Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142894.roa
File: AS142894.roa (raw, json)
Hash identifier: biUUEgJ1yCbuEar86EaA8hTgv14e+csZfM3bAzaXPxI=
Subject key identifier: C2:F5:7F:8C:2A:4C:CC:BB:A2:C6:0E:63:8F:3B:93:A9:14:56:F8:F5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3F90BBBDD8C9998263B3CD356F79642A50D79DFC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142894.roa
Signing time: Fri 22 May 2026 06:46:28 +0000
ROA not before: Fri 22 May 2026 06:41:28 +0000
ROA not after: Fri 21 May 2027 06:46:28 +0000
asID: 142894
IP address blocks: 240a:a0f4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:90:bb:bd:d8:c9:99:82:63:b3:cd:35:6f:79:64:2a:50:d7:9d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:28 2026 GMT
Not After : May 21 06:46:28 2027 GMT
Subject: CN=C2F57F8C2A4CCCBBA2C60E638F3B93A91456F8F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:8a:20:c7:c7:30:6e:cc:f1:98:53:61:ad:
8f:6b:ef:e5:9c:fb:20:55:24:6a:6e:31:2a:a7:77:
2e:2c:23:fc:e5:12:55:41:6f:f9:f2:dc:52:c8:ac:
3f:99:81:61:a0:73:32:01:28:fd:f0:10:af:ee:1f:
28:23:33:4c:74:c9:e9:dd:6f:1b:ce:f0:3f:b2:04:
bb:86:14:32:c2:93:49:f0:5d:cc:af:24:1f:35:41:
b9:e3:64:de:30:8f:88:2a:f9:74:7b:0f:6c:8d:b2:
6a:19:85:15:3b:b8:dc:05:1e:67:94:4c:23:6a:09:
3c:89:c9:fd:13:18:51:53:3d:3b:13:90:21:9d:48:
db:a2:a3:f4:45:50:12:12:5e:8e:e9:69:f5:21:36:
61:2e:d5:97:14:f4:09:2b:10:39:3c:22:8f:1c:94:
ed:23:fb:3c:b1:c2:e1:57:f5:35:11:64:24:f6:05:
56:13:3c:32:20:ce:1a:c7:b8:1b:af:6c:61:80:75:
61:f6:4f:ca:ff:30:88:ec:53:97:19:cd:9e:f1:67:
fb:32:a4:56:9b:d3:4c:09:37:e3:d6:ee:50:21:60:
5c:fe:96:b5:7c:f7:3c:ea:54:2c:3c:eb:8d:cd:b3:
cb:80:2b:60:33:c9:39:4e:5d:28:70:57:96:0b:3d:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F5:7F:8C:2A:4C:CC:BB:A2:C6:0E:63:8F:3B:93:A9:14:56:F8:F5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142894.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0f4::/32
Signature Algorithm: sha256WithRSAEncryption
17:07:77:2c:01:2f:da:c5:ff:8b:12:ee:00:a9:ec:f8:a0:e7:
91:f7:25:c4:1d:79:f1:0c:ee:ca:ac:46:09:40:86:28:bb:65:
33:60:14:5d:6a:0b:b2:a4:bf:47:6f:59:c2:7c:89:04:e5:71:
f1:51:da:15:2b:40:dd:5b:d9:d6:46:8b:3c:19:f3:e2:66:43:
4d:33:35:0b:f8:1c:bd:01:56:07:7e:c1:69:1b:b3:6f:07:0e:
12:e5:eb:1c:45:27:f8:26:e7:b1:6a:71:9f:3d:aa:9b:7b:27:
18:85:c1:2a:ca:3c:b5:1a:28:72:32:a3:74:b1:7a:00:53:5e:
3d:c4:58:d8:ff:46:e4:b2:01:77:c3:16:e9:43:d6:6d:e3:82:
74:73:b5:13:83:db:26:23:e9:ff:83:bb:6e:d1:3d:99:b5:93:
77:26:ea:7b:7e:c0:52:7c:89:fc:b2:04:48:c8:71:cb:64:f3:
17:b3:1f:46:ec:e4:8b:42:b6:cf:ff:be:1d:8a:46:bb:a2:8e:
93:ce:00:6e:e6:48:e9:a2:2a:43:d2:52:07:2a:96:dc:13:7d:
aa:f4:1e:fc:42:e4:55:29:d2:4b:5d:72:60:7f:3c:2f:00:07:
94:98:6d:04:58:0c:3d:01:f6:94:67:d4:1f:43:d4:49:89:57:
30:6c:4d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:00 2026 by rpki-client