Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142928.roa
File: AS142928.roa (raw, json)
Hash identifier: 6FP0XhIN0gYUydwemUvUTAKmyqgufYLAyL56ZPtmoj4=
Subject key identifier: C2:B1:C3:88:14:69:C4:3F:BC:1F:12:8C:01:4C:2C:5C:89:6B:F2:F6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4575029E46F360D241A5645163F8D47C2FE96E3A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142928.roa
Signing time: Fri 22 May 2026 04:08:18 +0000
ROA not before: Fri 22 May 2026 04:03:18 +0000
ROA not after: Fri 21 May 2027 04:08:18 +0000
asID: 142928
IP address blocks: 240a:a116::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:75:02:9e:46:f3:60:d2:41:a5:64:51:63:f8:d4:7c:2f:e9:6e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:18 2026 GMT
Not After : May 21 04:08:18 2027 GMT
Subject: CN=C2B1C3881469C43FBC1F128C014C2C5C896BF2F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:18:9f:2a:1d:29:bf:14:73:c0:1c:93:c7:de:
03:98:18:14:88:af:73:cc:84:42:ed:60:08:be:e9:
60:89:14:7e:03:8b:ab:25:9e:f4:b4:23:11:83:41:
55:74:95:e4:2b:81:51:70:82:f2:9e:7c:89:88:6f:
48:94:38:59:b9:9d:f1:0d:04:65:72:af:58:29:40:
ee:99:e3:db:0f:e6:bf:d9:9e:ae:aa:8d:8b:61:43:
72:24:0f:2d:cf:50:d2:89:5e:d9:e7:28:0f:33:10:
ff:a5:68:e9:83:46:b7:f2:67:76:55:41:43:2a:f7:
78:0c:e5:f4:8d:77:d3:4e:69:4e:66:54:eb:66:0a:
05:df:12:52:aa:37:cf:79:2e:c3:30:1d:09:9c:8b:
9d:f5:d1:c6:53:18:33:d2:fc:2b:94:e7:92:c1:63:
26:26:91:83:ec:c6:18:03:9c:17:51:dc:ad:4a:57:
25:5a:d7:53:b8:8c:31:13:17:e7:61:ff:13:42:a7:
f5:5c:d0:ac:e0:87:67:10:a4:a5:bb:95:7e:98:58:
4f:d6:e8:b2:b8:fd:35:45:60:19:5a:18:fe:37:5d:
5e:47:78:8d:22:09:c5:45:10:dd:a3:56:ef:ce:3b:
12:62:86:4f:cf:b6:c0:8e:73:c1:a1:6b:3d:0f:9f:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:C3:88:14:69:C4:3F:BC:1F:12:8C:01:4C:2C:5C:89:6B:F2:F6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142928.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a116::/32
Signature Algorithm: sha256WithRSAEncryption
04:b4:e7:70:93:66:4e:0c:39:96:05:32:f8:fc:de:94:ef:21:
9e:88:67:48:db:cc:9f:48:f7:85:77:e4:b4:ac:bd:89:c6:fc:
a6:9a:0e:2e:61:32:32:96:8c:96:55:f7:bc:13:ad:65:0f:97:
d9:af:09:0c:4a:74:74:81:3c:64:a0:9d:ac:58:c9:97:50:19:
4a:50:98:ca:fc:a5:30:bb:08:93:96:43:cf:9f:d6:c4:64:4e:
5e:cf:da:96:2b:fe:3f:35:cb:66:36:57:84:9b:22:3c:a2:bf:
9e:58:c8:c1:fa:21:23:91:14:d9:0b:11:8a:6f:be:e9:4b:1c:
bd:24:53:52:3c:c3:f4:cb:ca:30:e2:88:99:72:9a:63:2c:de:
8c:b5:30:d2:10:1b:c4:7c:f3:3d:f1:92:f0:0d:68:9a:ea:34:
ac:93:fb:32:96:5a:a0:fe:9a:ee:ec:6a:eb:ed:d3:da:c7:07:
28:70:49:48:f8:f5:f8:3f:a0:f4:e8:9a:45:7e:16:70:88:27:
22:31:47:b8:88:cf:3d:ce:1d:87:ae:08:b2:61:11:ac:2e:3a:
86:63:da:62:90:7b:34:aa:cc:60:49:3e:f8:01:8f:4f:01:9d:
a8:b0:f3:1b:c5:08:8a:d1:26:f8:13:b4:9f:71:ec:22:de:6f:
2e:25:7f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:55 2026 by rpki-client