Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142941.roa
File: AS142941.roa (raw, json)
Hash identifier: FKPdWFJr0+3s62M9ek5Dv95mLHUiNnc7vHatKGHhOug=
Subject key identifier: 41:8A:D7:5F:18:94:8D:75:EA:14:12:CE:6A:93:63:E4:52:E3:A3:DD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 36FA8470BF424C5FF762A71915230D4DEEEC05A9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142941.roa
Signing time: Mon 25 May 2026 01:20:12 +0000
ROA not before: Mon 25 May 2026 01:15:12 +0000
ROA not after: Mon 24 May 2027 01:20:12 +0000
asID: 142941
IP address blocks: 240a:a123::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:fa:84:70:bf:42:4c:5f:f7:62:a7:19:15:23:0d:4d:ee:ec:05:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:12 2026 GMT
Not After : May 24 01:20:12 2027 GMT
Subject: CN=418AD75F18948D75EA1412CE6A9363E452E3A3DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:50:e5:fa:6f:d6:77:36:35:e0:91:95:9f:
8c:20:9e:70:cb:ea:ab:7e:7d:e9:33:1f:a0:80:50:
41:1e:94:47:ad:76:dc:4f:21:07:7b:d1:c7:d1:7c:
2f:05:6a:01:61:2d:e0:65:09:f4:77:22:df:9a:2c:
76:19:a7:5f:0d:a6:a9:0b:23:29:e1:96:2e:98:a7:
86:fb:93:1b:d8:85:75:57:d9:c8:5e:5c:51:9c:4f:
6d:ef:d1:20:6b:6b:cd:df:24:93:d7:5e:d5:c8:99:
45:1c:74:f6:ec:45:29:a5:cc:a9:f3:58:12:64:3b:
41:42:62:33:86:69:47:9c:bc:cd:51:3f:ec:a6:0f:
0f:f0:5e:cb:c6:dd:09:d5:38:09:d1:43:2e:1c:ec:
a5:89:cb:34:ce:82:4f:44:c7:d1:f3:3f:76:bd:57:
83:d3:09:47:6d:2b:1a:d9:e0:ef:5a:b0:7a:2d:f9:
fb:35:ca:ce:cc:b2:13:84:72:c1:37:21:f7:c7:f1:
e7:c6:53:9d:e1:f0:e6:82:22:00:95:d1:44:12:59:
29:d5:84:58:73:bd:ee:16:e4:55:8d:10:71:0d:ab:
d7:d2:f0:f0:7f:03:fd:8f:7b:4d:8a:a6:f5:ad:5b:
22:63:7b:e4:64:d9:a3:89:9d:c8:6c:8c:c1:fa:39:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8A:D7:5F:18:94:8D:75:EA:14:12:CE:6A:93:63:E4:52:E3:A3:DD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a123::/32
Signature Algorithm: sha256WithRSAEncryption
15:f3:40:63:da:76:db:f7:4e:e6:a0:13:3a:d0:7f:1d:c9:da:
8f:03:7b:6f:02:cb:3f:97:48:b9:26:2f:30:07:e0:66:c5:70:
66:c4:9b:23:61:a2:6c:9a:75:54:a6:ee:3d:89:41:2d:66:7a:
0f:fb:72:b1:a2:96:cf:07:9e:cb:76:51:3b:07:cb:79:48:cf:
8c:30:99:8f:36:88:04:23:26:86:08:1f:17:ae:45:bb:b9:a0:
96:b2:19:f6:0d:c2:7c:38:39:db:96:0a:1d:ad:54:88:1d:bc:
60:30:8f:9b:ed:f8:0e:16:4d:5e:0f:44:65:1b:aa:00:aa:8c:
e6:cf:46:24:56:bf:4f:81:70:10:18:3b:92:08:16:55:ba:4a:
52:cb:b6:9d:72:a3:27:da:1e:6c:63:7e:f6:92:3e:a0:4d:8e:
98:24:e5:19:5b:ee:3c:a4:4e:40:2a:0f:8d:a0:9f:14:79:44:
3c:6e:6a:52:de:5b:d2:bc:0e:b8:5a:f3:f0:13:30:62:be:c5:
23:6c:bb:86:43:c2:40:fe:36:a5:fa:0f:48:4c:bb:b7:2f:b0:
52:3f:75:6b:41:c7:11:b3:89:78:3c:99:7d:b9:ce:d7:a8:dd:
b3:41:fc:bd:5f:5e:71:ca:34:b3:e7:d0:46:0c:7b:1a:7b:f5:
8e:ba:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:03 2026 by rpki-client