Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142990.roa
File: AS142990.roa (raw, json)
Hash identifier: ULOr7Ah2stqJWZ98PxVMYpBUcrysOLuaMxCLMAZai4I=
Subject key identifier: FB:88:53:61:02:24:95:20:72:A0:10:8F:1A:66:07:32:6D:3E:E1:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6CEB9DF7E98F1F64A26939E09CAFDA63473200C0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142990.roa
Signing time: Fri 22 May 2026 06:05:45 +0000
ROA not before: Fri 22 May 2026 06:00:45 +0000
ROA not after: Fri 21 May 2027 06:05:45 +0000
asID: 142990
IP address blocks: 240a:a154::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:eb:9d:f7:e9:8f:1f:64:a2:69:39:e0:9c:af:da:63:47:32:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:45 2026 GMT
Not After : May 21 06:05:45 2027 GMT
Subject: CN=FB8853610224952072A0108F1A6607326D3EE195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:56:9c:34:41:fe:b0:1d:8d:58:21:10:63:
5c:92:99:58:59:26:e5:dc:47:47:51:b7:7c:97:bc:
78:b7:bd:77:0f:62:ee:06:c2:88:84:af:04:c9:96:
ef:e7:02:82:13:59:ce:42:d6:47:5e:c7:5b:5b:3d:
35:41:f2:20:c2:96:b5:05:e3:be:75:1d:54:e3:d8:
51:ed:41:fd:a4:7a:06:da:97:47:a5:1d:a6:77:d7:
88:1e:f9:cb:34:e8:29:5c:fe:07:0b:06:fd:f0:16:
da:bb:03:3f:59:6c:a1:76:a4:0a:8d:a0:03:38:b2:
f5:7a:55:4b:25:71:7b:48:19:5e:ba:43:88:d7:17:
4f:f2:c1:9c:1d:57:df:ea:65:5b:7c:68:87:11:b7:
e4:f8:f5:04:e7:f6:91:1f:f8:24:58:ae:8a:78:44:
3d:d6:5c:36:6a:07:3b:63:3d:2f:da:32:9a:79:41:
26:ab:4d:9c:c1:e0:1f:a6:0a:aa:d3:e8:b3:6a:f3:
7a:df:ce:9d:72:69:21:d1:db:5a:c2:ee:58:19:26:
2b:a3:d2:1e:81:97:2d:d4:93:1b:cb:f1:2f:52:f9:
7b:55:56:96:d4:c9:a5:e4:bf:c6:fa:22:8e:55:69:
e9:07:83:f5:b2:3f:a9:00:63:44:5c:e1:26:db:8f:
0c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:88:53:61:02:24:95:20:72:A0:10:8F:1A:66:07:32:6D:3E:E1:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142990.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a154::/32
Signature Algorithm: sha256WithRSAEncryption
64:04:8c:ca:b6:30:61:c9:b2:8d:7c:d7:f7:1e:0f:96:f6:5c:
b9:68:ea:9a:be:5a:e9:da:66:38:c7:26:ad:29:db:d2:62:78:
d3:c2:a3:87:b9:93:69:e6:91:48:c9:f2:10:19:f8:b8:50:93:
87:68:c6:c2:0c:e4:dc:a1:e9:93:5b:38:28:9e:4b:4b:7b:49:
6d:35:20:96:b0:8b:52:5a:a4:a1:07:89:b2:bc:f3:17:e1:dd:
61:f4:3c:25:2d:c7:3d:7a:96:ec:de:40:62:67:ea:7e:77:d9:
02:d9:89:4c:1d:5a:5e:26:5a:c3:7a:9c:b6:18:a5:48:2f:08:
ee:18:57:bb:0e:f6:7e:c8:ed:0e:2c:60:0f:02:85:76:e0:2e:
95:b6:ac:46:47:6c:5d:25:ab:f7:e4:da:d3:47:2c:bc:1b:af:
6b:fb:ec:1b:80:b0:ae:70:49:1a:9d:89:5f:d9:a6:b2:06:e8:
b4:ae:99:21:55:c5:c7:5b:0b:23:70:44:39:4e:c3:b4:5b:8c:
09:ac:7f:d6:f7:2a:a1:07:86:4b:64:9c:ee:4b:6b:34:3d:ca:
36:66:b3:b5:07:7b:81:1f:97:a5:29:64:9f:5f:1d:21:1b:42:
61:f6:fd:d1:a6:b6:e1:3f:12:28:c4:10:d8:c1:bf:72:95:99:
13:3f:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:39 2026 by rpki-client