Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142967.roa
File: AS142967.roa (raw, json)
Hash identifier: BX8bT2VnnGuSK//ua6yatBVEBWRsd1Crz4W84NZGT4I=
Subject key identifier: CE:76:20:81:E2:F9:C3:49:05:DF:26:AB:1E:1A:7D:26:C6:65:11:FF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4C791E42C9F1AF2075A9DA346F89B283D225740B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142967.roa
Signing time: Fri 22 May 2026 06:27:42 +0000
ROA not before: Fri 22 May 2026 06:22:42 +0000
ROA not after: Fri 21 May 2027 06:27:42 +0000
asID: 142967
IP address blocks: 240a:a13d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:79:1e:42:c9:f1:af:20:75:a9:da:34:6f:89:b2:83:d2:25:74:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:42 2026 GMT
Not After : May 21 06:27:42 2027 GMT
Subject: CN=CE762081E2F9C34905DF26AB1E1A7D26C66511FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:1b:95:0c:e5:2a:e8:fd:c3:a0:3a:52:2b:
ae:86:1b:70:3a:37:0e:88:cb:01:e0:88:f2:21:79:
4d:9e:d7:c5:1e:24:8f:01:4b:14:d8:e3:d9:4c:4a:
26:19:f7:e2:17:f6:b7:62:6d:ef:fc:24:d7:a4:d9:
54:f5:69:85:5f:49:b0:cd:bd:6b:c0:5a:0d:4d:54:
e4:06:a8:60:d6:f6:87:6c:23:93:d8:65:b7:6c:2d:
fd:75:8c:e6:7d:7d:8e:5d:53:4e:68:8b:4e:11:d0:
9a:19:3b:76:de:40:8f:f1:4f:59:1b:d9:e8:6c:c9:
bf:ce:96:8e:73:f0:d8:6f:9c:c5:fc:96:11:8c:e4:
e7:30:6d:7d:a2:8e:a9:51:c1:6b:18:ea:f9:02:b1:
f2:30:f4:eb:e4:14:7d:d1:42:a1:68:f5:de:98:13:
28:08:05:4e:a4:36:c7:fe:b8:7c:c6:01:a2:b8:e4:
96:03:57:91:d2:74:2c:a9:3d:38:e9:64:9f:20:23:
e4:c0:4a:19:22:93:73:94:0a:30:1c:64:0d:47:2d:
6e:c6:20:83:4e:0b:1a:ce:fc:cb:cb:8e:47:29:47:
4d:40:82:2e:8d:e0:67:97:77:53:d7:82:29:71:70:
43:f8:28:5d:ee:3d:5a:21:6e:87:9c:a5:06:21:0a:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:76:20:81:E2:F9:C3:49:05:DF:26:AB:1E:1A:7D:26:C6:65:11:FF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142967.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a13d::/32
Signature Algorithm: sha256WithRSAEncryption
30:98:4b:24:eb:4b:4b:00:ff:3c:ef:fb:1f:68:6e:ed:f0:21:
25:27:dc:fe:41:25:14:e7:12:16:0e:fb:37:43:31:b0:bd:1b:
9b:a7:1d:ce:23:72:ac:39:75:60:a6:05:c4:ff:82:80:d3:e8:
5a:e8:15:91:3b:fc:11:4d:89:9c:7b:b6:62:1a:75:e3:2b:2c:
54:a1:a1:4c:84:78:71:bb:76:7b:da:bf:93:e4:57:f9:45:3d:
f4:c0:3e:08:2c:20:4f:46:7d:ba:43:01:88:75:d0:8c:2b:e6:
d1:6a:f2:30:a6:12:1e:0f:f0:aa:95:b8:f6:4a:01:c5:b3:56:
55:1b:0c:63:7d:59:3c:41:fa:3f:8e:7e:c0:54:c0:c0:2d:f7:
4b:cc:97:26:d0:bf:48:47:ee:bc:b6:a4:9b:cb:5d:ee:8c:7d:
8a:a2:d8:a0:79:7d:1e:b8:61:16:be:b4:bd:14:20:98:8f:85:
54:58:ab:a2:df:41:ef:64:c8:b9:39:5a:01:e1:46:b1:15:71:
ae:5e:3f:25:d3:5d:6a:de:b7:d6:e6:bd:16:67:df:a8:d6:5e:
ca:1e:a6:d7:0c:5b:c3:68:31:2d:89:16:2b:26:e4:37:bb:4e:
dd:b3:d4:1f:49:62:c0:33:b1:1f:44:29:4f:45:32:cd:8c:48:
9d:a6:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:47 2026 by rpki-client