Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142886.roa
File: AS142886.roa (raw, json)
Hash identifier: uFNwUxug/sboqQkbkMQyG6hSkB39qJt9vVWPkmK4/xk=
Subject key identifier: 9A:A9:BB:D6:68:74:92:04:42:F9:45:5F:28:FB:C5:30:79:2C:3C:25
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7B2C224984E36351D6462D07A8B58D5AE8FF3FF1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142886.roa
Signing time: Fri 22 May 2026 06:05:22 +0000
ROA not before: Fri 22 May 2026 06:00:22 +0000
ROA not after: Fri 21 May 2027 06:05:22 +0000
asID: 142886
IP address blocks: 240a:a0ec::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:2c:22:49:84:e3:63:51:d6:46:2d:07:a8:b5:8d:5a:e8:ff:3f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:22 2026 GMT
Not After : May 21 06:05:22 2027 GMT
Subject: CN=9AA9BBD66874920442F9455F28FBC530792C3C25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f3:4f:3e:a0:12:f5:cd:a9:a8:1d:8a:14:ee:
be:13:8c:ab:8b:4b:47:2e:45:60:4d:bf:cc:81:cf:
9d:8e:89:8d:08:cb:91:ae:3a:e0:5b:e6:1d:28:41:
b0:af:49:05:02:33:6f:37:2d:76:1a:92:cb:4a:33:
1d:41:3a:f6:be:ee:63:45:d6:24:3c:17:0c:3d:47:
12:4b:a8:3b:6c:79:29:93:41:34:c5:15:2a:91:20:
f1:6d:63:37:27:ef:4c:60:6c:c8:48:e0:35:09:18:
15:dc:2e:63:0e:a5:fe:30:07:b3:67:20:1b:0d:bf:
3c:af:d9:01:50:ba:56:79:7d:b2:a4:f4:d2:4b:ac:
0a:c8:4a:7c:42:15:f6:af:e1:99:32:96:a5:c5:b1:
f4:16:63:55:4c:f2:79:21:2a:5e:8a:c5:98:bf:ab:
f7:c5:a1:07:6a:a7:d3:21:c8:53:18:f5:13:7b:8e:
0f:17:cf:c9:86:7e:5c:1b:58:25:b2:9f:1e:f6:b9:
7b:54:c5:b2:f2:9d:3d:98:5b:5c:9d:0f:48:0b:72:
06:b1:73:92:86:de:9c:92:b9:49:f3:ec:db:6e:4f:
fd:4e:01:b9:86:28:b8:2c:1d:97:d6:32:96:92:84:
ff:db:dc:d8:af:b0:56:b7:88:a1:6f:ea:d5:fe:76:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A9:BB:D6:68:74:92:04:42:F9:45:5F:28:FB:C5:30:79:2C:3C:25
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0ec::/32
Signature Algorithm: sha256WithRSAEncryption
9f:a6:36:5f:1b:46:c3:1a:3a:12:aa:87:ce:2c:d0:94:95:a7:
24:42:8c:3e:50:b0:04:2c:41:78:79:22:11:2a:11:90:1b:95:
6a:cd:0b:ad:fc:bf:5e:c6:8e:cd:be:ef:e3:3b:d3:b6:cf:94:
5b:ba:8b:28:28:65:dc:9a:61:7b:fd:20:cb:22:e5:57:64:bb:
91:19:2f:30:47:4c:a4:74:0c:2f:57:e2:2e:c6:b9:62:cb:00:
cc:af:30:d7:2a:80:27:b0:36:55:7d:32:7d:2c:d8:f5:65:cf:
0a:cc:a3:c1:c8:a9:ad:92:b1:70:da:59:60:48:f5:33:66:1d:
9b:ca:42:cd:11:7c:6b:82:89:3a:c6:0e:e7:9f:f5:f8:9d:94:
aa:fb:0e:a3:99:6a:32:e0:aa:6f:f2:b6:e0:0e:8c:64:f0:f8:
4a:71:9e:c3:5c:dc:ca:54:bd:9e:1f:c7:26:24:12:d1:04:ac:
44:09:f8:30:17:67:da:7c:7d:e7:b5:67:d9:49:58:dd:b4:15:
64:a1:61:e1:14:59:b8:54:82:f5:b5:5c:21:7a:c2:3d:fd:f6:
03:10:b7:e8:c2:3b:db:be:6c:7e:15:65:86:4f:6d:83:71:89:
bd:68:c8:ea:45:53:bb:a0:e6:0b:7b:36:a8:d2:d3:3d:1b:a5:
c8:ec:a2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:45 2026 by rpki-client