Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142875.roa
File: AS142875.roa (raw, json)
Hash identifier: nRxSDlCzR1Hif5uR8XnPv11nhxWxCaMdyFzOwRFaiCo=
Subject key identifier: 88:89:33:D7:26:89:B3:DC:2B:79:32:90:59:54:DC:DA:40:BE:16:8E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 071DFF125F7003D011A2F3895B31767C6A50F0F5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142875.roa
Signing time: Fri 22 May 2026 02:47:59 +0000
ROA not before: Fri 22 May 2026 02:42:59 +0000
ROA not after: Fri 21 May 2027 02:47:59 +0000
asID: 142875
IP address blocks: 240a:a0e1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1d:ff:12:5f:70:03:d0:11:a2:f3:89:5b:31:76:7c:6a:50:f0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:59 2026 GMT
Not After : May 21 02:47:59 2027 GMT
Subject: CN=888933D72689B3DC2B7932905954DCDA40BE168E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:c5:ff:f7:0c:01:3c:d7:06:b8:9e:6f:93:
96:ee:a4:5a:20:a0:18:aa:7a:65:ab:27:d5:db:26:
0a:77:f3:6a:cd:17:3a:c9:17:f3:74:59:2d:00:79:
59:2a:ef:34:f6:83:a1:75:56:61:24:d5:59:0f:ad:
51:49:5b:27:35:fb:98:06:b3:e4:08:14:8c:db:e6:
72:24:f0:88:02:cd:d3:2c:fc:45:24:e6:66:df:15:
42:b1:74:b3:30:18:05:0a:86:46:fa:ab:03:a6:d4:
6e:3e:23:01:f8:ce:ce:c3:88:b2:bd:ad:47:31:4c:
03:a1:40:c7:62:aa:f3:12:70:60:3c:8e:bf:16:1c:
dd:86:91:71:12:45:3d:6a:be:a3:58:92:1b:c0:e9:
ac:49:22:0e:49:36:9a:01:fb:a3:5e:b2:60:35:a2:
4d:e3:1d:c0:22:98:ab:cb:f2:ac:27:c3:af:b8:91:
fc:82:25:fe:50:87:26:03:05:a4:63:4e:94:59:45:
9b:a8:15:be:a0:f3:44:a7:53:56:52:b3:ec:35:93:
e2:64:18:0d:21:b8:35:6c:f3:0d:4f:ed:6e:f3:29:
16:32:bd:3a:8f:b6:1b:f6:93:c2:a6:8b:da:5b:a0:
22:1e:d4:e1:f9:c8:ff:be:8b:d7:0b:40:de:e6:91:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:89:33:D7:26:89:B3:DC:2B:79:32:90:59:54:DC:DA:40:BE:16:8E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142875.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0e1::/32
Signature Algorithm: sha256WithRSAEncryption
36:5d:69:42:4b:ea:76:89:d1:d0:df:41:05:f2:34:ba:49:e2:
b7:75:70:f0:2d:cb:54:79:c0:6d:b1:19:99:86:2c:c6:e1:68:
01:96:96:19:05:e2:7d:05:9e:67:15:ad:a4:f6:2c:d2:7c:a9:
33:75:98:5d:82:12:37:56:9b:f9:fd:b8:88:50:b8:3e:87:2e:
69:fa:c4:02:ca:20:81:b9:75:80:8b:48:8f:35:1a:5b:e6:7c:
f5:a2:71:cc:8b:3e:27:85:b0:c5:57:2b:6d:a1:09:75:99:40:
e4:1c:ff:99:3d:c1:db:31:a2:42:41:a6:e4:9b:03:54:de:c6:
f3:ed:46:ac:75:bb:1a:2d:d6:6b:f6:a8:69:2e:54:2e:50:30:
ba:bc:01:cc:79:57:c9:7f:77:3b:d0:ec:92:79:1c:6c:b8:00:
a7:0b:0e:6a:b7:4b:9f:6d:56:d5:69:94:9d:41:8c:32:f2:b4:
9f:87:2b:56:0c:b7:f4:3b:b8:ff:18:58:ca:84:75:bf:af:3b:
6e:c2:2b:fb:8a:f4:fd:97:97:10:38:12:68:58:6f:fc:ce:cf:
ec:33:74:22:97:ad:c6:4f:f4:0f:72:c3:da:8f:4a:4e:79:63:
f2:83:eb:c8:54:69:78:9e:89:ae:da:88:d6:cd:1c:f6:96:f9:
9f:58:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:38 2026 by rpki-client