Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142929.roa
File: AS142929.roa (raw, json)
Hash identifier: CxObHf7VjQQsnW9SxRREaocPLvpnH+2ySj+1MrTOUgk=
Subject key identifier: FB:1C:DE:EC:C9:CD:80:AB:7D:8A:DB:0E:F1:05:6E:7C:B2:E1:7E:46
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 03D6B55355944F4B4163B1FF29862680B0BE34D7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142929.roa
Signing time: Mon 25 May 2026 03:19:09 +0000
ROA not before: Mon 25 May 2026 03:14:09 +0000
ROA not after: Mon 24 May 2027 03:19:09 +0000
asID: 142929
IP address blocks: 240a:a117::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d6:b5:53:55:94:4f:4b:41:63:b1:ff:29:86:26:80:b0:be:34:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:09 2026 GMT
Not After : May 24 03:19:09 2027 GMT
Subject: CN=FB1CDEECC9CD80AB7D8ADB0EF1056E7CB2E17E46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:12:cf:1f:94:f1:8d:0a:b1:d3:6b:43:f7:19:
b0:79:b4:2d:c7:2a:ad:01:17:c6:1c:52:06:53:42:
24:b6:ff:47:77:e0:8a:8f:32:69:75:6e:85:d7:72:
8e:6f:d3:a1:6a:49:68:d3:81:cb:ea:74:c5:b6:a5:
c5:3e:a9:14:c6:79:09:a2:f8:eb:26:50:d5:d8:96:
1c:25:36:f5:50:e4:74:6b:74:f5:8c:2e:da:42:ad:
da:0a:0b:90:6c:16:62:89:7b:e3:3c:64:ce:df:a0:
6e:58:56:7c:aa:e4:9a:7b:a3:32:7b:39:b3:d9:78:
46:6a:6b:7f:8d:c3:45:7c:76:2a:98:85:ff:c7:49:
2a:25:ac:dd:16:06:bf:88:7a:be:9b:16:12:4c:f2:
37:b8:73:5b:8a:03:ae:56:56:84:7e:14:5c:28:4d:
b0:f1:39:0f:00:12:8f:87:0a:2e:c0:ee:c6:e6:d9:
6b:24:ac:99:5b:6d:fb:22:85:27:34:43:27:cf:de:
8d:55:76:16:27:4b:56:c3:86:5e:9a:42:cb:64:5b:
cb:78:00:30:a9:f7:79:b9:23:0d:41:f0:ac:e0:b3:
8b:21:83:22:fd:7e:d1:40:ff:d5:c0:17:60:01:82:
0a:bd:28:81:fc:12:d4:6d:b0:71:7f:b2:66:1a:ee:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1C:DE:EC:C9:CD:80:AB:7D:8A:DB:0E:F1:05:6E:7C:B2:E1:7E:46
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142929.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a117::/32
Signature Algorithm: sha256WithRSAEncryption
71:4d:09:e6:34:8f:2e:e9:54:85:a2:88:86:e8:48:66:d7:bb:
e4:75:6f:99:46:32:9c:0b:d6:f9:07:aa:9d:38:b8:df:5f:5c:
6d:48:bd:2f:cf:86:b5:f5:b5:7d:1e:df:3d:97:78:04:62:d7:
99:8e:7d:eb:63:95:00:e9:ee:53:2c:76:2e:ac:69:e1:ab:17:
40:3b:c4:44:f6:e8:0d:0c:39:03:68:d0:b2:26:cb:58:77:73:
b2:b7:27:ca:51:6d:20:83:f4:06:4e:b8:51:0d:4d:d4:32:23:
e5:49:d9:7b:22:ed:ae:ad:47:ad:45:aa:21:f7:85:61:17:57:
27:72:50:ac:19:6e:31:f9:04:d4:0a:e2:47:79:a8:c4:80:3d:
fc:12:83:21:56:56:e9:ff:48:c6:c2:2d:df:e6:11:a0:35:36:
17:2f:1c:e6:58:c7:da:c8:79:4e:a0:63:a4:76:3a:36:5a:7a:
a5:cc:d8:5c:09:92:f1:77:04:86:48:91:9d:ad:39:0b:3c:57:
fc:8a:01:3c:c7:93:61:1b:20:32:4f:38:ca:c3:c8:5a:4d:5b:
f2:32:d2:a9:51:f7:ef:44:ac:55:21:07:33:2f:ce:40:ac:ce:
86:57:aa:e0:d0:76:e8:41:fc:35:04:f2:35:5e:42:51:0b:93:
56:66:29:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:53 2026 by rpki-client