Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142942.roa
File: AS142942.roa (raw, json)
Hash identifier: 3aJYJtsrTde04k100/KfroqB2aSa47zULS6ZmRpUavA=
Subject key identifier: ED:9F:CC:A4:44:BD:A5:3C:E0:CB:D3:16:2B:39:96:75:E2:C0:EF:2C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5FA9D323384E66E670D3EED0D0A00B1CB837A9DA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142942.roa
Signing time: Fri 22 May 2026 06:45:57 +0000
ROA not before: Fri 22 May 2026 06:40:57 +0000
ROA not after: Fri 21 May 2027 06:45:57 +0000
asID: 142942
IP address blocks: 240a:a124::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a9:d3:23:38:4e:66:e6:70:d3:ee:d0:d0:a0:0b:1c:b8:37:a9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:40:57 2026 GMT
Not After : May 21 06:45:57 2027 GMT
Subject: CN=ED9FCCA444BDA53CE0CBD3162B399675E2C0EF2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d8:db:89:f6:d1:e2:24:20:cb:ba:f6:c4:5f:
c4:33:e4:59:58:62:8c:82:49:31:c8:96:e2:a1:30:
8f:ab:a4:5a:48:ff:dd:15:34:ed:c5:59:c7:16:5f:
9a:53:0e:b4:a5:53:9e:57:64:86:08:55:ae:2f:be:
ff:1d:93:cd:9e:01:91:33:02:00:ad:a4:6a:0d:53:
ac:c0:d8:2e:a4:9f:2a:55:d5:f8:80:f0:87:83:e6:
ac:a4:40:4c:16:87:2a:ee:28:9e:9d:fc:1c:50:a9:
d7:a7:41:54:6e:37:14:13:66:aa:98:bc:fe:5b:a8:
02:3b:08:02:78:02:92:1a:0a:1b:f0:30:c8:6c:57:
35:c8:a7:3f:c0:66:19:73:96:8a:18:6f:fe:c0:76:
a2:04:30:f7:ad:77:c8:42:60:0b:c3:9a:ce:10:b7:
23:80:e4:c5:db:b3:97:05:fc:e0:8c:ae:1d:2a:d6:
5f:77:f4:91:c8:de:8c:68:ef:e1:5f:88:40:23:af:
e9:54:82:62:72:8f:c8:34:0f:96:28:9b:6f:5d:d8:
1d:97:ad:0b:5e:03:28:0b:0c:d3:eb:90:92:08:e1:
47:8c:52:bd:9f:e6:e0:ee:3c:ed:89:33:19:6a:af:
1d:c8:ac:b6:87:bb:ab:86:d4:3a:18:4f:1e:78:36:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9F:CC:A4:44:BD:A5:3C:E0:CB:D3:16:2B:39:96:75:E2:C0:EF:2C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a124::/32
Signature Algorithm: sha256WithRSAEncryption
47:17:c3:85:e5:d5:a9:01:79:67:e3:69:17:1a:30:1b:e0:c4:
4f:bc:42:62:dd:35:48:63:13:c5:91:c8:da:b0:43:7b:d1:8b:
02:4e:b9:97:e9:ed:70:04:20:dd:cd:4b:6d:39:ba:7d:e7:80:
11:ad:67:4f:e5:33:63:b3:5d:a2:5a:4f:b2:37:d9:de:f6:0e:
e5:24:66:f1:65:8a:54:3c:ed:aa:fe:da:c2:26:0c:e7:42:49:
bf:51:96:07:ae:33:6f:6f:73:e7:bf:87:5e:0a:5c:f0:ab:c4:
45:b9:c6:93:47:3f:11:c9:fe:95:f6:29:15:2b:5e:a7:90:3e:
f2:77:e1:ea:e5:58:95:d5:9b:5d:27:da:a6:e0:fe:1c:41:97:
ff:5a:d9:96:4a:99:59:b0:c0:2f:a0:24:1e:ba:2f:17:7a:b6:
d1:9a:2c:b6:a6:1d:9b:a6:b0:d7:00:25:1b:58:1c:c4:7c:ad:
00:a1:6d:1c:70:d9:1c:21:a2:67:1a:f7:90:3f:06:0c:e1:42:
18:ed:9e:99:79:ba:de:5c:f8:a4:d0:3e:5f:b7:dc:6d:25:92:
34:ed:d1:f4:68:53:97:3f:4f:88:ee:04:16:4d:ec:69:70:84:
47:ac:af:ac:05:80:b8:65:0e:f3:e5:f7:cd:07:6d:4b:77:bf:
6e:fc:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:54 2026 by rpki-client