Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142771.roa
File: AS142771.roa (raw, json)
Hash identifier: 4/4L4idvOtrFsg5B8nOXKiV1PtBxyB0SCqtAA1bEp6k=
Subject key identifier: B9:B3:1C:CC:4C:90:A2:E7:90:61:2B:4A:40:CE:C1:44:41:46:F0:86
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3E220062B6F6026946F3F483FAE616A6A183DDDE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142771.roa
Signing time: Fri 22 May 2026 07:41:21 +0000
ROA not before: Fri 22 May 2026 07:36:21 +0000
ROA not after: Fri 21 May 2027 07:41:21 +0000
asID: 142771
IP address blocks: 240a:a079::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:22:00:62:b6:f6:02:69:46:f3:f4:83:fa:e6:16:a6:a1:83:dd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:21 2026 GMT
Not After : May 21 07:41:21 2027 GMT
Subject: CN=B9B31CCC4C90A2E790612B4A40CEC1444146F086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:1c:95:21:1b:7a:04:92:1f:38:8f:0a:b3:
8e:59:94:f7:47:2e:94:45:32:d7:47:ae:7e:69:bf:
b0:f1:66:a6:46:12:a8:26:d0:ed:c0:f4:a7:16:66:
83:e1:33:36:17:4b:34:27:3b:c7:72:a8:7d:a4:4e:
a3:04:84:77:f5:f5:80:2e:2e:4a:b8:3f:37:08:9d:
af:88:58:5f:60:c4:a2:a0:c1:3f:c1:f5:b5:89:ce:
6a:62:7d:c4:0c:50:25:4f:97:7a:e2:c2:db:d4:08:
c7:48:55:39:88:df:cf:a3:69:3f:16:f3:d4:f2:c8:
36:9e:fa:71:e6:4b:bc:f1:d3:28:70:4c:72:63:2c:
2a:8c:a5:5f:17:54:82:b3:0b:81:91:de:83:0b:c0:
c3:41:1f:61:ea:ab:34:f5:68:21:8e:c7:16:43:b1:
7c:ae:79:d0:49:b5:55:60:83:b4:13:39:07:c8:5f:
5a:fb:57:78:1b:a6:c5:80:ae:c2:92:c0:4c:e7:f3:
61:0b:29:88:5a:bc:19:4c:ee:8c:3c:7e:38:e0:06:
80:72:69:12:13:19:af:38:a9:9d:0e:98:ab:dc:2b:
3b:97:ae:25:ca:14:cc:5a:46:a3:5e:00:4c:43:a7:
f4:8b:5f:59:95:71:30:06:64:9b:51:d2:ec:10:92:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B3:1C:CC:4C:90:A2:E7:90:61:2B:4A:40:CE:C1:44:41:46:F0:86
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142771.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a079::/32
Signature Algorithm: sha256WithRSAEncryption
3d:9a:b4:de:3f:c7:d1:a3:9b:4b:10:65:8c:b5:f4:7d:22:a5:
c8:6d:64:7f:0b:b5:c6:13:4a:84:e8:ab:71:08:17:c6:28:4d:
c5:7d:42:a8:89:da:b3:d8:44:6a:d7:c0:33:ee:96:ed:da:3b:
61:da:7f:a5:05:f6:93:f0:dd:bc:e5:b0:c0:c2:68:d5:ce:94:
b8:62:cd:ec:4a:a4:94:24:2d:86:24:e0:df:50:ec:ad:da:c3:
29:42:c7:31:d4:90:fe:18:c6:0e:2a:d6:85:e7:07:f6:28:23:
be:98:e2:d3:63:da:53:df:6d:08:0d:c7:1b:c7:26:12:3f:07:
dc:d5:f9:59:62:8f:d4:8d:ba:7a:5f:52:6f:97:98:20:84:9f:
bc:9b:d3:6c:cc:cf:e9:39:d8:2d:16:f4:75:53:1a:38:2a:39:
18:6a:bd:cf:ff:d0:85:6c:d2:f0:f8:c6:99:eb:de:94:67:6b:
17:05:1d:a5:46:78:b1:c7:68:18:ee:9a:f5:1e:3a:1f:91:e7:
e0:0d:39:bd:77:d5:fb:51:86:dd:72:79:5a:be:05:da:dc:ad:
9a:83:e0:27:2d:8b:44:7a:98:7f:83:8c:33:70:86:c4:54:ce:
cb:39:75:f6:96:c5:1b:12:96:8e:58:2f:fc:8e:02:fb:34:88:
a3:87:ba:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:47 2026 by rpki-client