Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142948.roa
File: AS142948.roa (raw, json)
Hash identifier: 4gyZAejNMBwYExcw9LJ/rstpWt72g2xRj4tYOpMM/PE=
Subject key identifier: 57:5E:82:61:3F:3E:A8:93:B4:4D:74:86:A3:0B:49:C6:16:8D:CD:54
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 75A669BED5BE39619DC14907805AF9A9BA7DB08D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142948.roa
Signing time: Fri 22 May 2026 06:27:46 +0000
ROA not before: Fri 22 May 2026 06:22:46 +0000
ROA not after: Fri 21 May 2027 06:27:46 +0000
asID: 142948
IP address blocks: 240a:a12a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a6:69:be:d5:be:39:61:9d:c1:49:07:80:5a:f9:a9:ba:7d:b0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:46 2026 GMT
Not After : May 21 06:27:46 2027 GMT
Subject: CN=575E82613F3EA893B44D7486A30B49C6168DCD54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:6b:07:90:95:d0:08:f0:c5:cd:db:64:c1:
fc:71:93:2c:3c:5f:7e:de:5a:65:53:06:ee:d2:bf:
b3:80:07:19:a9:69:17:0a:1c:e1:d4:40:b8:fe:4e:
a0:76:97:45:4d:6a:74:0a:6e:df:ad:22:0f:04:f2:
d7:08:41:f8:19:da:f0:4d:8f:d4:30:0e:d3:fe:ed:
aa:a1:43:8a:b5:6a:65:cb:28:ac:e8:ad:b3:ae:61:
96:cd:de:c8:0a:7c:39:5c:e8:36:73:d4:b5:a2:80:
cd:6d:b6:05:31:87:23:6b:28:6c:fb:f9:bb:54:3d:
d6:87:b4:25:7e:b7:8b:e9:7a:db:14:00:4e:0f:48:
37:b1:e8:6d:90:47:d9:7e:c2:f3:68:aa:c8:5d:8e:
c6:5b:53:bc:bb:d8:f0:3c:a1:79:1d:5e:14:5f:e5:
d6:33:08:99:30:87:87:96:25:e2:6e:b6:27:74:fe:
c2:0f:67:77:83:6b:33:61:28:eb:b1:71:ef:d7:b4:
dc:07:21:5e:00:47:c6:5e:2c:31:71:ba:ea:07:92:
b2:30:3f:0b:85:1d:13:50:9c:a1:9e:2e:d1:0e:a8:
0d:e1:88:8f:aa:eb:30:85:83:91:fe:63:46:9c:ca:
4d:27:df:de:83:90:86:1f:bf:4b:e6:4b:1c:25:d9:
f2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5E:82:61:3F:3E:A8:93:B4:4D:74:86:A3:0B:49:C6:16:8D:CD:54
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142948.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a12a::/32
Signature Algorithm: sha256WithRSAEncryption
2c:85:94:39:ae:aa:42:e0:33:46:26:4f:4b:63:32:a6:fd:94:
e0:d8:86:24:4d:c5:2b:e1:67:c5:39:f7:83:49:99:ac:0d:b2:
33:8d:65:b5:7c:af:69:0c:5e:67:63:13:ea:c5:f5:d8:2f:3b:
2e:d7:87:d4:25:d2:31:9e:c4:45:c0:66:fc:be:88:1c:c1:63:
88:f5:06:7f:77:87:42:a6:59:f3:10:b5:f2:18:37:8b:11:61:
5b:ad:82:2e:25:7b:11:8c:f8:85:8d:25:25:a5:aa:40:7f:8d:
b9:7c:38:de:0a:19:6a:79:c6:71:9e:98:24:14:9d:3c:fe:7b:
98:0f:fb:1d:65:9f:d8:fe:0f:f8:3e:e7:8d:08:10:97:96:1d:
1c:43:e2:01:d6:06:f7:3a:ae:4d:40:57:4b:02:e2:2d:16:d8:
d8:73:e2:ed:86:81:dd:f3:97:32:30:5a:09:be:2f:ae:26:ff:
b0:f7:95:c4:f7:49:6e:87:22:de:89:26:78:81:e2:7e:96:07:
6e:f0:c0:7f:bb:43:45:68:07:5a:0a:6d:90:46:bf:f9:41:b9:
02:de:75:24:f5:e1:69:00:35:2c:c4:3c:20:30:5e:4c:78:ea:
38:15:d2:1e:0d:fa:ec:e8:d9:76:d2:47:c0:93:8a:3c:47:6f:
88:86:87:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:42 2026 by rpki-client