Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142907.roa
File: AS142907.roa (raw, json)
Hash identifier: Y+N0zBXr10FY944c77gozYUZLsBfmuEgGQWbzp9nXyM=
Subject key identifier: 06:70:D7:89:6C:A4:8C:0F:23:56:F1:E3:00:59:1F:6E:2B:C8:7D:2C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 37C4801BDA3A354E986D114A763FA9A0E18D7FA6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142907.roa
Signing time: Mon 25 May 2026 03:19:44 +0000
ROA not before: Mon 25 May 2026 03:14:44 +0000
ROA not after: Mon 24 May 2027 03:19:44 +0000
asID: 142907
IP address blocks: 240a:a101::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c4:80:1b:da:3a:35:4e:98:6d:11:4a:76:3f:a9:a0:e1:8d:7f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:44 2026 GMT
Not After : May 24 03:19:44 2027 GMT
Subject: CN=0670D7896CA48C0F2356F1E300591F6E2BC87D2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:20:b8:ac:c7:11:a1:ab:d1:37:b0:d8:0f:74:
ca:a0:b0:5b:15:46:97:24:a4:99:58:ca:49:1f:25:
be:2f:de:66:a1:44:c0:cc:f0:21:20:60:b9:55:d6:
d9:5e:51:79:e6:8d:74:16:dc:0b:5e:2c:85:33:e4:
48:26:48:b6:91:dd:fa:29:a1:0c:34:69:b7:6b:18:
fb:01:57:89:f1:fe:bb:b9:ef:f7:d6:df:4a:e7:89:
4c:2e:8c:2b:d7:22:09:a1:e3:4f:bf:34:c9:24:30:
2f:76:8a:61:ef:cb:6b:22:0a:2e:df:4c:50:24:b1:
be:91:54:01:d8:d7:b7:26:31:16:a4:9f:b1:c9:c3:
c7:23:94:28:5e:82:8a:de:20:05:2e:fb:91:09:d1:
82:78:30:d4:56:f2:a9:eb:63:81:48:86:c7:3e:a4:
da:fe:76:67:17:f8:8d:18:c6:ba:45:6c:6a:b4:cc:
07:09:f1:8b:dd:e1:81:87:1a:02:bc:4c:60:97:0f:
eb:6d:f6:73:95:d7:88:87:06:88:85:4c:a7:8b:51:
6c:b1:40:ee:23:c5:19:e1:24:dc:9f:dd:56:33:98:
c2:18:4b:68:b2:3a:20:42:1e:03:10:87:9d:71:cd:
b8:dc:40:f8:d8:07:15:f2:b0:47:36:47:88:05:11:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:70:D7:89:6C:A4:8C:0F:23:56:F1:E3:00:59:1F:6E:2B:C8:7D:2C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142907.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a101::/32
Signature Algorithm: sha256WithRSAEncryption
a6:6b:c6:f7:74:cf:0c:9c:8c:31:46:51:bb:d9:58:4d:02:dc:
75:aa:61:37:70:72:9d:ba:26:0c:c4:41:29:e3:5e:64:b2:ab:
22:7d:78:57:13:1b:90:6d:4c:51:be:7f:79:a3:0b:a4:e8:ec:
64:38:52:29:ce:55:6b:93:23:c9:a0:1e:d6:58:dd:fd:9a:1f:
ed:16:56:ab:fc:fc:e6:6d:cb:38:e8:b8:06:f7:48:26:e9:53:
b6:02:57:73:8d:2f:bd:e0:5a:a3:0d:df:4f:ad:f2:7e:7a:be:
e4:70:1c:50:18:65:89:61:e2:fe:48:37:dc:da:6e:7b:c2:20:
42:93:be:18:ab:56:f4:4b:70:de:b8:95:0b:e2:ce:3c:80:63:
37:02:49:d2:9c:cd:50:7e:08:bd:3a:22:9e:c2:e1:ba:d0:16:
42:3d:86:bc:a8:23:76:b1:71:71:30:af:da:57:81:ec:2b:bd:
34:11:fe:b8:0c:bc:8e:1f:27:85:42:78:0c:1b:a3:18:85:82:
b6:b5:4e:ab:86:f5:d9:6a:4e:cc:ff:54:da:99:fe:73:6e:42:
ba:95:80:a6:bb:f2:41:c4:cd:c7:94:1b:c5:f0:9e:6c:5b:c5:
a6:a2:f9:59:36:91:bb:c3:c3:fd:01:d8:35:d9:19:72:e2:a7:
c0:de:b1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:37 2026 by rpki-client