:
61:bb:a8:a2:d0:81:29:37:18:fa:85:97:7e:d6:cc:
d4:81:40:a4:44:84:33:e5:53:74:3a:c5:31:96:a1:
70:3f:36:d4:79:12:0c:c2:59:f8:cd:16:94:56:fa:
d0:ac:27:98:1e:e0:7c:03:b9:a4:8c:f2:ba:da:f3:
15:44:b0:df:74:3b:c0:a3:f7:9e:ad:f6:9c:58:37:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1D:89:68:68:FA:6A:08:5C:47:D9:73:B2:46:00:94:4F:D9:FE:A0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0d1::/32
Signature Algorithm: sha256WithRSAEncryption
53:35:b1:26:1a:34:3b:c8:3e:4b:8c:b7:51:ce:a5:bc:24:6f:
82:7f:05:63:4e:ba:a7:54:82:b8:4c:10:75:8b:f1:04:fd:6c:
84:44:a6:e1:95:4a:ce:fa:f1:9d:52:2f:98:2d:9a:5a:de:83:
fa:15:bb:ce:03:51:46:50:b5:8a:44:f4:b1:24:a4:16:ba:10:
f5:7c:36:d0:58:ab:26:82:e0:cc:cb:bf:d6:fe:32:05:04:13:
b7:dd:ca:02:a8:ed:f5:1f:35:92:51:7a:9a:a3:e2:24:8f:3c:
96:51:9c:ad:da:3a:92:c7:3e:0f:a5:60:d0:d5:33:9a:01:5b:
e8:49:10:b3:d8:96:6d:7d:64:ad:eb:00:03:45:7d:dc:93:c8:
5c:d6:69:81:a7:2f:d6:34:62:c1:3a:3e:5c:93:b4:41:77:cb:
9a:bb:33:95:77:3c:55:d2:d5:94:62:0b:12:db:ad:eb:2e:ed:
c9:e3:af:84:f4:80:19:3e:7c:65:84:9a:b7:2d:e3:4a:a6:86:
3b:c4:f9:99:9c:ed:7c:30:66:62:39:a2:a2:71:d3:81:d7:be:
ec:3f:0b:68:59:99:32:3f:f7:86:9d:f0:f6:5e:64:27:9a:d7:
d4:31:8a:68:4c:65:9b:5e:bb:90:9c:20:9b:22:68:d1:08:ef:
76:05:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:12 2026 by rpki-client