Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142965.roa
File: AS142965.roa (raw, json)
Hash identifier: tWxDwP7oLWKGOtpxbwlZLZ3grvEOwOjJ+6F95Pl70wo=
Subject key identifier: 73:2F:ED:21:0A:0C:51:AD:4E:46:A7:3C:19:64:B3:7B:D8:07:43:B8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 226362FD1CB84C85EECB413DB7D316ABA610DCEF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142965.roa
Signing time: Mon 25 May 2026 01:20:24 +0000
ROA not before: Mon 25 May 2026 01:15:24 +0000
ROA not after: Mon 24 May 2027 01:20:24 +0000
asID: 142965
IP address blocks: 240a:a13b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:63:62:fd:1c:b8:4c:85:ee:cb:41:3d:b7:d3:16:ab:a6:10:dc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:24 2026 GMT
Not After : May 24 01:20:24 2027 GMT
Subject: CN=732FED210A0C51AD4E46A73C1964B37BD80743B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:2c:f5:c8:ef:29:d6:86:b8:6e:70:e9:93:
d3:aa:46:48:16:4e:d8:fa:80:ac:37:8f:f9:e8:ae:
0e:87:53:5f:99:80:aa:98:f2:60:f4:e1:80:b4:94:
48:58:80:53:23:23:95:9e:4c:3a:6f:59:4b:ad:db:
ec:f5:95:d9:82:74:e5:5a:18:3c:03:1f:d5:46:26:
cb:c1:f0:df:b2:ca:32:ce:63:d6:96:35:09:c3:59:
86:3e:60:4e:c6:e3:c8:9e:2b:46:66:37:29:cd:a0:
06:78:07:ca:a2:4e:64:03:da:21:41:db:86:c6:39:
03:71:89:b7:20:f7:cd:c5:2f:3e:ca:91:cc:95:ca:
f9:82:3e:55:18:89:61:3f:29:bf:64:de:d8:91:bf:
79:71:f1:13:7d:5e:68:55:ab:7e:73:09:19:89:8f:
7d:f8:46:f2:df:b7:dc:8e:0c:f1:60:1b:4b:53:97:
c0:b2:0d:d7:b1:a2:2f:a9:16:0b:4f:16:26:13:dd:
21:59:53:3a:52:7e:b4:82:47:e2:f4:0e:92:28:7c:
3d:44:37:34:24:15:ab:52:e0:73:4e:35:a7:da:a7:
48:2b:e1:3a:89:a3:3f:53:47:7b:93:a9:4c:51:7d:
d7:d6:39:64:1d:1a:ba:ce:51:2b:a5:ea:15:8e:41:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2F:ED:21:0A:0C:51:AD:4E:46:A7:3C:19:64:B3:7B:D8:07:43:B8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a13b::/32
Signature Algorithm: sha256WithRSAEncryption
25:24:72:a3:bf:8b:13:ae:83:06:a2:5d:16:bb:1e:09:5e:cd:
47:55:a3:c8:8e:88:e8:09:f5:bf:d4:22:cf:59:09:3d:de:d1:
6c:65:88:b9:47:2c:b4:05:7e:2d:51:66:db:5b:ab:d1:6e:f5:
3c:e9:a5:85:20:fe:c8:34:c1:ce:31:03:e8:05:96:f1:7d:85:
d0:63:9b:c6:bd:47:ac:5c:e6:02:2c:c3:d9:54:10:d2:19:3a:
62:cf:57:40:d8:25:7d:da:99:94:95:c1:2a:43:b7:56:59:7d:
94:c2:f0:65:09:46:9d:e1:00:1c:0e:43:c1:e2:55:88:ee:ef:
1b:b3:a6:38:d2:f8:30:64:63:9f:8f:08:a9:05:70:62:03:35:
c4:c8:7d:fa:8f:76:e8:68:79:23:5b:ed:b1:dc:21:66:3c:0e:
dd:7c:a0:f8:3f:63:3b:f9:70:e9:c9:e6:50:fc:d7:03:e1:a3:
19:53:9f:a7:5c:65:df:32:dc:44:cc:b0:a1:c8:68:83:c4:74:
8a:3a:f1:13:75:9c:30:50:45:31:cc:ae:f0:a8:34:be:2b:e0:
b9:34:72:59:ed:84:26:e5:8a:06:12:5b:9b:df:43:7d:d7:32:
37:08:e3:10:aa:7d:a3:bd:f3:6a:a9:ff:97:40:74:a9:34:2e:
3b:a4:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:07 2026 by rpki-client