Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142871.roa
File: AS142871.roa (raw, json)
Hash identifier: XZDNHPY1N7gwUMsymQCmKGyy+RNVwIIpZQ7Vsgv2qgk=
Subject key identifier: 6F:53:7A:38:A7:EB:AF:A2:97:18:D6:F9:4F:4B:65:D8:81:82:10:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 12A17FA55003A3EF6AB50222FB47A242FE1D8C53
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142871.roa
Signing time: Fri 22 May 2026 07:32:01 +0000
ROA not before: Fri 22 May 2026 07:27:01 +0000
ROA not after: Fri 21 May 2027 07:32:01 +0000
asID: 142871
IP address blocks: 240a:a0dd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a1:7f:a5:50:03:a3:ef:6a:b5:02:22:fb:47:a2:42:fe:1d:8c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:01 2026 GMT
Not After : May 21 07:32:01 2027 GMT
Subject: CN=6F537A38A7EBAFA29718D6F94F4B65D881821095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:c1:c8:44:4e:6d:3d:4b:0b:86:a5:3d:28:
eb:b4:33:f4:99:26:51:6a:7f:65:03:43:e9:bc:f9:
00:07:7d:fb:07:a9:f9:a6:a3:c8:90:b6:2a:26:8c:
96:99:88:2a:ee:d0:43:67:30:86:54:dc:00:d1:b8:
e8:5e:4b:f9:5b:f2:4a:15:50:30:98:d9:6b:2d:71:
d8:17:c2:26:07:1e:ef:08:b1:68:43:5a:84:07:93:
3e:59:e8:ce:12:1e:1c:b6:55:67:30:09:64:c6:48:
22:24:39:a2:05:7b:50:57:03:ee:6f:1e:d0:c4:e9:
60:7c:e0:0f:b2:3a:07:50:a1:c6:f2:6a:0d:cd:63:
6d:50:ab:7b:18:6c:72:b4:9a:03:56:66:d5:8e:d5:
12:d4:a0:9c:33:17:28:57:31:cf:d9:89:89:bd:cf:
7d:41:f0:e5:83:cc:a3:e4:0b:98:75:4b:a0:27:f9:
dc:32:56:d4:02:c9:c5:e2:06:8f:e2:15:53:40:ae:
a6:bd:65:9c:68:38:a8:c7:59:82:22:8d:9c:a7:c9:
f5:0e:80:eb:80:08:34:9a:c8:77:1a:09:14:ef:7e:
33:a5:76:96:da:e8:2f:2a:a3:48:45:e1:e2:30:86:
29:47:8f:5e:a7:d0:bc:8a:11:ce:fb:a1:be:ce:9d:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:53:7A:38:A7:EB:AF:A2:97:18:D6:F9:4F:4B:65:D8:81:82:10:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142871.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0dd::/32
Signature Algorithm: sha256WithRSAEncryption
2f:24:d8:59:43:4d:76:24:ec:44:32:0c:34:ee:06:03:54:60:
74:46:ce:ba:22:43:03:b4:cf:25:33:9a:90:e4:41:d1:40:61:
ea:50:30:64:e1:55:09:91:e7:45:98:ea:81:97:1d:14:f0:6e:
f5:db:89:7d:37:a8:d2:ec:67:2e:40:e8:b2:b2:bf:88:9f:f1:
31:6d:b7:dd:36:7a:2c:b3:ba:c2:0e:73:6a:8b:a6:f8:3e:1b:
f7:85:15:7a:80:16:5d:8c:c4:8a:4b:27:ed:61:4b:ce:ce:78:
43:61:ba:9e:b3:a9:d3:65:a7:8a:ed:81:9c:bc:b2:45:48:58:
57:17:69:0a:d6:73:0d:b1:4c:88:83:be:29:30:5d:45:6a:82:
d3:88:5c:75:b0:46:d2:5f:f1:8f:28:0c:18:3f:35:12:91:76:
78:b1:11:a1:f2:da:aa:85:5f:4c:51:6c:9f:27:74:18:3c:45:
b0:a9:96:1d:89:dd:36:40:c2:ab:c9:43:a9:f5:8d:80:32:10:
4b:8e:9c:8f:5b:15:45:b2:f6:f8:0c:4f:71:94:e6:8f:6f:3e:
09:25:bd:0a:62:35:fa:44:0c:20:b8:b9:f2:a2:be:4e:f9:35:
ca:a4:db:07:de:65:cd:4e:97:e2:f3:9e:8f:91:d2:d0:a8:ad:
40:21:4d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:30 2026 by rpki-client