Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142908.roa
File: AS142908.roa (raw, json)
Hash identifier: Jd+cGZQsNEzQwKurJ7dL9zdeyoSublzmLER4oQX5gdk=
Subject key identifier: F4:EC:40:54:06:E7:B2:C5:DD:A7:B3:A7:51:57:B8:74:EF:8D:48:A5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 284F2C3240B4C664C538961A61F587E03941A152
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142908.roa
Signing time: Tue 26 May 2026 02:35:21 +0000
ROA not before: Tue 26 May 2026 02:30:21 +0000
ROA not after: Tue 25 May 2027 02:35:21 +0000
asID: 142908
IP address blocks: 240a:a102::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:4f:2c:32:40:b4:c6:64:c5:38:96:1a:61:f5:87:e0:39:41:a1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:21 2026 GMT
Not After : May 25 02:35:21 2027 GMT
Subject: CN=F4EC405406E7B2C5DDA7B3A75157B874EF8D48A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:a4:b2:be:ca:bd:b2:61:0f:47:88:2a:43:
7f:f4:1a:e8:c8:0f:50:72:e5:3c:2c:e6:08:7d:47:
ab:0d:3e:4a:3a:09:22:47:fe:85:72:61:9a:d9:23:
cd:6a:9d:96:18:73:b7:c2:d2:ca:ab:39:30:d7:f7:
09:9e:62:2f:be:76:b8:e3:5f:01:0f:6c:de:e4:22:
ed:6d:b0:f5:22:e1:1b:92:43:bb:94:49:e7:b8:ec:
31:03:91:29:17:ad:63:7a:10:36:c0:0c:bb:db:e5:
10:49:52:21:49:fd:7d:72:41:e0:cf:d1:4f:ec:d3:
af:f0:f9:7f:06:96:42:45:eb:a8:0c:42:26:e7:25:
c6:2c:9d:63:c2:30:bc:41:cc:ad:00:64:d3:8a:98:
3c:8a:3e:50:4c:c1:93:bf:84:b7:64:b1:ba:15:d5:
42:2d:ad:34:fa:94:d6:29:9b:e9:dd:9c:83:85:76:
4a:cb:37:1c:02:37:08:2a:a2:ab:08:16:3b:28:ed:
6a:3d:4c:88:90:94:cd:f0:57:4a:2e:b6:8b:61:9b:
85:22:0e:91:1b:1f:ca:80:cc:68:20:ab:52:cb:a2:
5c:5d:41:40:c1:64:a4:ce:7a:03:f1:89:29:89:e8:
c2:fa:22:20:e4:91:36:d1:0c:17:e2:85:3e:a1:39:
f8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EC:40:54:06:E7:B2:C5:DD:A7:B3:A7:51:57:B8:74:EF:8D:48:A5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142908.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a102::/32
Signature Algorithm: sha256WithRSAEncryption
2a:fb:41:3d:89:a6:46:ec:ee:72:66:14:c3:94:60:f2:4b:a8:
c5:f0:13:b5:c8:57:25:ef:d8:cb:2d:66:c7:44:04:9a:0d:2d:
76:fc:dd:32:cb:22:f5:ff:b6:cd:11:b2:41:93:dd:29:b4:bc:
60:98:2e:79:e5:6b:aa:f2:96:a6:bb:b7:95:26:de:2f:45:7d:
c7:62:bb:57:da:da:85:84:40:01:37:bc:e1:cb:bb:a1:2d:4a:
9e:22:de:ba:26:b6:6d:b9:a4:f0:f9:63:71:45:46:a5:bf:c3:
5e:f8:7f:d7:b5:94:68:f1:73:d7:d0:56:b8:15:81:c5:6c:95:
0c:bf:75:95:ae:16:56:00:40:95:56:57:43:9a:77:be:26:8a:
b2:57:62:a3:3d:21:7d:95:c1:39:5f:8e:f9:94:b2:53:57:56:
bb:07:8c:62:db:18:36:12:57:35:3c:e0:b6:ba:65:a7:c9:d8:
88:2b:0f:d9:3a:f3:1c:1f:d3:10:ce:85:ec:8a:0f:8c:85:11:
d7:ca:88:bd:b1:d5:36:f9:45:a2:53:89:55:3b:66:86:42:b6:
f9:8f:c3:74:62:b5:b7:d3:86:d6:ad:a9:dc:78:93:be:fb:ed:
1d:8e:88:51:65:9b:9f:a7:23:12:34:75:db:b2:18:fb:51:40:
bd:f3:56:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:51:00 2026 by rpki-client