Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142880.roa
File: AS142880.roa (raw, json)
Hash identifier: CaitfuVqBvHeTqrYOk367RfeHQJKAkOcK865mI0VjkI=
Subject key identifier: 33:4D:03:81:DB:9D:CE:5D:E1:40:55:6F:CB:FB:B3:98:0E:04:2E:55
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 64A5363882009BFCB42EA09E6293CB26474C1BBD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142880.roa
Signing time: Fri 22 May 2026 06:27:49 +0000
ROA not before: Fri 22 May 2026 06:22:49 +0000
ROA not after: Fri 21 May 2027 06:27:49 +0000
asID: 142880
IP address blocks: 240a:a0e6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a5:36:38:82:00:9b:fc:b4:2e:a0:9e:62:93:cb:26:47:4c:1b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:49 2026 GMT
Not After : May 21 06:27:49 2027 GMT
Subject: CN=334D0381DB9DCE5DE140556FCBFBB3980E042E55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:bf:08:bd:00:f9:e3:0b:9d:ec:f7:87:39:
f8:bb:95:26:4d:0a:c1:33:57:92:dd:40:4b:6e:55:
af:ca:36:24:5c:d2:95:76:8e:df:19:28:83:40:d5:
7c:f4:8b:ea:7c:71:ba:40:a9:64:f8:e0:fe:68:b8:
f0:45:b9:fa:21:5a:d7:d7:55:f8:15:29:47:29:df:
d8:2e:f0:37:9d:f0:01:d7:88:8a:b8:13:cf:f9:ac:
eb:36:99:a0:c9:9c:88:3b:5f:96:12:e1:79:6e:9e:
ed:95:e9:c1:93:e5:c6:5e:13:40:03:b0:84:02:6f:
ee:56:98:4f:1d:15:a7:a1:0c:d2:61:4f:87:90:ee:
f4:42:0f:00:be:9b:e0:e1:14:70:e3:48:49:ce:ca:
aa:b0:2a:a4:ff:e5:bc:72:d3:c1:3c:d1:13:a8:89:
e4:79:a0:a9:08:28:4f:e1:30:5e:2e:be:e8:bf:42:
ba:74:d3:be:bb:f7:12:34:55:3a:6c:de:54:ea:23:
c1:fc:0e:b9:2e:4f:2f:df:c0:a1:13:49:c2:4f:d1:
6a:36:73:a1:af:21:c4:95:3d:ff:19:99:bc:3e:f9:
f9:db:8b:c7:be:5d:f9:0a:5c:0e:aa:41:f6:94:f5:
36:43:29:30:34:98:c8:71:78:05:19:89:83:db:e2:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4D:03:81:DB:9D:CE:5D:E1:40:55:6F:CB:FB:B3:98:0E:04:2E:55
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142880.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0e6::/32
Signature Algorithm: sha256WithRSAEncryption
74:bf:4f:e1:87:2c:33:d4:e5:a8:43:7d:4c:1c:17:ee:af:6f:
c0:f3:f7:a9:1a:4d:9e:41:63:48:ff:16:29:33:0e:79:d6:24:
1a:5b:b0:80:b6:2c:93:b3:4c:5e:fb:2b:c2:93:61:e4:02:da:
df:4e:d8:a5:89:21:0f:6d:66:25:05:88:ef:98:ce:a3:d3:92:
26:72:20:39:b2:aa:aa:0e:36:bf:6a:3e:85:68:74:40:2a:87:
a8:24:67:d7:8d:e9:35:5d:f3:85:d2:bf:67:da:e4:4b:51:51:
c6:84:2b:a9:4b:56:99:6b:2e:67:9e:bd:b0:97:c3:7e:b3:91:
3b:e3:61:30:f5:77:10:c3:e9:c7:18:34:c8:f0:7c:26:00:31:
f5:c7:c6:a2:43:ee:67:3e:7f:97:41:82:55:3a:1a:dc:da:f0:
cd:41:d2:b3:96:19:cc:2c:7a:4a:09:b9:c4:61:08:f9:84:b2:
75:2a:6a:d1:3b:80:43:ec:94:5c:f0:13:56:0a:79:2b:c1:79:
e8:68:2f:5d:b4:53:55:45:f6:cb:dd:07:6b:66:c5:1f:57:1c:
7a:8e:d2:ca:2c:30:d0:67:16:61:c1:68:2e:7e:81:ce:a1:e1:
78:96:f8:94:2c:1c:37:11:09:ae:28:47:f5:1d:55:f0:93:26:
30:1c:4a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:22 2026 by rpki-client