Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142949.roa
File: AS142949.roa (raw, json)
Hash identifier: km5k5GG4vckk6NQ7cuDjfNAVNnrkiWDngW5LUQTxauo=
Subject key identifier: 24:69:1D:6D:36:BD:4F:FA:2B:F7:17:97:02:42:F5:B2:8A:50:84:1D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6FC12EE063B1477F1BF248281CAD35EA37A17F18
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142949.roa
Signing time: Fri 22 May 2026 07:09:08 +0000
ROA not before: Fri 22 May 2026 07:04:08 +0000
ROA not after: Fri 21 May 2027 07:09:08 +0000
asID: 142949
IP address blocks: 240a:a12b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c1:2e:e0:63:b1:47:7f:1b:f2:48:28:1c:ad:35:ea:37:a1:7f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:08 2026 GMT
Not After : May 21 07:09:08 2027 GMT
Subject: CN=24691D6D36BD4FFA2BF717970242F5B28A50841D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:d9:c4:03:e8:d7:63:25:23:d9:0d:ce:08:
4a:24:5d:07:cf:22:29:03:71:a5:b8:cb:5f:99:54:
66:83:26:3e:a4:5b:a9:68:51:61:77:f9:e5:ba:49:
f3:59:eb:4d:a3:0f:b9:8a:ee:56:e7:e1:5f:6b:ab:
c5:9d:0d:83:a9:93:5e:2d:0f:fd:9a:c6:f4:32:23:
7e:30:68:3e:f4:78:74:29:26:17:6e:ec:2e:fa:9c:
4a:18:cf:3d:d7:c4:56:0c:cc:48:64:15:16:bf:c9:
3e:2d:95:36:23:09:5e:1d:e9:37:61:2e:a5:e6:a0:
48:11:ec:77:5c:86:6d:38:1b:16:c9:6b:45:a7:75:
f1:a0:fd:6b:d9:3d:a6:e4:8e:52:ce:dc:4a:2b:c4:
af:21:ff:4c:63:fe:e4:2d:a0:c6:68:3c:91:e5:93:
f4:73:08:e2:18:b7:d8:5e:d3:c9:62:ab:30:bc:f0:
f1:3e:b9:9b:19:da:f5:e2:36:fa:9a:7d:42:e5:e1:
3f:34:1a:e0:0c:39:75:0e:01:78:fd:af:21:0e:19:
05:0b:d4:ab:d7:88:98:2e:c7:07:21:d2:67:d5:1d:
66:6c:82:43:a0:bc:99:97:25:09:69:6b:6f:54:7d:
7b:56:c0:db:c1:5e:34:31:75:42:df:40:3a:55:fd:
5a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:69:1D:6D:36:BD:4F:FA:2B:F7:17:97:02:42:F5:B2:8A:50:84:1D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a12b::/32
Signature Algorithm: sha256WithRSAEncryption
3e:df:dc:dc:24:d5:25:6f:f1:ac:3b:76:bc:59:fa:33:e5:1c:
5c:27:bd:dd:86:92:c8:03:f3:4d:b7:d1:b1:52:fb:23:31:c2:
9c:a6:bf:4f:9d:f0:ff:5d:89:99:20:72:e1:b4:b7:34:b4:f6:
ea:f8:62:b7:b2:f5:6f:5e:93:d5:4d:e8:6c:e5:41:54:08:c6:
90:7f:4e:67:14:4e:db:2b:a5:91:b1:14:32:31:f3:13:63:bc:
aa:60:30:12:10:57:52:aa:62:1e:a3:9c:21:d6:b1:fc:f1:91:
7a:dc:37:41:ce:33:02:35:17:b5:89:58:e9:49:47:b6:c3:fd:
16:f6:2f:05:9e:80:8c:ca:e1:fc:21:39:1d:f9:3f:f1:86:93:
72:e9:0a:36:f2:10:c2:3f:b5:02:94:c3:0d:de:3f:0f:85:6e:
12:ee:a6:67:94:94:04:b1:80:fe:d0:55:6b:ab:30:e7:98:08:
66:bd:71:84:e9:25:18:d7:cd:bc:76:cd:91:80:0f:62:ca:d8:
ec:59:8a:9b:c6:b4:d0:c7:b0:1f:67:69:48:58:df:5e:a2:c6:
73:4c:9a:a2:f6:04:20:c4:7d:9a:e1:1b:20:ec:0e:dd:50:79:
66:db:83:7a:00:58:51:5d:f3:86:95:22:5d:e5:8a:14:33:ea:
dd:bf:66:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:00 2026 by rpki-client