Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142950.roa
File: AS142950.roa (raw, json)
Hash identifier: NXNeVPE1cO6QXGNksFUa+VgtgNxJHgBR9XG9Pcq21ro=
Subject key identifier: 5F:A6:0B:A1:EF:9C:83:43:BB:F9:03:46:56:85:87:0A:09:97:F7:D7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3402799ADAB0A16FF9880E8EF9FF812C6E168D2C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142950.roa
Signing time: Fri 22 May 2026 07:40:51 +0000
ROA not before: Fri 22 May 2026 07:35:51 +0000
ROA not after: Fri 21 May 2027 07:40:51 +0000
asID: 142950
IP address blocks: 240a:a12c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:02:79:9a:da:b0:a1:6f:f9:88:0e:8e:f9:ff:81:2c:6e:16:8d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:51 2026 GMT
Not After : May 21 07:40:51 2027 GMT
Subject: CN=5FA60BA1EF9C8343BBF903465685870A0997F7D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:dc:8c:8d:6f:87:ac:35:03:d8:d5:13:ad:
c6:b1:3e:fc:d4:98:0b:22:35:0e:20:e5:b5:77:57:
b1:f2:e5:d2:37:47:6f:64:08:2b:86:46:25:69:24:
9e:7e:0a:a4:9b:8f:7d:5c:bc:94:93:76:94:84:99:
35:51:43:20:e0:27:cf:64:33:e7:96:b2:8e:5a:46:
61:70:77:40:fa:a8:e6:b2:c0:b1:b4:c4:7f:6e:a1:
84:aa:d3:b4:d8:34:20:c9:c4:6c:2a:12:ba:34:8c:
8b:55:0f:b5:89:f7:a9:68:f2:e4:0b:29:73:ca:cb:
c2:01:9b:c5:be:a4:b6:fb:6f:10:68:c1:26:05:ae:
7a:55:ac:79:44:df:5e:9b:85:27:ce:39:b0:af:dc:
00:de:fd:40:98:5c:0a:34:11:07:c7:b0:80:d3:7d:
76:3b:14:ad:aa:f4:40:00:94:15:01:d5:22:e8:ce:
7f:99:64:1b:3e:0a:5f:3d:62:fe:1a:13:03:ce:5d:
2c:8b:d5:9a:a1:8b:c8:8e:ad:f8:ae:5c:ab:ba:ce:
1c:57:96:97:c8:76:8a:92:a7:6a:1e:68:83:66:8c:
21:7a:17:87:d8:33:f3:46:08:97:14:18:fc:21:f4:
71:f6:a1:00:cf:df:1c:e3:ea:37:79:f3:c8:04:ae:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:0B:A1:EF:9C:83:43:BB:F9:03:46:56:85:87:0A:09:97:F7:D7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142950.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a12c::/32
Signature Algorithm: sha256WithRSAEncryption
a9:b9:30:b6:ef:c5:57:0e:56:ba:a4:37:12:1c:bd:f1:1e:a2:
81:31:e5:09:e3:e3:9c:45:e4:7b:2a:b3:10:de:c3:c1:c5:9d:
b8:89:35:49:87:98:04:3b:d9:fd:c3:06:49:5c:52:61:7c:2c:
ff:4d:24:79:68:25:76:26:94:e6:00:b1:e2:1b:2f:65:84:21:
9a:a5:f5:50:2a:64:73:9c:72:5f:68:81:a2:d3:bc:7d:7d:a4:
9c:6b:2a:9a:1b:1a:26:90:b3:0e:b1:58:9c:a4:23:99:29:e7:
b8:bc:7f:ba:ee:35:91:bb:82:55:88:41:3d:41:70:83:a3:da:
d4:33:b7:d3:50:c6:e7:69:de:1b:ed:dc:b7:4c:64:d6:11:02:
59:f6:71:fd:1f:18:80:eb:08:15:a3:9f:10:a4:b1:7a:0a:8b:
78:82:ce:5a:66:3e:54:60:e1:e5:31:b7:94:94:ce:d5:42:0a:
e3:24:f6:e4:c7:cf:fe:1e:89:24:bf:a7:a3:59:4f:97:50:16:
8b:a8:fb:cf:d3:90:f4:0a:ce:17:9f:a6:21:53:64:fc:b2:f0:
a7:a2:ff:31:d9:ff:ff:3f:bb:e1:ff:ad:1e:f5:d6:c1:d3:81:
2d:69:7f:ce:e2:cb:f6:5d:37:9d:4a:ca:8b:60:d2:26:77:ec:
f9:71:ad:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:16 2026 by rpki-client