Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142890.roa
File: AS142890.roa (raw, json)
Hash identifier: dPuVkbT6KJjeGNMW+B8ir3rlJzNvbPvAs3W3rd9cxGc=
Subject key identifier: 3F:A2:93:C6:B9:1A:A2:2B:D3:5B:DE:5C:69:5C:F1:2A:2E:BA:88:C1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 58B3ED77DE5DACB80D1470FA6ACD9DC6437A5C51
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142890.roa
Signing time: Tue 26 May 2026 06:31:03 +0000
ROA not before: Tue 26 May 2026 06:26:03 +0000
ROA not after: Tue 25 May 2027 06:31:03 +0000
asID: 142890
IP address blocks: 240a:a0f0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b3:ed:77:de:5d:ac:b8:0d:14:70:fa:6a:cd:9d:c6:43:7a:5c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:26:03 2026 GMT
Not After : May 25 06:31:03 2027 GMT
Subject: CN=3FA293C6B91AA22BD35BDE5C695CF12A2EBA88C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:bc:40:54:d3:8f:45:24:18:08:05:1a:1c:
87:96:be:ef:08:a0:86:09:b8:53:c2:10:0f:da:21:
79:44:8c:04:4a:74:12:cd:a6:94:b9:69:0e:35:65:
e8:18:e5:3b:d9:aa:7c:cd:41:1b:36:15:84:a7:c2:
0e:10:8c:9d:f7:b8:b2:36:60:97:9c:8f:e0:02:dc:
06:a9:ce:f4:df:f3:7b:74:8b:c3:95:bd:ed:ae:99:
bb:ce:65:53:7b:fb:66:e2:09:70:4f:2c:ee:e0:77:
97:62:90:52:9d:90:15:c0:7d:3e:a3:f0:41:a6:81:
34:03:37:d4:fa:a6:51:94:24:06:e5:a7:eb:35:f2:
4a:c5:59:cf:5f:a2:4f:56:70:90:93:1c:89:71:3b:
54:2a:d1:f9:02:58:2f:4d:c8:62:01:a1:c3:11:36:
ab:da:a3:2d:7a:b4:3f:c3:27:f2:60:b2:9c:65:9c:
a5:55:71:79:4b:f6:ae:02:33:30:5f:8f:d2:33:e0:
c3:51:e9:08:65:26:4f:a9:c9:e7:33:43:48:c1:57:
73:f5:d1:fb:27:58:20:a4:d9:51:48:58:a7:fb:79:
d2:4d:09:f8:09:67:9e:bf:17:64:ef:bb:45:3c:38:
db:50:c4:99:eb:6d:7f:bb:0d:80:bf:cd:c2:9e:03:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A2:93:C6:B9:1A:A2:2B:D3:5B:DE:5C:69:5C:F1:2A:2E:BA:88:C1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142890.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0f0::/32
Signature Algorithm: sha256WithRSAEncryption
7b:cd:e8:29:0b:5c:e5:b4:ea:63:97:e5:cb:d5:d2:68:2e:c8:
e1:87:4d:2a:f8:84:72:03:da:57:fb:db:cf:20:0a:5a:4e:62:
b8:88:4f:4b:84:a1:29:e7:1e:fc:04:e7:81:c9:64:f1:08:df:
7c:18:0a:da:66:d5:e2:26:73:c3:80:fd:96:b9:44:50:0d:b9:
f3:3e:48:47:95:10:77:01:de:e8:45:04:a3:80:d1:53:95:db:
31:28:4e:63:06:29:7c:ec:e7:b2:02:16:c2:fe:40:66:09:e8:
fb:4b:68:df:31:2a:17:10:e2:9c:16:9f:a9:ca:af:a6:44:82:
98:61:68:d2:e6:80:ca:03:96:24:3c:59:e5:3e:83:ff:37:c8:
3f:93:67:57:0c:b8:f3:da:32:ee:f7:83:7a:36:fc:59:57:f2:
3e:81:3f:f6:49:8d:6e:26:c9:b8:7b:fa:bb:4d:54:19:05:64:
6a:ef:dd:55:90:89:14:b5:f2:f0:29:ac:0a:94:11:64:3c:4d:
56:29:d1:fb:cd:82:b6:1c:98:3f:15:52:3a:5a:68:db:4c:ad:
1d:63:59:22:db:14:94:e0:f5:72:da:a4:4f:43:49:6d:8a:88:
42:7d:c9:ca:57:d1:c3:23:86:33:b7:ef:17:99:cb:b9:51:c2:
a2:d5:78:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:49 2026 by rpki-client