Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142860.roa
File: AS142860.roa (raw, json)
Hash identifier: kOsMocdlDD0zW0H2t2vHNZYj+ZVRzvN/08tQ76RzHho=
Subject key identifier: 6A:4F:4D:77:A0:52:52:51:8B:90:DE:9A:01:9E:D5:09:63:79:35:DA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 51F0BBAC76A2EDB5F9D74A23DE28285B53A12566
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142860.roa
Signing time: Fri 22 May 2026 02:48:06 +0000
ROA not before: Fri 22 May 2026 02:43:06 +0000
ROA not after: Fri 21 May 2027 02:48:06 +0000
asID: 142860
IP address blocks: 240a:a0d2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f0:bb:ac:76:a2:ed:b5:f9:d7:4a:23:de:28:28:5b:53:a1:25:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:06 2026 GMT
Not After : May 21 02:48:06 2027 GMT
Subject: CN=6A4F4D77A05252518B90DE9A019ED509637935DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:95:15:d5:21:97:02:d8:c9:0e:36:68:32:2e:
6e:e7:e6:68:83:9b:9d:0a:36:78:d4:16:82:7d:02:
df:bf:e1:25:0b:b9:fa:1e:b6:1d:54:e9:0e:a1:e2:
56:8c:db:bd:66:ef:e8:b2:2f:97:92:43:cf:e8:06:
53:67:d9:1f:b2:93:08:ee:53:c0:96:80:19:80:09:
55:ee:12:d3:23:8f:8d:10:2c:fb:61:2d:60:02:36:
83:c7:1e:13:62:15:96:4e:d7:5a:1d:75:1f:3d:32:
a3:5c:e2:08:19:7c:0a:ad:78:4e:9f:1b:db:fe:bb:
cf:1a:dc:9d:dc:f9:8d:b5:00:8d:c8:bf:27:c5:8a:
0a:59:84:81:eb:b0:7c:3a:4e:e7:17:4b:f8:fe:6b:
f4:fe:c1:95:c7:d7:95:02:e0:e1:90:1b:92:19:78:
15:a1:5f:e6:33:7f:d1:d8:56:68:bc:73:f5:67:1f:
cf:78:98:50:82:d1:96:15:6b:98:09:41:cd:74:76:
0d:c1:c1:15:94:f7:b9:38:2d:32:ee:20:3a:a4:32:
4e:4d:e9:80:66:78:ee:77:6d:89:1a:76:fd:7d:0b:
a8:2a:97:ca:31:77:cc:e1:e3:cd:47:23:9f:b4:1c:
71:02:a5:5b:cb:eb:ed:41:b4:c1:47:c8:0d:42:19:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4F:4D:77:A0:52:52:51:8B:90:DE:9A:01:9E:D5:09:63:79:35:DA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142860.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0d2::/32
Signature Algorithm: sha256WithRSAEncryption
40:01:a4:5d:51:b3:a1:c4:25:05:57:25:07:a2:44:32:b1:fd:
f6:6e:35:51:36:a7:d8:33:4d:fa:c2:b1:1b:1d:87:ee:ca:b7:
5a:f1:6b:cc:4f:e6:8c:69:5d:3d:5a:8b:ba:75:de:0e:cf:e8:
a6:34:91:14:57:01:70:18:e6:d4:a2:d4:de:19:2e:27:b3:4b:
4f:07:de:c3:40:6d:ea:06:c1:7b:1b:1f:c8:c7:ab:09:6d:a3:
ac:60:f3:04:f2:8e:c7:44:eb:b5:c8:18:4d:d2:31:9a:a5:a7:
1c:4e:ef:53:a1:62:68:fe:54:98:a9:c4:83:be:28:3e:f0:21:
ca:44:9f:d4:13:e6:8b:61:e1:84:7a:ce:46:d3:ef:b4:dc:a9:
5d:c3:b2:15:3b:51:ea:c3:39:2b:09:f5:5e:92:1c:27:09:15:
71:dd:d1:e6:c1:f7:a5:21:78:8f:1d:7e:0d:b8:3d:1c:ae:23:
79:d1:82:c6:72:2d:66:74:e1:67:5e:e6:18:ab:a9:29:61:bf:
53:bb:c6:24:91:9c:53:1a:11:87:5c:83:60:de:f6:41:e3:ef:
24:49:8e:d4:2e:a4:4b:3e:ed:bf:10:49:fd:ac:7c:a8:2b:2d:
5d:71:d7:97:ca:13:35:10:2c:ce:53:02:a2:27:67:c2:5f:c1:
4e:41:34:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:18 2026 by rpki-client