Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142671.roa
File: AS142671.roa (raw, json)
Hash identifier: IcJa+rfZZTFz2bXhwGm5NvKFaj5Lu/znfZW/8OOJaAk=
Subject key identifier: C2:1A:F6:BA:43:D2:13:B2:D1:5D:8B:CC:3A:25:CC:1A:02:4D:C3:7A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 020B83DDABC5E265071C1193E29E6BC20BACEA61
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142671.roa
Signing time: Tue 26 May 2026 08:52:51 +0000
ROA not before: Tue 26 May 2026 08:47:51 +0000
ROA not after: Tue 25 May 2027 08:52:51 +0000
asID: 142671
IP address blocks: 240a:a015::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0b:83:dd:ab:c5:e2:65:07:1c:11:93:e2:9e:6b:c2:0b:ac:ea:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:51 2026 GMT
Not After : May 25 08:52:51 2027 GMT
Subject: CN=C21AF6BA43D213B2D15D8BCC3A25CC1A024DC37A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:2c:4b:93:4c:08:d4:cd:c9:05:bb:27:34:
3d:e1:ec:9d:f9:a3:3c:59:02:1d:de:65:19:99:69:
81:c8:43:2c:7c:a7:70:1d:77:1f:96:77:1f:b1:85:
78:b4:4f:e9:76:73:ba:2e:7f:3b:b8:55:3a:fa:8f:
2a:40:5c:77:e6:6a:5a:87:24:82:ab:7a:24:5d:b7:
c7:18:04:94:fa:b3:c6:ba:e3:e6:35:38:38:99:dc:
21:55:1b:69:3b:77:d2:57:42:2f:ec:8a:5c:33:bb:
d2:65:d2:13:a8:60:11:68:01:79:f0:9d:bf:43:1f:
57:d9:01:76:4c:c5:54:e9:69:fa:56:64:c0:ce:eb:
7f:50:55:e4:da:be:62:36:6e:5b:90:db:57:44:11:
47:0e:fb:75:da:03:26:27:02:f2:ee:4d:b8:a3:05:
a5:0b:31:d9:7d:11:08:a8:23:53:c1:da:67:70:11:
25:42:fe:a7:3f:64:56:0d:f6:ff:c9:0e:e4:82:60:
6e:b4:04:47:6e:08:7b:09:c6:10:9c:fa:72:af:47:
b8:6d:41:43:fe:e1:3a:e8:46:03:f9:1f:26:21:6c:
70:86:e7:44:6c:93:c3:59:63:d9:4c:82:2b:af:93:
57:b8:fb:58:e7:92:86:df:08:64:78:40:45:00:91:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1A:F6:BA:43:D2:13:B2:D1:5D:8B:CC:3A:25:CC:1A:02:4D:C3:7A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a015::/32
Signature Algorithm: sha256WithRSAEncryption
2d:33:c2:61:86:91:91:a6:3e:9c:d3:15:c9:56:98:97:13:37:
9b:14:90:5b:90:e4:a4:22:a8:8e:60:ad:ff:b3:e9:6f:a9:6c:
db:cf:42:48:7b:92:e2:f7:3b:79:7f:44:e3:cb:9e:fb:6e:13:
15:fd:45:7a:cf:b8:46:12:20:6b:6a:7e:df:82:a1:69:a9:42:
cd:99:08:f0:af:6a:ba:39:c6:5e:f0:94:84:30:b0:d2:2f:d2:
78:22:14:30:69:bd:c3:39:79:43:55:5b:ae:77:f7:ae:3e:7e:
cf:bf:a2:5c:01:03:ac:71:74:ee:c1:26:c2:93:50:b0:60:95:
1d:16:03:cd:0a:32:93:3f:8f:62:d1:45:4f:49:20:d2:c3:d4:
78:f7:61:64:a0:a6:06:58:b8:56:db:f3:56:93:fa:c0:24:52:
56:69:22:90:01:84:b0:f2:e1:89:5a:c8:ce:b4:a5:b6:af:1a:
4a:f3:2e:77:c4:38:c5:27:d7:f2:6b:06:88:12:04:82:07:2a:
ce:be:d7:10:03:97:db:cd:7b:d1:e2:f1:92:22:4d:a8:e0:d5:
71:2e:37:fb:30:3b:23:7c:99:72:ef:1f:3b:a1:c7:a4:f5:e7:
f7:83:c0:f4:2b:a2:27:09:31:e2:60:ed:aa:81:df:7f:ee:89:
52:2a:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:54 2026 by rpki-client