Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142910.roa
File: AS142910.roa (raw, json)
Hash identifier: eCk33jWDoN5u5Yk3qFjIVdXxmmYeyT0QyISsDcYQeWw=
Subject key identifier: DA:4F:F2:3A:3E:18:23:74:74:07:A5:46:FF:8E:85:75:58:B1:19:AE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 46A15B1A1A117F435CD674924C5C0DC44025E96A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142910.roa
Signing time: Fri 22 May 2026 07:41:17 +0000
ROA not before: Fri 22 May 2026 07:36:17 +0000
ROA not after: Fri 21 May 2027 07:41:17 +0000
asID: 142910
IP address blocks: 240a:a104::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a1:5b:1a:1a:11:7f:43:5c:d6:74:92:4c:5c:0d:c4:40:25:e9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:17 2026 GMT
Not After : May 21 07:41:17 2027 GMT
Subject: CN=DA4FF23A3E1823747407A546FF8E857558B119AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:9b:46:0f:6d:fc:1b:c2:44:1b:6f:3f:74:
93:4f:1a:93:e4:a7:63:5f:97:bd:01:b4:90:f5:85:
45:d5:01:72:2d:66:6b:e8:fe:10:ea:19:12:c7:ba:
a7:12:b3:3b:1f:a3:f1:d7:0a:de:cd:72:fb:35:4f:
1b:69:aa:0a:c7:da:79:aa:03:5c:34:90:bb:ba:4f:
66:34:0a:05:81:1b:2d:eb:ff:22:19:d0:ba:fc:dd:
78:e3:97:37:8f:66:75:b9:b2:a2:8a:34:2a:5d:0e:
c5:f1:a7:f3:56:b7:5a:b9:3d:60:f2:71:bc:9e:a4:
0d:96:7e:64:35:b4:ed:32:6a:c6:56:fd:2f:82:fa:
a0:c9:f7:a2:72:3f:7c:b6:8d:2f:b7:c5:db:0d:2a:
be:86:bf:24:7e:39:38:f9:ad:52:99:2c:59:e5:e2:
e5:3e:22:95:30:06:41:c0:8b:81:5f:4a:6c:a5:9e:
cd:74:08:89:9c:41:6b:a6:b9:6e:ac:69:87:d0:99:
80:b2:e4:2a:ff:31:e2:21:50:c4:28:62:1a:e0:82:
01:ae:01:b4:24:4b:f6:63:b6:da:2a:be:85:7f:ba:
f0:67:4f:74:5f:3e:75:fe:00:2c:44:ad:3d:cb:ad:
f7:3c:ac:18:2c:57:98:1c:a1:a0:53:fd:33:ff:84:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4F:F2:3A:3E:18:23:74:74:07:A5:46:FF:8E:85:75:58:B1:19:AE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142910.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a104::/32
Signature Algorithm: sha256WithRSAEncryption
ac:77:25:56:a8:8b:51:88:28:92:06:e3:cc:b2:7b:d6:76:0e:
d3:8e:2a:13:16:35:eb:93:77:19:cf:9c:58:99:90:8c:d8:42:
14:f2:4c:44:8d:72:f4:6c:33:7d:05:61:6c:e6:da:2e:fb:1a:
39:d3:90:02:a7:ff:48:d5:61:0c:c5:b2:c9:51:92:c3:a4:ac:
60:51:19:3d:b4:77:c2:7f:35:10:68:60:ee:9c:13:fb:ec:93:
88:bf:a6:96:9d:b0:13:af:4d:04:8a:81:63:52:6c:8a:fc:ac:
93:c6:01:f9:5f:00:06:c5:7d:66:05:5b:79:de:d8:0b:00:9d:
da:76:3c:07:51:ec:86:df:0d:2e:76:0c:e2:6e:2e:b6:e5:c2:
35:d0:d8:4c:99:11:63:2e:a5:96:c1:85:0e:1e:5e:c6:16:4e:
17:08:85:fb:64:bb:07:f3:cd:1f:62:f2:62:0d:1f:f7:f7:b1:
5e:3b:fa:14:89:34:c1:d2:e5:89:82:23:ec:11:98:cc:f9:27:
53:02:57:ca:22:65:22:44:f8:e2:33:01:01:e1:b6:51:43:9a:
2c:1f:7f:ee:10:55:27:9b:37:96:5b:72:61:98:33:c5:e1:e8:
ec:1c:13:a6:bb:74:67:4b:0e:b5:c8:87:2f:9f:1e:d1:9a:19:
98:f1:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:50 2026 by rpki-client