Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142904.roa
File: AS142904.roa (raw, json)
Hash identifier: bOEEH9kl2s//JwLk0zTc8XnkZlElKYByV/nbpNg9JF8=
Subject key identifier: 3B:22:7C:B4:30:AB:5B:D5:DA:00:13:3C:41:CD:1E:CF:46:96:9C:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0D5C4B518975521C47CBE36102484D5BFF2CFBF2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142904.roa
Signing time: Mon 25 May 2026 03:19:10 +0000
ROA not before: Mon 25 May 2026 03:14:10 +0000
ROA not after: Mon 24 May 2027 03:19:10 +0000
asID: 142904
IP address blocks: 240a:a0fe::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:5c:4b:51:89:75:52:1c:47:cb:e3:61:02:48:4d:5b:ff:2c:fb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:10 2026 GMT
Not After : May 24 03:19:10 2027 GMT
Subject: CN=3B227CB430AB5BD5DA00133C41CD1ECF46969C83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:fd:d1:0f:b3:b8:3b:2d:af:76:19:c7:a3:
b2:ee:21:03:a7:01:40:bb:95:0c:15:62:f4:81:37:
b1:71:6b:9f:ee:e8:05:9d:ec:9c:ff:4a:8e:cf:88:
7c:8d:8d:cd:0f:a5:03:26:4f:17:af:60:13:c9:42:
be:8d:a3:61:33:aa:20:b6:cd:ab:58:16:f7:38:80:
15:25:82:4f:8f:04:9b:59:48:e5:7c:50:55:54:c0:
1a:e6:03:40:ec:e9:89:a7:f6:e4:a6:d8:d5:a9:62:
72:e3:84:e4:9a:00:85:b0:ab:3e:36:99:6c:4e:70:
06:5d:45:30:75:2b:89:51:1e:fc:16:7e:4d:b4:ef:
28:b7:8a:c1:b4:89:f3:97:f4:14:bd:8e:0d:9c:d8:
ae:31:c3:b6:ee:c9:79:4c:fe:21:62:cb:22:42:69:
ad:3e:0c:81:4a:e7:ea:c2:86:05:14:fd:62:20:4d:
90:6e:90:00:86:a0:72:16:24:6f:5c:56:b4:40:78:
9f:87:92:fb:b4:12:87:d0:52:1b:21:4e:98:a2:34:
81:42:0c:fe:0b:75:17:2b:07:b4:fb:a7:e7:56:5f:
47:4a:ed:b9:3a:f7:29:7d:2b:70:db:c1:c4:b1:28:
aa:19:d3:ea:14:ad:53:d3:15:96:d7:57:de:17:4f:
c3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:22:7C:B4:30:AB:5B:D5:DA:00:13:3C:41:CD:1E:CF:46:96:9C:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142904.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0fe::/32
Signature Algorithm: sha256WithRSAEncryption
aa:e2:53:65:e6:1f:29:d5:30:6c:0b:8c:23:52:96:a2:1d:80:
ce:8a:f8:36:56:dd:79:7d:1c:5d:7e:25:4c:e0:1d:e9:0d:d5:
82:07:cf:ac:cd:46:14:0a:19:1c:12:27:73:27:d4:64:ec:23:
f9:7b:3b:9c:73:36:28:63:38:c4:6f:92:73:1b:84:ac:7e:22:
62:de:1a:6e:b1:bc:1b:35:1c:45:fe:90:f8:55:c1:d7:b5:73:
f6:73:c9:6b:21:96:05:bb:a4:38:24:bd:04:1c:2c:3a:15:6f:
d6:aa:81:6d:46:1e:07:08:bf:16:f7:a0:1a:eb:b4:e3:2b:d7:
66:26:c2:73:68:1e:26:05:45:47:9f:ff:c1:4e:5e:e0:9d:86:
8a:b3:3b:2d:1d:cf:79:ef:c7:76:4b:98:e4:f8:b1:f1:2d:5a:
c8:67:c3:71:18:1a:63:b6:48:29:21:37:35:57:4a:02:41:d7:
fd:02:f9:9b:15:3d:14:ea:24:81:58:b1:3b:78:cb:9c:0a:10:
01:20:3a:23:7e:d7:62:05:1e:9e:3b:a5:35:7e:b8:8a:65:4c:
b6:08:16:6c:e5:48:62:da:ab:61:72:0d:7b:e5:4c:b4:0f:cf:
a0:52:44:fc:fc:c5:b3:d5:77:c9:59:f3:26:68:ee:8a:d0:b8:
c4:53:20:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:01 2026 by rpki-client