Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142874.roa
File: AS142874.roa (raw, json)
Hash identifier: YcBoW7fNo3yzogth/QPaRZnj09AzfQE+UtAdrVirVrs=
Subject key identifier: D6:3A:EC:93:61:69:F8:86:00:57:50:17:2D:CE:DB:CE:C0:A6:DF:5E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 37490D37BDBE0FBA29A149E9A6F0C062A6E0D206
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142874.roa
Signing time: Tue 26 May 2026 08:52:46 +0000
ROA not before: Tue 26 May 2026 08:47:46 +0000
ROA not after: Tue 25 May 2027 08:52:46 +0000
asID: 142874
IP address blocks: 240a:a0e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:49:0d:37:bd:be:0f:ba:29:a1:49:e9:a6:f0:c0:62:a6:e0:d2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:46 2026 GMT
Not After : May 25 08:52:46 2027 GMT
Subject: CN=D63AEC936169F886005750172DCEDBCEC0A6DF5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:0b:e4:0c:1c:7f:75:fc:11:f0:8d:21:7e:
6a:83:6c:a5:d6:d8:d2:50:4d:52:d7:c0:11:a4:38:
40:e0:8b:a5:01:04:83:da:cf:c4:dd:27:0d:2a:48:
bf:ee:22:26:6d:16:42:21:6b:5a:eb:ff:6f:7f:09:
88:0b:e5:ee:b2:81:13:20:3f:63:a2:4a:de:08:ce:
3f:3f:44:71:86:d6:e4:c4:a0:98:09:71:0f:5e:26:
97:93:81:d0:e5:c0:43:d3:af:0d:59:b0:38:21:fc:
40:1b:b6:88:6c:33:2c:18:19:ac:b8:28:11:df:e8:
39:eb:46:8a:e9:03:c3:3d:d9:63:68:b4:62:9a:2c:
4f:26:b4:5e:45:27:a1:fb:62:92:b8:f7:db:b3:76:
0f:37:25:ad:1b:b7:c1:b4:a6:f4:d4:32:2d:09:fe:
1e:61:1f:af:92:46:1d:a5:5b:cc:f8:ba:14:43:1b:
c0:45:b5:ea:bc:fc:44:34:ba:dc:b8:04:f3:29:e1:
df:5f:10:ab:c5:ef:8c:21:7c:08:02:8e:4b:63:2d:
77:4e:a9:58:12:99:77:0d:a8:07:40:bf:d6:34:8e:
fe:99:23:ce:4d:33:20:7f:cc:44:36:38:e6:bd:8e:
73:6c:7e:a6:12:ad:22:dc:4d:72:b0:f2:a2:43:07:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3A:EC:93:61:69:F8:86:00:57:50:17:2D:CE:DB:CE:C0:A6:DF:5E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142874.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0e0::/32
Signature Algorithm: sha256WithRSAEncryption
21:60:bf:f9:21:c5:6a:d1:f2:d9:8f:10:83:a4:04:76:a4:fa:
51:11:d0:1f:b3:a1:3d:f4:c3:3f:63:fa:fb:ce:30:dd:15:28:
c3:e8:3f:8b:f4:34:2a:d2:53:06:a4:05:9b:e3:12:ba:5b:6c:
f3:59:0f:57:c0:4a:1c:44:9d:8d:d4:a8:05:a6:75:a5:cc:1a:
8e:b7:77:db:49:21:34:8b:97:f9:73:70:55:e3:0e:d9:aa:7b:
ec:db:41:3b:1f:0f:0f:f0:63:e5:f5:75:25:98:06:b1:dd:56:
14:5f:93:b1:63:ba:f7:ab:ed:3a:b2:21:b2:a5:55:09:38:14:
29:9a:38:03:f3:6a:51:cc:67:1b:d0:0f:d6:c3:96:43:76:ca:
cb:0d:bb:8b:4c:48:19:2a:6f:5b:bd:dc:a6:e2:ae:c8:66:3d:
66:81:0a:42:ba:72:ac:a8:ea:95:9c:ce:e8:0f:a0:36:f3:20:
b0:14:96:08:6d:70:07:3d:d9:bd:6f:02:2f:d4:16:4b:f1:f6:
3c:db:a6:80:5a:79:7d:45:51:79:eb:a3:da:96:f9:5d:cb:72:
e4:61:4e:9c:4f:60:3b:6e:0e:e7:c6:14:29:85:e3:74:ce:9a:
6b:db:30:9e:50:1d:8a:1c:ed:b9:36:d0:4b:15:c1:bd:f5:c2:
ef:be:5d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:58 2026 by rpki-client