Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142868.roa
File: AS142868.roa (raw, json)
Hash identifier: 195+cSOEU1LE1AXO/I2YdtJACSzac6C7j08c6Yeb2SU=
Subject key identifier: 5F:6F:97:E9:85:0D:BE:F4:A4:77:9C:62:5A:4A:D8:85:1C:20:5C:91
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3C4E99BFC6FDBEFA51F1C88F0EC50F0F8F6EDE70
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142868.roa
Signing time: Fri 22 May 2026 02:47:33 +0000
ROA not before: Fri 22 May 2026 02:42:33 +0000
ROA not after: Fri 21 May 2027 02:47:33 +0000
asID: 142868
IP address blocks: 240a:a0da::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:4e:99:bf:c6:fd:be:fa:51:f1:c8:8f:0e:c5:0f:0f:8f:6e:de:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:33 2026 GMT
Not After : May 21 02:47:33 2027 GMT
Subject: CN=5F6F97E9850DBEF4A4779C625A4AD8851C205C91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:a7:f2:77:89:5e:26:5b:fb:ef:22:60:2b:
99:5b:af:3d:5a:de:55:f4:05:22:bd:af:34:19:8e:
8b:5e:b9:e1:4d:bd:26:7f:54:4f:d3:78:41:7b:0c:
e4:09:0c:90:61:44:ff:ac:64:37:16:5a:aa:e2:f6:
e3:65:c2:c2:d9:63:6a:95:6f:61:9b:29:42:22:d9:
bd:f8:c1:29:a8:a2:36:f3:aa:35:a2:28:95:e3:b3:
5d:1d:d5:9e:d6:90:d1:8e:78:fb:66:8c:ef:1e:6b:
29:7e:f3:59:6d:a0:b0:f6:95:6a:c4:85:d1:9a:44:
08:f1:e0:fb:cf:8a:27:86:d6:c8:b5:d0:c2:35:36:
e0:2b:5a:d5:61:30:3d:00:26:ff:11:ef:00:77:5a:
88:6d:83:d4:2c:8b:a9:48:63:3a:c0:a1:9b:39:3c:
74:b4:01:0a:ac:31:c2:8d:ff:ad:6f:89:36:a4:ee:
e0:39:fc:3d:68:2f:61:ca:5a:bf:c2:ac:44:ff:91:
13:67:e7:e6:26:fd:11:3c:15:07:b3:01:11:94:06:
0c:b6:df:19:5a:ff:38:a6:ed:72:68:42:bc:63:24:
e7:f6:5c:9f:29:80:ed:a5:60:92:2d:d9:6a:ca:ae:
98:b7:e3:4f:e5:5f:81:a3:52:0f:1b:1d:23:69:6c:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6F:97:E9:85:0D:BE:F4:A4:77:9C:62:5A:4A:D8:85:1C:20:5C:91
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0da::/32
Signature Algorithm: sha256WithRSAEncryption
94:eb:72:ce:fb:ad:01:31:3b:76:bc:29:1e:ff:e7:ee:9e:8a:
0f:29:7a:43:c4:e6:0a:ee:11:5d:5e:e5:39:cc:41:b7:33:30:
db:35:43:d6:ba:7c:ea:11:5f:f3:ef:de:27:f9:77:80:02:ee:
59:44:32:5a:80:7c:b8:dc:29:df:35:5b:8f:31:eb:c4:0f:c2:
6a:42:41:3f:a1:f8:bf:39:73:a2:a7:b1:d3:a5:a8:6f:a1:6a:
91:6b:01:0e:8a:54:0a:a4:b4:46:90:9d:24:dd:e4:0a:87:fe:
5b:31:e1:ab:c5:17:da:35:f8:de:63:26:63:28:c8:1d:a4:0e:
71:ff:10:e7:fa:9b:c4:4a:fd:f2:dd:14:12:f0:76:9c:78:ac:
19:58:f9:31:33:5f:39:3d:7e:bd:0c:41:7b:67:22:7e:ac:c9:
d7:ed:96:36:87:d9:f1:f5:1a:61:dc:ae:35:90:13:08:7d:b1:
bf:a5:51:5c:ed:be:9f:27:15:04:f6:96:3b:27:e9:43:fc:a0:
e4:a3:24:9d:9b:b0:6f:de:12:50:f2:36:67:5e:18:e1:4b:04:
36:67:a1:2b:6b:9b:b2:94:32:e7:e8:41:48:1b:6b:2f:da:0e:
f0:04:90:d4:3a:ea:8a:18:28:34:b5:0e:94:d0:41:e0:78:20:
55:2f:33:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:54 2026 by rpki-client