Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142909.roa
File: AS142909.roa (raw, json)
Hash identifier: 6tq76awL5a0H442o0JjCDSRVk8qz8fzvHP7u2n27Ws0=
Subject key identifier: 9C:89:3D:38:86:7C:72:47:A1:75:88:B3:47:EE:4F:0B:2C:24:7B:16
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3394A29B0C6664A21B5572BA36D62AB85EB9445E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142909.roa
Signing time: Fri 22 May 2026 07:09:03 +0000
ROA not before: Fri 22 May 2026 07:04:03 +0000
ROA not after: Fri 21 May 2027 07:09:03 +0000
asID: 142909
IP address blocks: 240a:a103::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:94:a2:9b:0c:66:64:a2:1b:55:72:ba:36:d6:2a:b8:5e:b9:44:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:03 2026 GMT
Not After : May 21 07:09:03 2027 GMT
Subject: CN=9C893D38867C7247A17588B347EE4F0B2C247B16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:d6:b5:df:a5:ca:bb:6b:29:41:f3:e9:aa:
7f:51:f0:c6:b7:d9:91:0a:a6:ad:13:3d:81:a9:8d:
1b:b7:fa:ca:aa:13:bf:6d:f5:71:dd:4a:33:b8:0a:
e4:b8:d3:96:21:df:ef:6a:5a:cd:34:74:e8:84:58:
da:1c:29:4b:22:7d:39:dd:13:1c:0d:f7:e6:7c:76:
c7:e4:4a:34:68:e8:ca:a3:dc:6f:41:f8:da:28:86:
b8:7d:43:9b:65:79:f1:d2:67:57:de:d5:11:31:1e:
ea:03:46:a7:f2:20:08:57:8f:89:fd:c9:ba:cc:fc:
48:6e:bf:08:a3:59:37:dc:a2:1f:99:de:9e:6b:92:
32:ae:18:5a:d1:c1:00:ef:ed:75:41:92:8a:69:07:
69:40:ee:cb:a9:04:15:47:b2:b9:aa:a3:ca:7e:46:
a3:12:dd:6a:cb:62:53:bf:80:82:ce:ac:4d:12:ab:
6e:f6:68:1e:4e:6e:f6:a7:d2:b4:b7:ec:5c:63:4e:
6f:30:6f:26:b0:0a:0a:c4:a6:29:0a:60:ce:fd:b0:
3c:b9:7d:4a:53:46:07:25:fc:8a:a3:f7:36:1f:09:
7e:89:ec:28:a2:a3:9e:02:9b:3a:b7:91:12:4b:6d:
70:ae:2d:5e:84:10:d8:d4:7e:da:44:dd:31:15:8d:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:89:3D:38:86:7C:72:47:A1:75:88:B3:47:EE:4F:0B:2C:24:7B:16
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142909.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a103::/32
Signature Algorithm: sha256WithRSAEncryption
9f:bc:ce:9b:ee:12:e8:34:a8:4b:b1:07:5d:c5:d0:e1:01:97:
c6:6d:a1:1d:33:cc:8b:e1:be:e8:e5:3c:cd:10:54:5a:de:4f:
56:29:f7:b0:fc:61:fa:e5:d3:89:e1:c4:c8:0e:d8:a5:ff:71:
c8:92:a8:e5:af:1a:fa:bb:d1:4e:d3:13:bd:65:1b:e0:77:e5:
9e:34:a0:0b:f0:0d:74:2e:4e:fb:10:13:ed:23:42:6a:d6:43:
a3:5c:0a:82:a8:6e:83:b2:23:13:b3:b9:55:c3:1c:01:84:73:
ab:1c:f3:af:09:d9:eb:d4:66:7f:2d:a1:17:33:4c:f9:39:23:
24:9a:28:39:42:fa:14:9f:68:e0:03:d3:c2:7b:d3:c0:d2:85:
0b:67:a0:77:1d:c1:5f:3f:74:8f:15:cd:48:c6:40:ee:51:b0:
d6:45:a5:aa:ea:42:72:fc:a2:8f:90:79:e3:f2:13:e2:6d:e3:
e5:1f:78:ad:63:11:8d:c9:a2:fc:a6:33:dc:cb:c5:9d:c0:35:
65:f9:78:29:f3:16:c8:f1:bd:7c:e2:c3:97:ea:b7:42:77:98:
9f:73:ab:c1:3c:90:fc:b0:db:10:3b:4e:cd:04:0f:23:b9:95:
d0:0c:f9:51:6a:55:92:4a:f0:4f:df:de:c8:51:c3:86:68:a2:
b9:97:81:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:28 2026 by rpki-client