Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142963.roa
File: AS142963.roa (raw, json)
Hash identifier: fGM4srwzkkJOG2g2PLZfBk7VE/RYTNbq+t/CJCoWm+8=
Subject key identifier: 13:52:94:05:F1:B1:6D:B7:07:19:34:70:FB:19:F1:C4:4E:26:81:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4CBB305B5072D9610B52D9D9756D5514FBBFF411
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142963.roa
Signing time: Fri 22 May 2026 06:05:33 +0000
ROA not before: Fri 22 May 2026 06:00:33 +0000
ROA not after: Fri 21 May 2027 06:05:33 +0000
asID: 142963
IP address blocks: 240a:a139::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:bb:30:5b:50:72:d9:61:0b:52:d9:d9:75:6d:55:14:fb:bf:f4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:33 2026 GMT
Not After : May 21 06:05:33 2027 GMT
Subject: CN=13529405F1B16DB707193470FB19F1C44E268117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f3:33:44:bb:4c:ce:46:38:35:5b:51:3d:ba:
ba:30:c6:bf:5f:e2:f5:dd:dd:7d:a5:d7:72:0a:93:
02:03:f1:74:8f:27:26:e0:0c:c0:b9:30:12:b3:d8:
34:e2:69:07:a5:22:ce:0a:de:8d:c1:ea:0f:1a:bc:
66:05:d5:f2:2c:c7:f7:40:d9:d0:c5:0c:32:64:3f:
58:90:ba:44:c3:ba:d1:1a:7f:af:9e:ae:9e:73:bf:
e2:c9:7f:a8:d5:34:55:ec:93:ec:33:0f:79:9d:0b:
3e:77:b6:a6:7f:5f:eb:58:93:c0:c2:1f:18:25:a9:
4d:f2:cc:fb:d1:2a:bc:e9:79:00:40:64:f3:1f:27:
88:7c:43:01:d5:31:cb:90:fd:e2:9d:e1:06:48:f3:
b2:c5:15:4f:89:ed:66:3e:18:62:2a:06:e8:e5:4e:
f8:68:ad:e0:f2:f5:21:7d:8b:16:0c:c4:1b:c9:13:
f0:2c:d5:25:37:cb:ce:19:18:a0:ce:87:a5:9c:d4:
46:5a:07:14:0a:04:4b:07:c9:d2:f7:a9:5a:3b:53:
c5:5c:88:09:ab:11:5c:20:67:38:c3:fc:68:93:eb:
f9:f0:c0:e7:56:dc:30:eb:d1:35:66:47:1d:b2:dc:
81:3b:d3:f5:c3:d5:86:41:d3:ca:d1:44:55:96:c2:
44:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:52:94:05:F1:B1:6D:B7:07:19:34:70:FB:19:F1:C4:4E:26:81:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142963.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a139::/32
Signature Algorithm: sha256WithRSAEncryption
98:cb:ea:bc:99:70:38:7a:51:4f:eb:b5:03:66:5c:a1:fc:30:
35:6f:46:e8:d3:29:f6:c1:24:c1:a9:64:04:65:1b:3a:81:00:
a1:29:f4:32:e3:78:51:5b:eb:5a:9d:29:54:e8:42:6f:79:23:
a8:d5:08:40:9d:e6:91:9b:ab:c7:16:90:29:f3:35:9a:dc:3e:
e6:15:39:00:d2:33:d6:16:00:93:ac:e5:68:e9:30:1d:b0:d3:
bc:71:80:d6:c8:52:3b:2e:f6:0e:7c:80:a3:ca:21:8c:be:e8:
e9:ce:35:12:41:ce:c4:29:a1:14:a5:08:fa:35:5b:2d:dc:a6:
b0:3b:77:86:68:50:a7:d0:a8:7f:00:bf:7e:fa:29:61:3a:85:
31:5c:97:ff:07:d7:78:73:9f:56:aa:0f:f0:d5:51:5b:e8:ee:
6f:d7:34:f2:a3:62:b2:26:e6:69:ac:e6:47:56:72:25:22:b2:
41:6d:40:25:b0:9a:79:21:15:d8:c2:6b:4f:21:31:c8:3e:b9:
d7:b6:b7:f5:91:1a:e4:d8:da:07:ce:b8:59:f1:34:50:64:0a:
33:c4:31:01:a8:8c:7d:59:8a:94:f9:09:19:ed:dc:e4:28:1f:
0c:e0:a3:47:6c:ef:90:87:75:b5:22:3c:54:c3:e3:f7:32:be:
5e:c9:03:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:23 2026 by rpki-client