Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142953.roa
File: AS142953.roa (raw, json)
Hash identifier: TQDebkxuEAOh/8NRmpm9G2zpXNRbMUqkycwhlmTiOrw=
Subject key identifier: B8:61:A5:B6:D8:3D:0E:77:55:46:D8:6A:35:A0:48:84:55:61:C8:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5ED2998883E732538538E0CDA5FDCC367295C737
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142953.roa
Signing time: Tue 26 May 2026 06:12:23 +0000
ROA not before: Tue 26 May 2026 06:07:23 +0000
ROA not after: Tue 25 May 2027 06:12:23 +0000
asID: 142953
IP address blocks: 240a:a12f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d2:99:88:83:e7:32:53:85:38:e0:cd:a5:fd:cc:36:72:95:c7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:23 2026 GMT
Not After : May 25 06:12:23 2027 GMT
Subject: CN=B861A5B6D83D0E775546D86A35A048845561C81C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:d5:9d:7e:31:ec:86:a8:3e:38:0e:fc:62:
8a:df:f7:a4:ca:e5:5b:c7:fd:64:3d:57:bf:cf:66:
ea:05:38:cb:9b:12:e3:a5:17:39:fc:97:68:5c:bb:
3f:e8:80:0e:f5:82:45:07:7d:bc:7c:44:df:67:6e:
86:02:6d:15:19:ac:85:20:81:ef:7d:de:81:e0:24:
60:5a:38:ec:ed:c8:cb:8a:92:9d:6f:b5:b2:23:b5:
e6:98:61:fc:f5:ba:f1:2e:20:96:74:1d:cf:92:0b:
78:c3:29:7e:99:71:4a:be:55:8b:7f:8e:12:f8:d4:
21:b1:48:4d:01:34:8b:77:18:60:60:c2:1e:a8:84:
c5:2f:85:f0:f2:4a:0f:6e:3e:5e:1c:dc:ad:f2:1a:
04:ca:4d:4a:93:fd:ff:34:85:10:ba:ac:8f:58:47:
f7:06:38:14:12:56:61:91:2e:ec:00:a1:97:c6:1e:
86:2f:0d:b3:69:dc:ba:20:98:01:3b:c6:81:8c:95:
5c:4b:43:90:50:d4:31:69:ef:a5:1b:7b:b9:87:36:
17:3d:65:ad:af:60:dc:e3:ac:51:8c:a3:22:70:b3:
8f:15:f6:55:9b:0a:cc:df:1e:72:f2:aa:9e:3b:22:
f1:d1:a6:79:20:49:be:86:34:2d:9d:be:89:9f:4e:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:61:A5:B6:D8:3D:0E:77:55:46:D8:6A:35:A0:48:84:55:61:C8:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142953.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a12f::/32
Signature Algorithm: sha256WithRSAEncryption
4c:50:b6:94:88:16:96:a6:0c:18:e3:d5:35:83:77:68:3d:fc:
71:78:da:14:79:42:23:08:a9:05:d3:83:6d:46:3c:1f:1b:e3:
0f:c1:2e:f2:ea:05:4d:d0:8c:6f:06:b8:50:14:c5:b2:96:58:
06:88:d4:f3:35:dc:4e:04:ab:46:cb:15:3b:87:44:b0:20:14:
c9:23:60:bd:15:36:b8:0d:bc:27:6d:6f:23:bb:d3:60:25:47:
32:99:32:57:d5:7e:ed:24:96:89:a7:f2:f3:38:4b:ea:c9:cf:
3a:ef:ce:5c:e3:d0:d2:b2:13:53:75:48:9c:cc:4a:ba:a2:0d:
91:96:8c:18:92:ad:78:97:c4:a5:96:4f:b4:88:fd:3d:d2:58:
fd:bc:c0:f3:c0:3f:cf:ec:9e:cb:db:e3:1c:34:3f:83:77:5b:
1f:c6:b9:ed:6b:f3:44:b3:0d:8e:0a:f7:fe:cf:d4:cc:49:6c:
48:4d:39:3e:cb:60:14:d1:5a:88:3e:d5:6e:fe:eb:0b:73:1d:
c9:ed:2b:ec:8a:84:52:65:c2:49:54:06:b3:c8:bd:44:f2:9a:
c8:a6:39:0a:c4:6a:fd:50:4a:f1:b6:ca:e7:8d:a5:3a:c9:d9:
8c:99:39:86:98:ac:6c:4b:35:1d:67:7b:f6:c4:ca:1f:12:23:
ca:6a:6c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:44 2026 by rpki-client