Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142892.roa
File: AS142892.roa (raw, json)
Hash identifier: XxXdNo4yOE1M8R5M5RtTTDaaMXJgTu5QXqDn/JU5p60=
Subject key identifier: 83:E8:40:24:77:C8:97:7F:78:D3:36:AF:AB:92:1E:6F:A5:8D:7A:92
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D77AA920C53AA68645A604D514648223F2FFFF8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142892.roa
Signing time: Fri 22 May 2026 07:24:28 +0000
ROA not before: Fri 22 May 2026 07:19:28 +0000
ROA not after: Fri 21 May 2027 07:24:28 +0000
asID: 142892
IP address blocks: 240a:a0f2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:77:aa:92:0c:53:aa:68:64:5a:60:4d:51:46:48:22:3f:2f:ff:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:28 2026 GMT
Not After : May 21 07:24:28 2027 GMT
Subject: CN=83E8402477C8977F78D336AFAB921E6FA58D7A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:7c:8b:55:c9:95:ab:9e:41:19:4d:29:a9:
ea:04:93:6f:16:ce:79:45:d8:6f:ff:69:39:3b:79:
16:51:b6:e4:85:03:34:8e:af:ec:22:9d:95:6d:5d:
fa:4d:f8:80:02:87:d5:fd:b4:0b:bd:2f:41:56:72:
25:b7:d3:74:68:78:5a:7a:bf:64:36:59:ae:ed:94:
74:d1:7d:d9:df:6f:df:20:58:a0:8a:b6:69:59:d2:
f8:1f:88:d2:52:8f:1e:59:ef:88:1c:47:f4:68:a1:
8f:1a:0a:27:04:7c:b2:06:23:97:6e:4d:dd:88:d2:
4a:33:93:26:44:c4:ef:0a:81:a7:1b:c3:28:47:7d:
e9:23:21:01:08:7f:b7:e3:ce:79:94:82:d8:09:9f:
91:6c:9d:a5:e6:24:26:f6:95:52:6c:2b:0d:30:04:
16:23:d9:2b:e2:1b:73:cb:4d:52:64:89:68:c2:9a:
58:68:32:23:69:1d:65:5f:1d:0c:89:f3:e6:e9:cb:
7f:c1:a1:74:95:c8:11:b7:98:99:74:fc:9e:83:7a:
63:81:c6:bd:78:ab:c1:2d:cd:f3:5e:b9:59:74:ca:
fb:59:c4:20:23:b5:7d:1d:ad:87:24:cc:4e:a5:ff:
42:4e:76:68:d2:bb:74:cd:a8:ca:f7:13:17:79:51:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E8:40:24:77:C8:97:7F:78:D3:36:AF:AB:92:1E:6F:A5:8D:7A:92
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142892.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0f2::/32
Signature Algorithm: sha256WithRSAEncryption
59:db:6d:55:b5:08:06:2b:52:1a:d1:59:ff:16:b6:42:c1:cf:
c5:63:d6:ce:61:db:49:94:b6:8f:ee:1b:f7:47:ad:66:ee:ec:
7e:fe:d1:43:64:41:37:ac:21:e3:74:63:d3:c3:e1:78:48:1c:
d4:5b:4d:57:0e:de:56:30:57:54:2d:6e:d8:4a:21:ae:a0:3a:
97:47:b0:39:53:e2:32:21:34:d4:99:53:2a:32:87:2d:f4:a7:
63:ca:aa:56:08:96:7f:b2:92:b3:2e:ec:84:14:ed:d5:4f:ed:
75:82:ef:75:c2:5e:c9:fb:e6:e1:d9:f0:98:7c:8e:96:f2:bc:
91:8d:b2:da:f9:79:5e:7a:a0:36:ef:e0:ea:11:4b:da:15:7b:
98:f3:e3:8e:e0:26:21:0f:c9:e1:f9:d3:dc:d5:33:d1:9d:34:
5f:40:c1:e9:48:0c:73:81:68:36:05:ea:db:f7:e2:59:58:53:
fd:8e:00:eb:7f:d5:da:c1:a5:12:8f:29:36:82:57:bc:8f:86:
ea:4c:b8:40:0e:33:9f:a0:44:45:be:b0:59:2a:6a:15:3b:6a:
01:8f:7e:de:73:6c:01:97:6b:c5:77:57:a8:e2:da:cb:34:8b:
5d:14:63:d6:c4:c0:6c:cb:1e:d7:4c:6e:08:2b:63:97:74:b7:
53:a9:cf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:03 2026 by rpki-client