Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142961.roa
File: AS142961.roa (raw, json)
Hash identifier: MdrJZRA3mtdLc7AwPNDw7dmXMosCoZ8T0D44rBiP93U=
Subject key identifier: CE:36:E8:B2:5E:BF:E5:E1:92:A0:73:30:76:85:05:CD:2D:87:6F:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 02FBE0C0101A9DE8053368B2FC9716E8F4774B97
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142961.roa
Signing time: Fri 22 May 2026 06:05:32 +0000
ROA not before: Fri 22 May 2026 06:00:32 +0000
ROA not after: Fri 21 May 2027 06:05:32 +0000
asID: 142961
IP address blocks: 240a:a137::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:fb:e0:c0:10:1a:9d:e8:05:33:68:b2:fc:97:16:e8:f4:77:4b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:32 2026 GMT
Not After : May 21 06:05:32 2027 GMT
Subject: CN=CE36E8B25EBFE5E192A07330768505CD2D876F85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:29:95:2e:70:2a:b9:50:4f:3e:bf:2c:bc:
e2:16:88:8c:3a:23:9f:ce:ea:69:ab:b4:74:d3:fc:
f2:41:1b:a4:07:b9:08:a8:6c:4d:6d:5a:67:89:c2:
2c:69:8e:59:a5:75:db:8f:9e:57:38:38:76:8e:9c:
d3:2b:f9:9b:be:e0:06:de:d8:58:c1:e9:f3:8d:54:
54:3b:e7:91:25:db:50:c3:dd:e5:c0:4c:5d:26:6b:
d0:21:aa:e0:87:4c:79:04:18:d3:2d:dc:d2:2b:d4:
2d:69:a9:58:88:ba:30:01:7b:a3:11:96:14:c0:4d:
2a:e5:bc:ed:f0:96:89:b2:b0:bc:e6:c8:a0:7c:3a:
58:0f:1e:de:f1:e8:6a:0c:1e:86:9e:65:fc:db:ff:
79:04:d7:0a:0a:16:43:c2:95:b4:5f:ef:4e:12:f1:
f0:4a:38:94:a8:57:c4:0f:1d:2a:24:19:b5:a4:5c:
ed:9f:66:ef:03:f9:27:64:37:e3:da:0f:ed:8d:71:
f2:19:ff:60:64:c8:ff:31:be:7d:80:bc:e8:c2:2e:
10:d3:f5:99:36:ee:8e:fd:5c:1f:cd:03:ed:68:d3:
16:40:9b:e3:a4:a3:58:ca:e5:bb:fb:29:d3:96:93:
a2:af:d3:fb:ca:12:a6:44:bf:93:a0:2c:ab:3e:00:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:36:E8:B2:5E:BF:E5:E1:92:A0:73:30:76:85:05:CD:2D:87:6F:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142961.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a137::/32
Signature Algorithm: sha256WithRSAEncryption
58:45:84:d5:15:6a:09:52:22:55:44:d4:cf:46:42:28:92:56:
e0:91:f0:d6:95:c1:1f:4f:77:0f:e0:12:b4:31:f8:f6:03:53:
18:4c:1f:79:b2:5c:f5:1c:32:65:17:09:d6:7d:15:66:5c:47:
5f:b8:ec:38:5d:20:e5:01:56:66:9b:3e:41:6d:bd:88:2b:61:
d2:b3:0c:d6:18:9b:17:3c:84:d4:38:b4:40:b3:1c:c1:4f:74:
68:06:1b:69:d7:ea:7b:7a:6d:89:a1:97:b0:ad:36:67:aa:8a:
fe:f6:6d:bb:2b:c1:13:18:c9:a3:00:71:5d:71:1b:d8:92:6f:
b3:eb:5c:05:d4:20:da:49:48:9f:4f:8f:c2:18:e3:63:9d:c8:
0b:fd:b8:c5:4d:9f:31:b9:b7:7f:b7:03:43:3b:2b:41:ad:af:
be:b9:69:9f:fc:94:30:2f:a4:90:3e:d7:23:db:13:32:dd:ab:
47:41:2a:86:3c:f2:cc:34:f3:4e:4f:0f:e0:96:d9:8e:fa:6e:
10:26:97:a0:35:bc:e6:0c:34:c5:7e:99:04:43:99:e9:b8:b9:
51:8b:b8:13:fa:e1:90:7f:a9:e4:b8:12:f0:c7:86:31:73:2a:
7f:99:b9:64:00:34:3d:3b:e3:9b:5d:c0:18:47:1e:eb:eb:e1:
1e:10:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:29 2026 by rpki-client