Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142889.roa
File: AS142889.roa (raw, json)
Hash identifier: iw6hjzhkLMdlLINJyhFCZROfUtxhF6E8BDpr1Cf7gJk=
Subject key identifier: 31:37:3E:D9:1D:36:8E:86:4D:13:B0:61:36:C3:1F:8D:CB:5A:A8:F6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B625D4654F4D93AED240F304A04B798296DEF73
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142889.roa
Signing time: Fri 22 May 2026 04:26:54 +0000
ROA not before: Fri 22 May 2026 04:21:54 +0000
ROA not after: Fri 21 May 2027 04:26:54 +0000
asID: 142889
IP address blocks: 240a:a0ef::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:62:5d:46:54:f4:d9:3a:ed:24:0f:30:4a:04:b7:98:29:6d:ef:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:54 2026 GMT
Not After : May 21 04:26:54 2027 GMT
Subject: CN=31373ED91D368E864D13B06136C31F8DCB5AA8F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:d4:93:19:da:b4:f6:e2:b1:97:a8:e7:c6:
f3:3b:b6:d5:be:37:29:31:d2:ff:e9:ac:d0:c7:6a:
4c:0e:ee:06:fe:d6:32:3f:c7:96:c2:0f:ad:76:1b:
ab:b3:3c:e4:9f:52:ce:e7:17:75:83:34:0d:15:2d:
3c:c4:94:07:5b:82:b3:4c:4e:4c:60:3e:15:f3:32:
12:3c:63:2c:cb:d6:4a:65:78:bf:46:63:be:f5:21:
9f:40:8d:5d:2a:6c:b3:af:e3:db:61:b0:cb:34:f1:
c5:97:d6:71:a6:24:97:3f:96:a8:b4:d3:93:ae:4b:
72:46:4d:f3:d2:48:00:75:4c:71:bd:b1:8d:ce:3f:
ce:81:96:49:76:17:05:30:42:a8:ae:8b:86:02:a4:
6a:8e:88:be:22:b4:9f:30:1a:7e:d3:7f:8a:80:86:
84:7b:79:83:ac:32:ff:fb:47:da:df:b9:98:bf:31:
21:78:08:0d:34:b7:20:a3:e8:c4:db:22:3d:87:13:
b0:cb:b2:14:17:be:59:74:53:db:1a:b2:36:24:c3:
20:1e:11:77:96:9d:fc:02:b5:5d:a6:95:f5:94:a2:
dc:b6:c2:ce:15:38:ea:8c:8c:b6:9d:4b:21:ac:9a:
b8:60:3c:e5:77:38:ed:88:4e:91:27:62:c4:a5:c4:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:37:3E:D9:1D:36:8E:86:4D:13:B0:61:36:C3:1F:8D:CB:5A:A8:F6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142889.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0ef::/32
Signature Algorithm: sha256WithRSAEncryption
49:ab:e7:c5:5b:5d:ae:ff:52:43:80:a5:c2:06:70:c2:d3:df:
fc:07:58:7e:31:cb:2e:08:67:34:a1:94:ee:27:36:d9:a5:46:
39:2f:7a:22:ef:bb:f8:d7:f4:a1:c5:03:13:87:97:a6:58:d0:
09:26:57:23:00:ad:b4:1a:d4:02:be:7f:c9:5b:7b:24:f2:f6:
90:8b:65:ea:77:d4:a8:f5:20:2e:ea:bc:dc:46:28:81:33:cd:
e2:ae:fb:87:af:bf:a6:e7:ca:5b:9d:94:08:93:d8:06:96:de:
7d:27:a4:1f:3d:9e:b6:01:7c:70:e9:b9:7c:87:9b:06:4f:f1:
e0:33:5a:02:4b:90:5d:e8:49:20:c8:bb:ca:24:6e:9e:c6:7d:
97:34:12:7f:03:62:37:3e:72:09:eb:0b:fa:2a:06:06:9f:33:
af:39:fb:4e:21:ea:6b:d1:b7:f0:d7:cb:ab:77:7c:d3:0f:2c:
c5:6e:3e:67:f0:d6:6d:16:04:26:5f:c8:ca:36:64:7c:c3:47:
35:52:f8:c1:bc:01:ff:a0:c0:76:02:c3:51:a4:f5:d9:d5:0b:
9a:0e:d1:b9:8e:71:5a:7c:31:62:cb:b9:e8:e0:21:05:99:a9:
07:49:79:48:1e:2a:55:6c:d9:dc:9c:b2:c4:ba:e1:a8:5f:2a:
fd:7a:fe:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:08 2026 by rpki-client