Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142951.roa
File: AS142951.roa (raw, json)
Hash identifier: +zWfQ4pkFe6Yd71jp3a50jjEKCvog3ozhejpqPafjxs=
Subject key identifier: 32:B5:37:CE:BF:31:29:37:91:08:5A:AC:27:CE:7F:6D:88:82:5B:9D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 38C6FCEEA36C6C158FB5CFE09E12E3C17062FF85
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142951.roa
Signing time: Tue 26 May 2026 06:30:34 +0000
ROA not before: Tue 26 May 2026 06:25:34 +0000
ROA not after: Tue 25 May 2027 06:30:34 +0000
asID: 142951
IP address blocks: 240a:a12d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:c6:fc:ee:a3:6c:6c:15:8f:b5:cf:e0:9e:12:e3:c1:70:62:ff:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:34 2026 GMT
Not After : May 25 06:30:34 2027 GMT
Subject: CN=32B537CEBF31293791085AAC27CE7F6D88825B9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2f:85:65:b3:a2:2f:c7:ef:ca:57:1a:23:f3:
02:ee:93:5b:df:bf:68:8f:80:97:31:8f:19:c4:e9:
ab:04:b1:38:b8:a2:6e:7b:10:5d:84:e3:e1:38:76:
db:e6:16:4b:e3:cb:57:a5:d5:be:d9:74:ba:62:c0:
7c:32:98:dd:bd:a7:6b:9c:d2:58:bb:e5:22:13:8c:
92:ad:08:72:17:09:dc:bc:66:2c:4c:4c:c8:89:31:
59:62:74:69:23:25:3f:65:84:d4:99:01:ad:c9:26:
5c:c4:85:a9:d2:5f:73:89:8a:62:b4:12:0b:64:f2:
9b:53:28:9e:48:2e:a4:d8:02:4a:ea:9c:42:40:e1:
7d:71:56:77:64:bb:a1:53:56:40:e4:9e:eb:72:aa:
1f:d7:fc:35:2e:d2:3e:12:6d:8e:af:b5:1f:4a:c0:
1a:ca:19:3e:91:d7:03:04:d6:e1:0d:08:36:c2:25:
60:64:d0:15:b1:04:89:f3:8f:29:93:ba:89:d4:68:
2f:01:a9:07:55:f2:f2:ca:4f:b4:9c:6b:13:6b:2a:
1c:26:cb:11:1d:de:73:74:8e:5c:09:70:f9:05:1e:
b7:c2:42:3c:42:97:3e:c5:3b:e6:78:ad:78:1d:2e:
d8:39:9f:50:69:a0:2a:3e:6c:6d:13:4f:a3:34:12:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:37:CE:BF:31:29:37:91:08:5A:AC:27:CE:7F:6D:88:82:5B:9D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142951.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a12d::/32
Signature Algorithm: sha256WithRSAEncryption
91:8a:69:47:f5:d4:95:c2:84:63:6f:7c:18:a4:c4:8b:69:8c:
bb:56:3e:bc:3f:65:5f:5e:ea:ab:6d:41:2c:34:56:1d:bc:e3:
b2:8b:4f:13:99:b8:3f:2a:69:76:b6:87:57:08:4d:fa:75:3e:
35:53:2d:8d:2e:6d:cc:9e:92:42:dc:65:f0:34:48:8c:19:c6:
30:1c:a5:89:2a:d0:27:79:b0:37:49:af:46:9f:c8:10:2e:7c:
df:dd:0e:0e:b6:28:3b:a9:f7:da:8a:1a:06:2d:ff:0a:55:b7:
45:a9:17:3b:1a:52:60:b0:cf:f2:e5:ed:9f:f5:4d:2a:9e:21:
41:d1:23:3f:5c:38:05:66:e0:3c:a8:01:11:1b:d1:b2:2f:43:
42:1c:7f:d6:3e:a1:ff:79:fe:1c:68:65:1f:1d:53:81:2a:da:
76:fd:30:58:8f:94:8b:14:be:c6:8d:13:08:3b:43:e4:2b:80:
56:e4:97:23:fc:2f:5c:0a:b0:52:24:4a:c3:5e:c2:bc:0b:d2:
47:01:fd:87:cf:80:b9:d5:b6:44:d6:42:60:7e:a7:bc:8e:dd:
73:0d:90:ea:b4:92:f1:90:39:f4:e1:dd:2c:93:a0:46:e6:bd:
0e:10:dd:d8:f3:3b:95:cd:cb:18:f1:d9:73:3f:31:47:dc:7f:
77:1b:11:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:33 2026 by rpki-client