Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142891.roa
File: AS142891.roa (raw, json)
Hash identifier: 8cZbzcv+G5PuCiaYpjm/+3xUMYk/LOnTEfOH6GX4wmo=
Subject key identifier: E6:70:A6:D4:1B:49:67:0A:1B:FC:6B:47:61:2D:0E:BC:8E:2D:0F:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 79CF812EC24F5F7BAF2CCF9A18A5FB72E0378AFC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142891.roa
Signing time: Fri 22 May 2026 07:40:55 +0000
ROA not before: Fri 22 May 2026 07:35:55 +0000
ROA not after: Fri 21 May 2027 07:40:55 +0000
asID: 142891
IP address blocks: 240a:a0f1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:cf:81:2e:c2:4f:5f:7b:af:2c:cf:9a:18:a5:fb:72:e0:37:8a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:55 2026 GMT
Not After : May 21 07:40:55 2027 GMT
Subject: CN=E670A6D41B49670A1BFC6B47612D0EBC8E2D0FD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:5e:7f:f3:c8:67:e1:1b:b6:43:98:67:c3:
e6:ad:9f:f3:25:25:7b:e9:99:6a:db:a7:9c:62:06:
4f:95:08:ef:37:13:db:26:02:25:fe:7a:62:d4:0a:
99:0b:ab:7e:bc:0f:4c:ff:52:6f:d7:e8:97:3b:78:
d6:ec:36:ce:47:3d:a7:69:68:2b:ba:0f:be:5f:e6:
7f:e5:50:d2:1f:3d:7a:6b:71:3f:1b:dd:4f:29:1a:
e8:f4:0e:02:58:39:ad:04:31:54:e6:8e:a2:91:ca:
84:6d:fb:b5:3a:e2:05:dc:7a:6e:84:e5:a0:9f:40:
33:3c:85:99:22:c5:90:bf:bd:08:22:2e:77:c3:ee:
20:b1:78:f9:fa:64:52:6d:2e:1f:60:d1:e9:47:ef:
a4:40:3c:39:01:73:18:f7:23:2b:85:32:65:e3:83:
fc:6f:4e:49:d5:38:6f:8f:18:c4:c7:6b:08:7a:54:
aa:e6:bc:48:cd:56:2b:98:a9:28:d0:c9:84:8d:e5:
40:64:72:8b:9f:c9:85:dd:d8:45:87:00:8d:17:41:
cd:5b:28:32:2c:44:20:8a:60:54:be:97:cc:9d:77:
f7:64:e2:fb:da:c9:dc:45:e9:ce:be:66:0d:a1:59:
54:09:dc:37:c9:5d:c0:71:4e:85:88:95:57:e2:55:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:70:A6:D4:1B:49:67:0A:1B:FC:6B:47:61:2D:0E:BC:8E:2D:0F:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142891.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0f1::/32
Signature Algorithm: sha256WithRSAEncryption
3e:d2:70:97:73:7d:33:b0:82:39:15:20:5d:2d:5d:ea:ec:6e:
dd:fd:02:ae:85:f0:d0:72:55:ab:89:d1:c9:50:d3:97:49:40:
42:52:aa:d2:5e:e5:dd:c7:2d:86:bc:cd:65:68:97:d5:6a:ce:
04:5e:09:a0:5d:c0:27:91:a3:38:67:7c:99:05:65:a7:e1:27:
6d:56:89:2d:c3:66:76:3e:2d:88:a1:3c:37:fb:ca:0a:c3:37:
c6:45:20:55:60:48:5d:99:38:77:8b:d1:2a:c4:1a:5c:ab:46:
20:74:cf:fe:7a:4b:c0:d6:c2:c1:68:e5:63:a4:59:90:31:66:
37:6c:7f:43:14:e0:20:02:c2:9b:a2:dd:a5:4e:ce:1d:ea:12:
aa:a4:70:4e:22:36:b1:4e:0c:ab:8c:ed:ce:a9:9d:fd:dc:ad:
a3:83:90:a1:b8:bb:ce:a3:74:c2:77:9b:91:ad:67:9c:95:e9:
8f:7c:eb:a3:61:80:96:05:ca:76:01:39:9d:f6:46:60:42:cc:
8d:16:e8:5c:3b:5c:73:9b:e7:b1:58:bd:f5:78:f2:6a:d5:e1:
d2:57:b6:5c:92:8b:f0:f3:7b:01:27:b9:33:a9:bb:fe:73:3a:
1c:70:47:46:af:0e:3e:86:96:47:02:f1:9f:a0:82:37:e9:e4:
3e:6f:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:55 2026 by rpki-client