Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142869.roa
File: AS142869.roa (raw, json)
Hash identifier: 52hJ/0VESuDQmcKLuFcdvT7aln4vZZu878EbIiDGNlg=
Subject key identifier: 1E:F6:89:32:DF:97:57:D2:69:5E:44:69:B7:BB:0C:C4:8C:46:6B:A3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 301639EEC4F1CA317B18E03168917916A3B999B8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142869.roa
Signing time: Fri 22 May 2026 07:41:07 +0000
ROA not before: Fri 22 May 2026 07:36:07 +0000
ROA not after: Fri 21 May 2027 07:41:07 +0000
asID: 142869
IP address blocks: 240a:a0db::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:16:39:ee:c4:f1:ca:31:7b:18:e0:31:68:91:79:16:a3:b9:99:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:07 2026 GMT
Not After : May 21 07:41:07 2027 GMT
Subject: CN=1EF68932DF9757D2695E4469B7BB0CC48C466BA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:cd:04:52:f0:5e:bc:6b:b6:3a:a8:b2:83:
c4:20:95:5d:48:da:4a:e3:90:00:e4:78:63:5a:17:
27:31:02:d0:b8:26:4a:27:32:dd:8d:cb:5b:6e:3c:
88:9d:e8:84:72:cb:39:71:a5:8b:44:a7:56:87:e1:
de:21:43:a9:dc:33:bf:9a:d9:5a:c8:11:b2:ee:bc:
72:cd:25:ad:9e:69:31:2f:f3:7b:69:96:11:df:38:
f6:ff:ab:51:aa:75:70:26:d0:2f:86:32:13:23:25:
a6:e7:98:8e:f3:9f:53:3c:c2:11:74:f8:99:ae:c8:
38:ff:b7:43:e1:4d:ff:41:c0:9c:5c:56:3b:bd:89:
1a:4b:28:20:ca:6d:10:d4:e7:78:09:36:7d:36:9e:
0d:07:14:18:ea:9e:8e:60:72:17:bd:9d:0c:4c:0e:
8c:a6:fb:4f:24:cd:d1:bc:c2:43:89:81:13:72:ed:
64:0b:d8:39:fe:fa:1c:b3:56:98:01:97:79:35:5c:
33:19:1e:5a:d7:14:ad:fe:51:a1:24:22:3a:b8:a1:
57:89:cc:15:8d:9c:82:96:06:01:00:d3:a0:46:03:
5a:c3:db:a4:47:38:59:68:f6:c0:28:dd:00:b8:84:
ad:52:ea:37:f8:1a:97:e1:44:a0:f6:90:a3:05:7b:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F6:89:32:DF:97:57:D2:69:5E:44:69:B7:BB:0C:C4:8C:46:6B:A3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142869.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0db::/32
Signature Algorithm: sha256WithRSAEncryption
07:12:a9:97:95:71:21:50:bf:41:d8:48:07:13:ce:dd:c0:f1:
1e:74:65:14:65:ca:32:01:e6:bf:66:de:94:6c:4d:22:66:4a:
36:78:0d:c0:97:40:5a:6f:c2:9c:11:1f:7e:b4:53:47:6b:e8:
55:ae:5d:65:f2:5f:66:f9:db:19:b9:09:fb:9c:04:1f:e7:53:
ed:d2:46:56:00:b5:78:6b:b8:5f:5e:03:89:f2:b6:c7:8d:f7:
d6:3d:9c:51:06:41:46:70:58:88:7f:c7:b4:7a:39:a6:a9:c0:
f9:e5:d1:57:1f:e9:84:5a:cf:5f:58:c4:a4:d8:4a:65:a5:3b:
dc:68:9b:11:b3:fa:90:52:34:11:03:2f:01:6a:39:7c:db:f1:
ed:9e:56:99:d6:0b:9e:cd:7e:5c:05:1f:ef:fc:53:65:c9:ea:
24:40:28:a1:e9:d6:33:3c:38:c6:82:31:eb:75:3f:bc:a6:75:
f8:1f:cb:1d:68:6c:c4:6c:cc:6b:46:1b:69:31:de:28:91:a5:
b0:b5:1f:58:97:9a:9f:56:fb:7a:26:4b:e6:76:8c:78:e6:56:
77:46:66:dd:1e:ff:9a:88:36:91:59:dd:ff:6e:31:1d:b4:1a:
46:50:9f:76:03:d3:04:88:a8:ef:d5:ba:00:99:f2:db:f3:ec:
31:58:d4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:41 2026 by rpki-client