Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142926.roa
File: AS142926.roa (raw, json)
Hash identifier: VKXVEfXSaJc4H5lbOk/ERviZsfnlhSoJ11SWbewQ93Y=
Subject key identifier: 8A:42:3A:FB:4F:30:98:DC:03:CB:8E:15:7F:FE:2D:EE:0C:BB:4F:BB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7D8DC99FDA011429ABBBDEA42493B6FDB89B7F66
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142926.roa
Signing time: Tue 26 May 2026 02:35:02 +0000
ROA not before: Tue 26 May 2026 02:30:02 +0000
ROA not after: Tue 25 May 2027 02:35:02 +0000
asID: 142926
IP address blocks: 240a:a114::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:8d:c9:9f:da:01:14:29:ab:bb:de:a4:24:93:b6:fd:b8:9b:7f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:02 2026 GMT
Not After : May 25 02:35:02 2027 GMT
Subject: CN=8A423AFB4F3098DC03CB8E157FFE2DEE0CBB4FBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:9f:c7:b4:3f:15:5b:b3:82:71:1f:d8:03:
67:91:62:4f:f0:7b:11:b4:9c:42:34:59:81:8c:45:
fe:41:fb:67:85:83:0f:36:21:91:4a:ba:8f:58:6e:
10:5c:f0:7e:86:16:3d:31:f9:03:40:55:2e:16:f8:
f0:4e:e4:3b:12:de:9e:51:94:c5:4d:03:90:e9:23:
a8:c2:c9:6a:44:57:9f:2d:e8:88:09:7d:1c:dd:2f:
dd:20:04:88:5a:7b:54:1e:50:cf:9d:e3:61:27:70:
1a:d2:f5:1a:94:3c:31:eb:ab:0d:bf:6c:23:92:06:
86:8d:c1:2d:b6:7d:62:10:eb:92:77:e0:cc:a6:1b:
29:a8:8e:0e:76:4d:c8:ef:39:b0:b7:74:05:c9:ad:
a0:b4:a5:01:b7:15:3c:b2:6b:2c:2f:b7:0a:bf:50:
cf:8c:3d:0c:c8:d9:d0:7c:09:07:9e:00:4e:85:6a:
35:81:84:91:4a:32:df:4f:b8:ad:cc:08:fa:3a:72:
ba:70:2d:53:13:29:94:12:55:b2:70:1d:48:44:f5:
2e:ed:74:a7:42:6e:9f:8c:5f:78:87:5d:b9:b0:71:
d0:22:02:6e:d5:bf:a2:e3:74:3f:54:31:9f:ee:17:
2f:4f:eb:02:bf:15:2d:69:8b:84:e0:c3:df:7b:30:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:42:3A:FB:4F:30:98:DC:03:CB:8E:15:7F:FE:2D:EE:0C:BB:4F:BB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142926.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a114::/32
Signature Algorithm: sha256WithRSAEncryption
6b:83:87:2a:a6:8e:8e:4e:5e:70:db:b0:0b:e9:06:c2:e6:ce:
ce:d9:4f:4f:e9:58:de:33:37:d4:84:10:fb:1b:78:cc:f6:12:
7a:fe:35:51:3e:e8:a8:e5:43:16:db:36:52:ba:54:50:c2:a5:
ac:17:c0:a1:46:0c:be:69:23:39:1a:08:0b:e6:f4:99:0b:e6:
1a:65:e7:ab:95:d1:9a:c1:ea:8e:f6:52:80:cc:1a:ab:ae:e6:
51:a3:ca:6e:93:5f:98:ab:dc:de:3b:de:47:78:40:ff:b6:f5:
ef:3c:29:cd:ea:37:b9:de:f9:61:cb:1d:b0:82:f7:c1:28:ad:
fe:86:02:65:43:17:4a:d4:b5:37:13:01:59:eb:d4:90:eb:dc:
40:d6:81:c5:dd:ed:8e:56:83:7a:86:d7:32:e0:3a:68:91:d2:
23:ad:10:b4:c9:49:ec:08:23:0e:81:08:87:3e:d3:a6:11:b4:
3c:51:8a:72:b7:02:db:cd:90:41:d6:86:b3:e8:92:08:f2:90:
ad:48:b7:17:b4:87:19:e2:de:2e:d9:f9:36:e0:1b:b4:1e:b8:
8c:d2:b1:d6:09:04:94:3d:87:c7:0a:d0:1f:8c:61:23:b4:8d:
db:5f:d6:26:3c:97:a2:f9:a4:d3:af:fc:8e:49:00:11:e0:b8:
b6:44:49:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:06 2026 by rpki-client