Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142934.roa
File: AS142934.roa (raw, json)
Hash identifier: jI7S5mHX59ubY1RISy+JCaaT9W5oaLqqoC/mVRxJhhg=
Subject key identifier: 0D:92:16:EF:95:E7:2D:E8:41:57:26:2F:EB:28:50:B5:18:7D:5F:6A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 176179A21D246DDD7414485B48D4B75B530BB1C1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142934.roa
Signing time: Mon 25 May 2026 02:22:36 +0000
ROA not before: Mon 25 May 2026 02:17:36 +0000
ROA not after: Mon 24 May 2027 02:22:36 +0000
asID: 142934
IP address blocks: 240a:a11c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:61:79:a2:1d:24:6d:dd:74:14:48:5b:48:d4:b7:5b:53:0b:b1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:36 2026 GMT
Not After : May 24 02:22:36 2027 GMT
Subject: CN=0D9216EF95E72DE84157262FEB2850B5187D5F6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:2b:d4:19:1e:6c:76:7d:c2:48:39:a1:8a:
c3:13:a2:6a:94:d1:bd:4c:56:e0:75:ac:a3:86:19:
5c:72:df:2e:c6:c6:26:f0:1f:0e:3a:82:a5:30:e4:
dd:08:5c:c1:2e:bc:31:00:99:7d:8e:cf:92:61:8d:
c3:b0:cc:6a:4f:82:e7:82:3e:7c:88:23:4f:8a:d5:
d7:33:42:13:74:66:f7:ee:9f:f0:07:d5:73:77:15:
50:7c:71:fc:f8:77:9f:73:73:04:34:dd:cc:e8:cf:
2b:cd:18:85:41:7e:26:b2:dd:b0:37:00:c3:e2:e4:
10:4d:df:90:d8:83:33:4a:eb:43:c5:1b:ea:0e:34:
f3:ed:ae:37:e2:e6:52:2e:a5:2e:4b:8d:0b:9c:d9:
85:74:06:27:e2:5f:d5:21:0a:0f:cc:6f:c3:bf:2b:
4d:cc:74:cd:22:c5:c5:17:3d:5e:c6:18:87:6e:2b:
cb:56:5a:8e:5a:66:26:fe:6f:a0:2f:23:76:be:e3:
3c:34:5e:f5:be:36:cc:cd:44:f4:6f:bf:c8:b0:87:
0f:47:09:23:4d:33:27:81:e7:82:ad:b8:d1:ad:ef:
d5:d1:d9:7b:3c:55:19:7c:65:f2:fd:a0:d8:16:2f:
05:fd:75:40:d7:31:c6:3d:51:56:74:6c:7b:bc:24:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:92:16:EF:95:E7:2D:E8:41:57:26:2F:EB:28:50:B5:18:7D:5F:6A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a11c::/32
Signature Algorithm: sha256WithRSAEncryption
82:ec:e4:5c:1a:68:c9:3b:91:20:6d:4b:2b:b2:6c:67:40:15:
71:d8:98:13:5e:cc:8b:b2:73:44:59:b0:45:d7:24:1a:38:59:
5c:35:bf:5f:a9:ca:2b:74:22:57:56:00:d9:c6:55:56:fd:64:
49:80:3b:27:f2:1a:5d:c0:55:8f:e7:f2:79:56:90:5b:54:32:
27:8e:9d:f6:53:52:39:98:1b:cb:a4:9b:c0:f7:54:11:bb:62:
5b:53:df:5a:8b:40:28:db:bb:49:b3:4b:8c:d8:d8:6c:c5:1a:
4f:ce:86:d3:34:38:19:7c:2b:da:fc:26:5c:01:b1:2e:3d:9b:
dd:2e:9f:76:3f:9b:9d:6e:06:1e:a0:26:ef:74:d4:c7:2a:88:
7e:d5:cc:14:1a:56:89:4b:aa:7c:9d:df:c9:c3:64:49:13:a1:
c1:98:3c:8f:05:bf:e7:a0:2b:a9:1d:fe:9f:c5:8b:2e:3e:ae:
38:f8:0d:9c:99:1b:9e:d0:70:62:07:12:17:86:57:0e:b8:93:
3c:51:43:29:95:04:a2:e1:ed:e8:3f:d3:3e:08:77:c4:a4:77:
8d:8f:d7:60:96:05:d7:96:a4:78:66:34:7e:22:2d:cf:13:d7:
1e:4a:87:84:b9:6d:07:e1:b0:62:6c:d5:7c:7f:b6:eb:84:f9:
b4:ee:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:41 2026 by rpki-client