Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142931.roa
File: AS142931.roa (raw, json)
Hash identifier: hFtCdA5HRP/EWpYoTNSA/G0IKUbsms9aiNYZ9pgC3wM=
Subject key identifier: EB:A4:9F:E5:E0:DB:5A:E2:A5:0C:D3:D5:60:CA:BA:B0:01:66:67:3B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D221AD341C8AB01398574BC2744C346B0A3587C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142931.roa
Signing time: Tue 26 May 2026 06:30:58 +0000
ROA not before: Tue 26 May 2026 06:25:58 +0000
ROA not after: Tue 25 May 2027 06:30:58 +0000
asID: 142931
IP address blocks: 240a:a119::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:22:1a:d3:41:c8:ab:01:39:85:74:bc:27:44:c3:46:b0:a3:58:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:58 2026 GMT
Not After : May 25 06:30:58 2027 GMT
Subject: CN=EBA49FE5E0DB5AE2A50CD3D560CABAB00166673B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:11:f4:f2:c8:4c:ae:94:14:11:2f:50:a1:43:
2a:8f:1a:bd:92:0f:7e:7e:b0:16:aa:42:5b:28:b6:
dc:17:82:f0:f0:3a:83:7f:ad:a7:8a:ec:a9:23:24:
33:1c:c2:d0:a4:53:1b:18:4c:d2:96:20:65:99:e5:
72:6e:29:0e:0d:33:d4:08:76:10:77:55:b9:46:82:
6f:fc:6e:76:9e:b5:6d:bd:30:86:d2:58:f5:8a:b1:
78:38:a9:f3:18:1b:0d:c2:95:30:38:5c:11:28:4a:
c6:54:7e:de:e7:c7:51:b3:1e:98:ef:99:76:ba:28:
03:21:72:7d:4a:f2:45:74:e2:40:84:80:42:20:6e:
c6:5f:28:a5:6a:b1:36:c7:89:5a:ff:60:fe:2a:0b:
aa:49:c6:6a:c0:74:8b:ed:7c:25:72:0c:c5:31:e8:
f8:35:a8:71:03:31:37:49:ec:91:b9:8f:61:53:8f:
bb:8d:23:4d:96:8f:28:c7:d4:48:ce:7a:09:44:48:
12:ef:af:02:a2:17:d4:7c:69:1c:d3:f4:6a:ff:99:
ce:7c:13:36:1e:00:41:68:67:c4:b7:68:41:fd:ec:
b0:20:4d:00:d9:18:ca:5a:cc:4c:0f:f0:fe:e6:e6:
44:08:7a:fa:3e:b5:4b:68:79:23:c3:b7:3a:b5:2f:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A4:9F:E5:E0:DB:5A:E2:A5:0C:D3:D5:60:CA:BA:B0:01:66:67:3B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a119::/32
Signature Algorithm: sha256WithRSAEncryption
1a:8b:8c:33:ec:85:1a:53:8a:f2:ee:0a:35:60:21:0e:dc:ee:
ac:c4:82:35:62:ed:68:14:d0:81:45:8d:75:fa:dd:e6:2a:80:
ba:48:25:19:c9:b8:d8:f3:e7:bd:0e:e8:da:68:ea:a6:f6:9a:
df:22:00:18:b5:a4:b9:2b:1a:65:ec:b6:49:53:f3:a0:16:a3:
3f:f6:d9:da:2a:ee:5d:56:d8:1d:3c:50:64:e7:67:33:b7:6d:
de:cc:c2:c4:bb:07:d9:58:08:92:98:3b:57:0f:60:b9:41:ec:
b3:ad:37:76:6e:3b:63:63:15:e2:ce:f7:da:48:e6:2f:5a:c4:
3a:84:a8:c0:cc:ff:47:cb:a4:c8:36:f0:e2:ba:7a:28:88:d1:
71:03:85:a4:f8:25:79:62:a3:38:18:90:7e:93:90:3d:c0:53:
ae:28:fb:22:19:04:c7:7f:f0:ff:28:5e:48:c5:f3:10:66:cf:
e7:ad:e7:45:dc:cc:93:72:12:c0:dc:a6:4a:d1:be:b8:a8:ec:
cd:2f:6b:c6:1c:c9:75:55:ba:0f:ea:0f:aa:3f:d4:7f:2c:5b:
12:3f:69:21:17:c3:85:c1:27:cf:df:73:a7:d9:41:c1:aa:d0:
01:f9:f8:b0:ad:c3:8d:b9:02:0e:49:33:28:cc:d0:d1:c7:49:
a9:3d:bb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:48 2026 by rpki-client