Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142998.roa
File: AS142998.roa (raw, json)
Hash identifier: Fa+SFAJm3JW8YdbFqIpP9lOoAQf3zokUzlUfW6UH42E=
Subject key identifier: B6:EB:87:0D:CD:FB:1E:1A:D4:5B:B1:A0:38:12:C9:FB:00:7C:2B:A4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 228062557B00F6C124B607130B70B94B9E7FCF6C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142998.roa
Signing time: Tue 26 May 2026 02:34:59 +0000
ROA not before: Tue 26 May 2026 02:29:59 +0000
ROA not after: Tue 25 May 2027 02:34:59 +0000
asID: 142998
IP address blocks: 240a:a15c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:80:62:55:7b:00:f6:c1:24:b6:07:13:0b:70:b9:4b:9e:7f:cf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:59 2026 GMT
Not After : May 25 02:34:59 2027 GMT
Subject: CN=B6EB870DCDFB1E1AD45BB1A03812C9FB007C2BA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:32:2a:db:bc:9a:5e:fb:23:c6:c7:e4:fd:
e2:e7:5a:b8:8b:86:95:76:47:eb:29:43:1d:e6:6e:
4c:f4:61:d0:d6:38:13:bd:71:0d:59:30:c7:e2:41:
db:1c:03:69:a3:5d:57:72:25:9f:b6:75:26:58:56:
1e:07:c4:fa:97:93:6d:54:66:81:42:18:28:d9:c3:
f3:b1:da:d5:e7:5d:a0:62:4a:20:65:c6:33:42:70:
d8:2d:9a:22:52:b4:40:89:84:40:f6:39:7f:9e:4c:
bb:0b:ff:9c:2d:b6:c6:0a:5d:7f:f4:d2:f2:66:ec:
15:ca:2f:77:d9:25:36:7f:c7:53:1b:bd:5f:da:94:
2d:27:e3:a6:e6:59:a6:9b:27:d8:cf:f9:a4:40:a0:
bd:8c:11:a2:03:2b:63:37:9c:a3:c1:0e:89:c4:e9:
99:18:c1:b9:ba:2c:0c:52:2d:2a:38:55:56:6e:8a:
9c:b6:04:ca:e7:7e:92:c1:de:18:73:de:b9:f9:bc:
26:42:b3:c6:70:1c:f0:2e:87:40:bd:ba:26:55:69:
a0:13:3f:d8:b9:77:b4:df:97:11:e1:17:3e:7d:f7:
72:c3:6f:be:3a:66:bd:cc:37:ef:41:eb:99:f4:eb:
19:0a:e7:ce:d1:58:81:03:06:05:c7:b6:ba:20:21:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EB:87:0D:CD:FB:1E:1A:D4:5B:B1:A0:38:12:C9:FB:00:7C:2B:A4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142998.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a15c::/32
Signature Algorithm: sha256WithRSAEncryption
64:af:56:73:68:38:d0:fa:64:4a:d3:b4:8b:c7:d8:df:ad:72:
82:57:f5:07:bd:c5:cc:6e:d0:9b:87:5b:8d:80:d9:d5:4b:65:
8f:a7:9b:15:fc:fb:de:39:ad:0a:1a:1b:30:9b:ed:71:7a:4b:
d2:bc:b9:8d:b4:3c:c9:57:01:f6:b6:93:5e:1c:77:9c:25:da:
f2:55:a7:46:59:fd:25:21:b7:ec:7d:9c:81:58:ca:53:f5:28:
f6:22:52:48:27:f1:86:63:6c:0a:9e:30:b2:fe:1f:7c:37:d3:
f7:ab:de:84:4a:f1:ac:7a:b6:01:cc:fd:6e:a0:7a:d0:83:e8:
ae:6b:c4:3f:40:f4:85:4b:a9:36:b7:b9:bc:7e:8e:6e:e5:3f:
43:46:51:2b:ac:e8:3d:06:25:6a:92:5a:08:97:23:e2:d1:e4:
90:35:e9:88:09:60:35:fd:a4:01:d2:db:3e:af:9d:e8:bb:52:
aa:8e:5f:67:61:e4:b6:ce:c1:4c:51:80:58:5b:28:12:68:2a:
c8:9c:57:9d:dd:d7:b7:1f:ea:5b:b6:e6:9e:0a:4f:a3:c2:57:
a0:df:35:ad:9a:d4:23:10:e3:06:22:37:f9:5e:18:1a:e2:e7:
71:0d:75:94:5d:b5:a4:b3:24:f5:84:f8:6e:82:50:77:53:55:
82:37:4d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:10 2026 by rpki-client