Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142972.roa
File: AS142972.roa (raw, json)
Hash identifier: LY1fe9Udam/ERY3tmqa/29jDejuVW0etQSG4JMC+y24=
Subject key identifier: D1:0F:8D:AD:3F:87:71:5A:20:F9:7C:7B:A1:F1:C4:10:8B:A2:98:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 650DCA167D8563EF11BB33B9E6C94F6E9F72D1DF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142972.roa
Signing time: Fri 22 May 2026 07:24:50 +0000
ROA not before: Fri 22 May 2026 07:19:50 +0000
ROA not after: Fri 21 May 2027 07:24:50 +0000
asID: 142972
IP address blocks: 240a:a142::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:0d:ca:16:7d:85:63:ef:11:bb:33:b9:e6:c9:4f:6e:9f:72:d1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:50 2026 GMT
Not After : May 21 07:24:50 2027 GMT
Subject: CN=D10F8DAD3F87715A20F97C7BA1F1C4108BA29810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e9:61:8a:14:e3:71:4e:3a:86:88:a9:0c:6b:
9a:76:3c:9f:7f:9e:cb:e4:f8:b8:5b:02:42:7e:9a:
fb:9d:d5:f7:e4:3a:5d:d6:d2:38:96:87:49:9f:99:
a4:31:9f:17:14:78:4b:59:6c:84:45:9f:30:ef:a5:
23:e5:de:12:73:98:b1:a3:9f:64:29:b3:0b:d5:ff:
45:67:18:d9:43:59:40:3a:91:1d:7a:dd:f6:2f:32:
00:65:52:09:71:c6:92:04:a4:fd:ae:5b:96:ac:34:
c8:09:cb:5b:02:89:96:d7:54:37:26:d7:d1:57:bb:
ed:9e:7c:5e:52:c9:bc:56:bd:ce:a7:87:37:54:81:
46:31:6f:29:2f:f3:21:0f:92:91:37:91:a4:56:ab:
2e:45:b8:b3:be:24:8b:0f:13:5f:d8:d0:54:5f:79:
41:5a:91:d7:66:20:be:61:76:f9:61:52:db:63:fc:
c9:05:dd:23:80:a0:f6:d7:2d:5d:1e:d8:30:5c:9b:
d1:b3:c8:89:52:38:7d:16:8d:8d:3e:a4:a1:90:1c:
5a:5d:17:c8:be:7f:43:c9:6d:f3:8e:71:11:ba:09:
68:22:aa:4e:6f:1f:65:bc:11:9e:47:08:c7:21:f2:
5e:08:81:6f:79:be:cb:72:6e:7a:bb:f2:1a:9a:a6:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0F:8D:AD:3F:87:71:5A:20:F9:7C:7B:A1:F1:C4:10:8B:A2:98:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142972.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a142::/32
Signature Algorithm: sha256WithRSAEncryption
57:61:90:1e:6d:32:06:53:77:34:98:53:15:c4:65:25:b0:94:
d7:06:a9:ad:be:cc:e0:3f:79:ee:c9:7e:2c:90:41:07:79:c7:
a2:87:79:d1:d2:d1:b1:3c:72:a2:db:e5:dd:bb:92:a7:81:86:
88:75:65:c9:99:34:98:09:5b:c9:98:e6:20:13:ad:5c:63:92:
8a:22:ef:de:c6:6a:d7:46:0a:85:f2:58:50:90:ad:8e:49:ea:
1e:30:f0:98:93:44:1a:49:d5:aa:db:d7:cb:cd:02:23:b2:ed:
de:ef:8c:d0:08:1d:60:71:5d:4c:a6:e1:f1:66:86:56:51:c3:
08:97:4e:51:f0:e9:c7:64:b1:fa:ea:21:98:bc:1b:75:6e:7c:
d4:41:c2:f6:0d:38:ef:9a:6a:47:a4:ce:be:80:3c:26:e0:86:
66:26:ce:a7:1c:ec:ec:34:8c:e5:37:63:4d:8a:33:4d:94:7a:
44:4b:06:76:81:d4:c7:6c:e0:40:c9:bc:b6:7f:0a:65:19:87:
48:36:61:75:7d:a3:4a:66:a9:4f:4d:af:1d:a7:ce:cc:1d:f0:
02:62:9c:66:f4:21:6c:15:ed:fa:26:f3:15:c9:c9:a5:c1:1a:
5d:3c:53:76:27:30:e4:b6:b7:de:23:f1:71:a1:95:c8:31:37:
26:e5:43:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:49 2026 by rpki-client