Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142898.roa
File: AS142898.roa (raw, json)
Hash identifier: cvBNMNAyFwGUCElwqFOp39IXvSe4D2+G0EKcZ6RvAiw=
Subject key identifier: 43:A7:EB:4D:E4:59:D4:26:D1:BD:71:6E:76:88:81:2A:C6:4A:C4:B8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 703367D2F251E094B79F479B8476EA7ED1DC123A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142898.roa
Signing time: Mon 25 May 2026 01:51:05 +0000
ROA not before: Mon 25 May 2026 01:46:05 +0000
ROA not after: Mon 24 May 2027 01:51:05 +0000
asID: 142898
IP address blocks: 240a:a0f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:33:67:d2:f2:51:e0:94:b7:9f:47:9b:84:76:ea:7e:d1:dc:12:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:05 2026 GMT
Not After : May 24 01:51:05 2027 GMT
Subject: CN=43A7EB4DE459D426D1BD716E7688812AC64AC4B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:a6:25:48:43:45:d7:99:92:ca:35:6c:44:
cd:5b:93:b9:3f:5c:f4:48:92:43:60:a4:e8:cd:8d:
36:51:03:ef:08:a9:4b:47:74:b3:ec:37:97:58:ad:
ad:f0:93:6e:6b:54:27:c3:bb:35:bc:3a:a6:50:5c:
6a:29:6b:bc:a1:29:cf:d2:57:a6:95:fd:5f:1e:a4:
99:68:05:7d:0e:24:0e:db:63:5e:b2:51:c7:a9:9b:
4c:70:96:99:cf:fc:ef:16:a9:b6:25:60:e8:09:1c:
9d:3c:42:41:02:47:1c:e7:09:a7:67:44:df:58:b0:
7b:a9:c3:cc:a8:40:b3:ba:ff:09:79:89:ed:da:02:
e9:71:34:2a:52:90:1a:5a:3b:4e:de:ae:5b:d1:db:
34:4a:77:ed:da:e8:e9:cb:4c:41:b5:84:63:c5:f5:
cf:19:72:ff:9f:63:2f:07:a9:0c:af:b7:1f:9d:d0:
80:68:dd:63:a5:ff:8c:06:40:28:a3:39:a1:45:f1:
a7:2c:4d:ca:e1:3f:b5:11:77:29:80:b6:0a:8e:c4:
93:2b:8a:a1:fe:de:35:c5:7f:13:db:af:4b:49:f1:
40:7b:94:f3:d2:25:70:5c:c5:95:70:0f:2e:bc:f8:
7e:50:e3:ab:72:77:bb:27:e9:1d:17:39:61:e1:4e:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:EB:4D:E4:59:D4:26:D1:BD:71:6E:76:88:81:2A:C6:4A:C4:B8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0f8::/32
Signature Algorithm: sha256WithRSAEncryption
02:fd:bf:56:46:d2:46:2f:51:8c:d6:ac:e6:d8:8c:e0:e4:6b:
78:9a:c7:c6:68:e9:4e:af:ef:fc:c4:63:c9:c7:d4:cc:76:31:
8e:79:f5:3e:20:a1:f7:9d:0b:c0:4f:ad:bd:4a:11:a8:c6:a7:
59:98:b2:93:02:7c:92:7f:12:e1:c9:ff:52:26:84:18:28:e7:
1a:ef:2e:5a:57:c3:9b:1c:39:ed:57:41:c7:d5:0f:5a:0e:1b:
a0:e4:45:4e:70:dd:25:98:8c:08:6f:65:04:ad:ef:bc:c7:9f:
ba:37:ec:f7:1c:97:3b:0d:f6:ad:af:73:f2:63:c8:6b:ce:77:
df:e4:13:77:00:05:53:c8:61:28:de:b0:b1:f3:82:ef:bb:ab:
05:a9:f3:63:18:27:5f:f0:6d:c6:b3:83:3f:13:6c:cd:49:ef:
79:d5:9e:79:d1:5c:84:ed:e9:29:1b:a3:2a:0c:d7:54:c1:4c:
e0:cc:4b:09:11:7a:ba:a9:73:1a:3c:28:ef:8f:37:a5:b5:26:
14:49:09:bf:a3:77:9e:de:1b:9a:90:d7:31:fa:f7:be:65:97:
2f:98:45:9c:df:dd:ec:c4:ce:b6:3a:8d:32:e0:79:e3:c6:5d:
71:06:45:61:1d:68:6c:29:44:b4:58:fe:9e:8d:91:1f:51:f3:
45:b4:14:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:15 2026 by rpki-client