Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142877.roa
File: AS142877.roa (raw, json)
Hash identifier: nMWTuVzg6SKxctki9O1cYPtc0z57xfMF1uM5ZeiKV3g=
Subject key identifier: DA:32:A2:91:17:AD:C8:38:9B:DF:AC:99:13:87:8D:CA:DF:A2:7F:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 19F5C601BF5D5BAD62EA7DB131B634A8C88D4B84
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142877.roa
Signing time: Mon 25 May 2026 03:19:45 +0000
ROA not before: Mon 25 May 2026 03:14:45 +0000
ROA not after: Mon 24 May 2027 03:19:45 +0000
asID: 142877
IP address blocks: 240a:a0e3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f5:c6:01:bf:5d:5b:ad:62:ea:7d:b1:31:b6:34:a8:c8:8d:4b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:45 2026 GMT
Not After : May 24 03:19:45 2027 GMT
Subject: CN=DA32A29117ADC8389BDFAC9913878DCADFA27FD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:90:e7:32:a5:e9:d5:ce:40:cf:a9:e5:dd:45:
15:aa:ac:b6:1b:2d:d3:27:1b:d2:3a:fd:a9:c8:25:
9b:e2:df:7c:37:46:80:e5:c6:d8:ef:64:0b:df:a6:
3a:e8:5e:12:82:8e:e2:5e:66:7c:ed:5a:bc:c6:a5:
dc:15:4a:86:43:27:b1:76:6c:1f:db:7e:c7:c8:8f:
a3:16:f8:f5:2c:f1:7c:81:af:15:36:5d:87:cc:4b:
1d:91:47:50:42:59:f3:d9:ce:97:ef:11:24:ae:a4:
b0:34:a6:9d:37:8a:79:6f:f1:9f:5b:8e:4e:9b:32:
a5:50:6c:99:28:87:f3:26:e9:ec:3c:e5:2a:86:a2:
ad:e3:e8:5a:33:03:27:ea:1d:c6:65:a9:f1:9a:cc:
de:61:5a:8c:48:38:ee:d2:c1:57:7d:44:79:8f:56:
60:8d:38:f9:82:74:6e:b1:da:ac:6d:f6:44:2d:db:
b9:ee:68:1f:29:99:ce:c6:03:da:28:a6:9a:46:01:
45:c7:2d:81:ec:4d:42:d6:33:77:0c:6a:49:bb:bb:
c7:4e:d7:cf:00:d5:6b:84:47:92:41:b7:33:bb:92:
11:83:a1:4c:a3:6f:eb:36:20:ed:5c:1b:a1:7e:a7:
ee:78:b6:82:e7:42:95:3a:8b:c6:5f:1e:14:5a:eb:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:A2:91:17:AD:C8:38:9B:DF:AC:99:13:87:8D:CA:DF:A2:7F:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142877.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0e3::/32
Signature Algorithm: sha256WithRSAEncryption
6a:23:0d:25:cf:cd:71:19:5e:ca:74:15:63:4b:3d:32:76:d0:
a3:02:91:d6:0d:a5:cb:af:ca:51:b7:01:9d:64:82:af:a8:0a:
e8:07:74:5b:33:18:cc:49:53:d2:37:aa:ef:f6:d1:67:fd:07:
c2:55:58:7a:7c:8f:17:d8:8b:0f:80:e8:11:61:6c:57:1d:33:
2c:dd:60:e6:2b:44:b3:97:d9:85:e6:25:f2:33:c1:9b:89:54:
0b:4b:ac:c6:9c:f1:88:c0:1c:de:6d:85:12:ec:54:a9:72:68:
22:52:bb:cb:be:61:9b:55:c7:ca:cd:98:21:56:6a:c1:b8:6e:
63:20:0d:65:ac:71:b5:e9:25:de:37:a0:cf:b0:5b:a7:e9:35:
75:36:fc:2e:2d:23:33:fa:ca:a0:19:0f:c4:1d:fb:82:af:c9:
6e:0e:00:53:de:fb:f9:d4:0f:b3:dd:b3:38:cf:b7:67:84:7f:
79:44:a4:3f:2a:ca:f4:c5:5e:c3:aa:0e:5c:77:e2:d3:fa:ff:
eb:6b:e4:a7:32:af:41:af:99:95:ee:2a:5c:1c:98:4d:cd:5e:
cd:54:93:7c:0b:e8:61:fc:06:0e:dc:ca:9f:02:a3:24:12:1c:
b0:74:ef:41:6e:eb:3c:f3:ce:83:7c:36:6e:e6:67:c8:7e:d1:
ca:62:ff:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:31 2026 by rpki-client