Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142870.roa
File: AS142870.roa (raw, json)
Hash identifier: GJ+Zhd+ifOrpk1BxlYXrEFi+wsOkQzSBvamll1nzdcQ=
Subject key identifier: 7E:A4:05:E7:5E:1F:C7:E0:46:E7:BD:69:5D:E5:4E:AE:7A:48:A1:FF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1325E0C38F8538322B31AECFA83294944248D17F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142870.roa
Signing time: Fri 22 May 2026 06:46:29 +0000
ROA not before: Fri 22 May 2026 06:41:29 +0000
ROA not after: Fri 21 May 2027 06:46:29 +0000
asID: 142870
IP address blocks: 240a:a0dc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:25:e0:c3:8f:85:38:32:2b:31:ae:cf:a8:32:94:94:42:48:d1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:29 2026 GMT
Not After : May 21 06:46:29 2027 GMT
Subject: CN=7EA405E75E1FC7E046E7BD695DE54EAE7A48A1FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:0b:70:6f:03:54:2c:fa:b2:65:34:55:2e:
21:6b:42:db:e6:5d:ce:cb:e0:68:d4:21:85:49:da:
35:06:40:a5:c2:4e:e7:58:5c:ac:28:22:e2:13:31:
61:f9:6d:f8:46:ee:b6:64:ac:9d:b5:0d:c5:d8:41:
3b:43:bc:fa:fb:fb:5b:ac:f6:20:d1:a2:27:6d:a5:
da:a1:db:fb:49:7f:66:43:65:1b:ef:8b:cd:e1:a5:
bb:c3:b4:c1:1f:a5:a7:c6:46:b3:d4:85:b3:eb:d8:
70:93:8a:c1:e8:23:86:93:d9:50:5c:9e:be:6e:26:
65:62:43:31:39:58:7f:33:72:64:3e:6d:e4:d9:e6:
ee:fa:aa:15:e3:1c:cf:25:0b:3c:de:3a:70:28:f0:
da:cc:58:a8:10:84:54:c4:bf:a8:7f:e7:f9:0b:53:
13:30:ca:8d:f1:2d:58:f0:3a:30:81:c3:6a:b9:27:
bf:be:c8:81:ac:82:dd:0f:7f:5c:4c:e9:3e:11:8b:
0a:ba:c3:df:24:40:76:e1:89:36:e7:c8:1a:bf:4e:
3a:91:e8:b2:be:5c:a2:89:45:91:1f:07:44:ab:81:
b3:54:a3:55:5b:b3:a4:9a:bc:37:8f:a7:40:8a:93:
90:21:26:37:3d:c8:49:84:ca:c3:18:2e:f0:08:ab:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A4:05:E7:5E:1F:C7:E0:46:E7:BD:69:5D:E5:4E:AE:7A:48:A1:FF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142870.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0dc::/32
Signature Algorithm: sha256WithRSAEncryption
93:e2:b1:fb:1b:6e:ba:48:d9:1c:a6:e6:66:3a:d8:61:8c:af:
b6:eb:a8:fb:2c:e4:58:70:59:7a:67:5b:5e:b3:9b:4f:9e:f8:
f5:bc:a1:39:79:6c:a4:a7:15:11:35:96:bd:f9:e4:34:91:d0:
ed:4d:22:04:9a:a3:4c:42:70:19:6d:c9:7c:e0:d4:93:91:04:
dd:1f:25:fc:4b:ee:53:87:0d:e4:e5:c5:90:dc:6d:f9:a3:48:
c1:41:ea:09:6a:da:aa:31:07:5f:76:f4:52:8b:5c:20:7c:c9:
e5:36:18:ba:17:4e:54:a9:1e:10:3f:0c:ee:55:59:db:fa:56:
1b:00:04:b2:6d:03:ec:b1:ac:71:9f:00:84:05:18:f5:43:d6:
ca:d7:ea:76:f7:1a:e9:f7:d1:58:ee:ed:41:0b:a4:dd:bc:8a:
58:91:52:4b:54:29:0d:75:2b:d5:21:b9:63:c0:2c:f0:54:69:
de:f4:06:fd:a9:04:39:1e:c5:7d:02:5a:ae:a9:88:ed:1e:e2:
56:b3:d4:cd:ed:89:ee:0d:f9:d4:b7:99:06:2b:16:d9:9f:57:
7d:b0:65:34:8c:aa:c0:e6:d6:b2:42:a3:6d:6b:eb:bc:16:aa:
a9:4a:57:fd:09:7c:98:86:d3:b6:c0:a6:f3:1d:b5:58:00:3e:
c2:3c:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:10 2026 by rpki-client