Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142920.roa
File: AS142920.roa (raw, json)
Hash identifier: qfqJhvSEpH5mUkqK/AsHKnfzXBKCifkKUq/jsKEt66s=
Subject key identifier: 4C:AF:B8:E3:26:62:A0:0B:40:28:FA:A6:F3:D7:5F:A1:3B:5A:6F:27
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 70D575D791D8B8BFDEDBDCE8F2E145DDFA87B85E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142920.roa
Signing time: Fri 22 May 2026 04:27:15 +0000
ROA not before: Fri 22 May 2026 04:22:15 +0000
ROA not after: Fri 21 May 2027 04:27:15 +0000
asID: 142920
IP address blocks: 240a:a10e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d5:75:d7:91:d8:b8:bf:de:db:dc:e8:f2:e1:45:dd:fa:87:b8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:15 2026 GMT
Not After : May 21 04:27:15 2027 GMT
Subject: CN=4CAFB8E32662A00B4028FAA6F3D75FA13B5A6F27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d4:0e:9a:7c:27:bd:36:b6:b6:93:73:bb:1e:
0e:a6:49:51:f8:e9:73:e3:47:ca:16:af:36:55:ae:
e5:1b:40:90:c0:85:e2:85:07:58:82:6a:90:84:63:
0f:da:01:32:53:bf:52:f1:b7:ab:96:80:13:7d:05:
cb:b5:29:68:a0:66:b5:f6:3e:ae:e9:3a:a2:58:25:
c8:9e:f2:1b:83:d4:a7:cb:33:a2:d2:73:30:b4:12:
3d:96:23:8e:c0:ed:9b:79:88:51:87:5f:ed:54:dd:
b7:2a:81:58:f7:0c:76:1c:7c:3c:47:ca:4c:4f:70:
0e:9b:a8:c0:f5:4d:c4:51:03:b1:83:8d:2d:0e:3d:
9e:23:0f:a2:d7:60:c0:8f:ab:b1:8a:5b:5c:ac:21:
c4:6b:7a:23:79:63:07:d1:b2:3a:4b:2f:67:fb:f2:
53:23:46:7e:53:2a:af:18:b6:27:0c:93:97:d0:5e:
a8:f8:3e:6b:93:33:d6:f4:ef:7c:f0:57:aa:42:d7:
06:b3:36:6d:1d:dc:83:ac:f1:60:cf:a4:df:e4:97:
d8:31:bf:62:40:a8:23:e7:e4:a2:30:11:0d:d6:4b:
06:a0:bd:ae:7a:a3:01:dc:0e:0f:d8:0b:12:77:61:
a5:40:51:eb:8a:fc:26:8f:d7:9f:19:58:95:f3:00:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AF:B8:E3:26:62:A0:0B:40:28:FA:A6:F3:D7:5F:A1:3B:5A:6F:27
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142920.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a10e::/32
Signature Algorithm: sha256WithRSAEncryption
23:5c:f8:88:c2:ac:88:9e:23:7f:41:30:d6:c5:d3:5f:ff:46:
c5:53:b6:0d:7f:8b:7a:4a:13:6f:95:3d:6a:c2:e4:95:04:5a:
fa:c6:71:9f:8a:5b:55:1e:e4:65:d1:91:0a:81:4c:c4:4b:b9:
8f:55:bc:62:43:67:a9:7a:a9:3e:5a:fe:5a:00:63:24:42:12:
d9:ca:6c:c4:cc:cf:08:06:ce:c7:1d:a9:ad:b6:32:c1:75:fb:
00:8d:2d:33:78:36:db:f0:89:34:14:21:1a:28:2c:61:84:29:
34:2d:ca:5c:bb:f4:a5:4b:7f:b7:18:8d:f9:fb:50:e9:be:b6:
90:c9:1c:1a:f0:ee:ee:a3:9d:22:9d:38:4d:d3:5f:bf:10:70:
32:83:71:1b:36:7d:d5:12:43:e0:f2:a7:8c:91:27:c8:42:9e:
fb:8b:5f:8f:91:5a:5b:5f:2c:f1:d1:7b:09:15:50:bf:4d:3f:
3a:2f:28:f2:f0:e5:9c:9b:46:10:e0:58:f7:f8:52:ba:e5:b7:
b0:17:de:9f:6f:39:6b:8d:0c:b3:80:0e:8c:fb:32:cc:9f:44:
d8:ca:0e:e1:45:73:4b:fa:f7:95:58:95:d7:68:fb:be:1e:f9:
7d:6c:b8:53:a3:76:b2:e4:5a:a3:42:ec:68:92:e1:1d:d8:6b:
8f:ff:38:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:51 2026 by rpki-client