Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142777.roa
File: AS142777.roa (raw, json)
Hash identifier: ZFf1mYvLcdXYPT8qwIw1/eI1LTTpk9+vnNP0pkBz1Es=
Subject key identifier: 65:FD:4F:06:15:EA:BE:28:5A:9F:90:04:D7:0E:CA:A0:9F:FC:AA:7B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 35B95CEF01FC0F3C0A88AD4457D87A39FAE7209D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142777.roa
Signing time: Fri 22 May 2026 06:46:12 +0000
ROA not before: Fri 22 May 2026 06:41:12 +0000
ROA not after: Fri 21 May 2027 06:46:12 +0000
asID: 142777
IP address blocks: 240a:a07f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b9:5c:ef:01:fc:0f:3c:0a:88:ad:44:57:d8:7a:39:fa:e7:20:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:12 2026 GMT
Not After : May 21 06:46:12 2027 GMT
Subject: CN=65FD4F0615EABE285A9F9004D70ECAA09FFCAA7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:87:05:66:e9:b0:37:d6:93:53:7e:cf:a9:
7a:c3:52:24:f2:bb:66:13:3b:24:65:23:9a:c7:67:
9f:ae:99:37:42:d2:ad:db:3d:df:a0:8e:d9:67:12:
7b:d3:33:91:a7:06:63:82:10:d8:7a:13:f9:ea:2b:
78:2d:90:33:ce:6a:d0:d3:0a:47:61:fa:42:26:f3:
ff:c1:c9:be:95:0e:8b:ee:0e:3d:87:82:6c:2f:10:
70:0c:3f:9a:c7:3c:46:32:a7:5d:6c:1d:3c:4e:9b:
65:15:cf:03:d9:7c:9c:4a:df:55:44:ff:72:9c:6b:
fe:e5:b9:df:fa:94:31:a3:5a:07:dd:a3:eb:d0:00:
8f:bc:15:06:da:bd:4a:2b:47:3a:d8:df:90:14:55:
b6:44:30:07:b5:74:32:69:6e:bf:07:5e:43:55:ea:
59:8d:38:d2:e0:a5:13:c6:8e:6f:40:1e:ca:75:92:
73:a4:e6:90:f6:32:35:1c:2a:6f:39:4d:ea:80:8c:
35:be:56:dc:a1:18:71:e5:90:84:c7:aa:3a:ae:7e:
96:27:ef:09:40:78:16:dd:b0:e4:af:4e:44:a6:07:
22:e9:ef:ca:8f:55:5f:0c:0e:15:34:db:89:a8:f5:
62:a3:5d:35:6f:88:0c:f3:f8:83:33:7a:39:8f:90:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FD:4F:06:15:EA:BE:28:5A:9F:90:04:D7:0E:CA:A0:9F:FC:AA:7B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142777.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a07f::/32
Signature Algorithm: sha256WithRSAEncryption
03:fc:1b:b2:b8:6f:55:38:b9:81:b7:cc:6e:44:f8:04:62:f2:
47:c3:3e:50:b0:29:99:27:7c:3f:00:ad:57:cd:bb:be:ed:87:
aa:02:56:32:41:61:38:bd:43:6d:db:e2:5d:1b:ad:07:f1:01:
f7:47:a3:26:dd:da:87:c9:3c:0c:d3:0e:9a:4d:d6:a5:93:58:
4e:98:59:03:20:a7:73:31:9f:87:e0:2d:fc:4e:71:46:ab:54:
39:ef:82:34:bc:be:60:b1:9f:ed:58:11:f5:5c:a1:15:81:5e:
29:b3:f0:4f:7f:c9:32:f4:74:a4:d8:e3:08:c6:25:26:52:0d:
bb:9e:a8:75:33:99:df:a3:c1:64:c5:79:eb:0d:28:80:49:86:
3a:69:e2:72:11:b3:22:b5:87:b2:a8:3b:02:64:30:67:36:0b:
c8:3a:b1:8c:8e:c0:9b:39:c7:98:99:c9:54:9a:e3:c4:a7:b6:
f7:77:7c:63:17:59:18:43:fc:47:cc:0d:9d:e7:46:2a:a8:2e:
cf:7d:97:e9:9c:82:f1:26:4a:8d:e8:de:7b:a8:0c:eb:ce:ea:
4c:39:36:5f:ec:df:2f:d8:07:28:ac:f9:51:b0:40:fe:1a:e4:
ae:a8:57:9e:9d:36:8f:f2:ed:cb:2f:04:39:ce:a7:c3:fb:3c:
00:f1:b4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:14 2026 by rpki-client