Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142905.roa
File: AS142905.roa (raw, json)
Hash identifier: Y1L79JYBvlbl6l9hs/mBCVwUquI0UhKWng+BtKwQT1o=
Subject key identifier: E3:1A:D6:BD:3D:D7:63:2B:6A:57:4A:29:22:61:F7:3E:4D:B3:AD:66
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4598C5D03274B510FF90649FFDC6281717F1C147
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142905.roa
Signing time: Tue 26 May 2026 08:52:46 +0000
ROA not before: Tue 26 May 2026 08:47:46 +0000
ROA not after: Tue 25 May 2027 08:52:46 +0000
asID: 142905
IP address blocks: 240a:a0ff::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:98:c5:d0:32:74:b5:10:ff:90:64:9f:fd:c6:28:17:17:f1:c1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:46 2026 GMT
Not After : May 25 08:52:46 2027 GMT
Subject: CN=E31AD6BD3DD7632B6A574A292261F73E4DB3AD66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:f2:bd:92:dc:a3:cf:62:38:72:d3:8a:a8:
3c:d5:c9:c1:72:28:40:d0:50:9b:fa:e1:e5:52:f9:
02:35:09:a5:36:6f:8d:bd:15:ef:79:b3:a9:fe:59:
fd:90:10:ab:ac:a6:fa:8f:7a:72:a5:b4:e3:d8:d1:
da:e9:1d:7e:b9:4c:05:5c:04:f3:c1:47:cd:18:9b:
3e:1d:9b:b1:2e:1c:1d:bf:ce:e2:f3:8c:b8:2f:d2:
c3:ca:42:e9:1f:b7:31:5a:a7:5b:e6:4f:60:a1:e1:
8d:12:73:03:6c:cb:fe:4c:74:be:4e:6e:09:30:41:
a4:54:2f:26:94:0a:fb:78:4a:88:6a:ae:c8:1a:f3:
44:e9:15:91:f6:c2:64:29:e6:1d:fb:fa:e8:de:b0:
a1:0b:6a:47:9e:99:c2:a6:dd:b4:18:bb:66:c4:8c:
da:5d:ed:d2:cf:7c:5a:41:a2:b8:1f:fc:e4:26:16:
62:e2:b2:e5:6b:66:a8:6b:8a:e4:89:db:ee:da:3a:
11:48:f5:c6:d1:59:f6:49:d1:43:26:f8:b9:4a:3d:
25:fe:e0:58:82:07:ce:d1:4c:1b:58:86:f4:95:8b:
df:81:0b:a6:8b:9e:8f:3e:56:61:58:40:da:3b:fe:
c6:81:35:d0:06:7f:4b:7e:bc:84:ee:cf:d0:4a:d9:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1A:D6:BD:3D:D7:63:2B:6A:57:4A:29:22:61:F7:3E:4D:B3:AD:66
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142905.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0ff::/32
Signature Algorithm: sha256WithRSAEncryption
a5:e4:8f:02:14:07:59:0a:89:75:ac:cc:23:0c:a2:eb:fe:5e:
32:c4:fb:67:c8:f7:3b:c8:e9:17:ee:7f:20:ae:ef:59:29:33:
3a:ce:4f:c4:47:be:9a:92:cc:8a:1f:11:f8:01:bf:42:b6:75:
a6:84:43:ca:63:1f:55:55:4d:3d:54:fe:99:fa:6a:53:14:5f:
48:f9:34:30:e1:cc:22:7e:a7:34:47:57:9b:38:45:eb:85:6e:
7a:34:9b:19:57:2a:d6:00:13:c5:3d:28:82:9d:98:85:ef:f9:
54:86:b0:51:7f:b5:a9:61:f8:33:68:2f:fc:64:34:80:02:22:
29:27:3c:9a:fa:a6:9e:31:a8:b3:1d:74:c5:8b:e6:1d:95:6a:
12:27:c1:59:44:1d:08:38:1d:bf:d0:6e:d7:0f:75:11:50:1b:
45:d1:3b:ca:f2:a0:9e:2b:0b:02:b7:fd:b8:91:9d:e5:e5:99:
63:d9:4e:e5:9c:f8:7d:73:94:8f:e2:44:b9:4c:88:76:ac:06:
50:45:0d:e4:c5:dd:58:6d:1d:57:bd:ca:02:1a:d6:ec:7d:49:
7e:35:78:cf:b0:71:0b:2e:ca:02:40:e2:47:b6:a9:df:53:13:
97:36:45:1a:18:8d:d1:9f:48:af:ce:04:cd:6c:b4:45:05:a6:
f5:dd:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:55 2026 by rpki-client