Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142947.roa
File: AS142947.roa (raw, json)
Hash identifier: SjV5MQ/lmNsyI5qIPVPXV4olVXfLXDpgiN4oiSPktdQ=
Subject key identifier: 60:FF:FF:A4:A4:AB:C1:BF:DC:EE:20:52:72:9A:7A:30:21:1F:53:30
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4E94BBBF905F3F3BB3055A87345093223AA0562C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142947.roa
Signing time: Fri 22 May 2026 02:48:06 +0000
ROA not before: Fri 22 May 2026 02:43:06 +0000
ROA not after: Fri 21 May 2027 02:48:06 +0000
asID: 142947
IP address blocks: 240a:a129::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:94:bb:bf:90:5f:3f:3b:b3:05:5a:87:34:50:93:22:3a:a0:56:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:06 2026 GMT
Not After : May 21 02:48:06 2027 GMT
Subject: CN=60FFFFA4A4ABC1BFDCEE2052729A7A30211F5330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:e2:10:77:34:59:82:1f:b3:57:66:90:11:
c3:d6:4e:50:cb:19:66:2e:1b:c7:c5:09:25:96:a0:
8f:98:5e:f1:fc:5d:54:2e:d5:7e:ce:fc:7d:ec:7e:
0f:90:ca:12:24:92:e0:51:b9:5e:dd:4f:08:f9:b9:
1d:60:be:37:5f:c7:eb:13:e2:32:99:73:be:2d:3f:
be:32:4a:ae:a4:af:83:05:56:55:1f:0f:c3:62:21:
9c:4c:0e:1c:85:9e:fa:01:ec:9b:9d:13:06:b7:ae:
09:09:40:7a:9f:be:34:35:4b:ae:78:91:01:aa:69:
3d:64:f3:da:3a:38:98:e5:91:12:41:f3:2d:bd:1c:
76:ad:ef:03:26:53:82:03:53:78:84:be:68:6f:1d:
24:f5:d5:a0:37:28:5f:55:50:85:34:85:d2:71:ff:
c2:ac:f3:67:cd:49:f2:1d:96:fc:e1:67:c9:00:9d:
35:94:81:3c:1b:be:8f:ce:67:1a:c9:ea:d5:a9:8b:
97:cc:02:11:43:8f:0f:db:97:09:6b:1a:0d:88:17:
65:92:25:3e:ec:44:aa:51:51:f6:eb:bc:72:b4:66:
e7:0f:35:d5:47:0a:f6:dc:1d:58:ec:2b:97:54:74:
8b:d1:18:78:51:9c:64:18:ec:d6:5b:2a:66:77:9d:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FF:FF:A4:A4:AB:C1:BF:DC:EE:20:52:72:9A:7A:30:21:1F:53:30
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a129::/32
Signature Algorithm: sha256WithRSAEncryption
47:68:7b:f3:66:b8:16:b9:38:0f:01:a1:18:26:61:43:0d:e9:
f0:41:02:66:6b:b0:04:09:18:2c:50:19:58:c6:5d:50:c6:60:
c1:d3:19:76:4d:df:82:cb:5f:e3:29:d6:7f:5f:19:4b:ee:36:
00:51:52:37:b4:66:bb:20:4c:f0:d3:34:7d:4d:1b:af:dd:07:
de:50:19:b7:1b:e7:c9:bd:35:dc:d0:da:e6:31:e8:e2:00:bd:
47:c1:1a:a6:56:d4:b8:2a:02:19:04:e8:f0:bb:5c:f3:c1:04:
b4:f7:a6:8b:6e:d9:42:a8:7a:31:71:40:9f:d0:7a:be:d3:b1:
46:8c:2d:af:63:d3:1a:25:a8:e1:12:bc:a3:4e:70:7a:6f:f8:
e8:fe:db:b3:c0:72:99:47:82:57:0a:e1:98:17:80:29:1b:2e:
88:46:98:79:fb:83:0d:f0:eb:47:54:55:cb:33:20:e0:ae:35:
2f:3c:40:91:5f:24:e5:49:5d:d4:bc:fa:93:39:f8:3e:30:ae:
90:07:6b:48:86:63:63:d0:b1:36:bb:d9:28:2a:7b:20:80:da:
71:63:08:e6:14:26:ff:3c:ac:84:8e:57:83:88:df:68:89:b8:
c9:36:ac:b7:21:49:d2:da:9d:d3:d9:e0:f1:c4:93:fe:9e:93:
28:da:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:39 2026 by rpki-client