Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142977.roa
File: AS142977.roa (raw, json)
Hash identifier: 7AgTWRo180ZUVFQJpGfdAfzWwKVe5i5E1N9yfHKZTuI=
Subject key identifier: AD:3B:01:EC:F1:C7:BE:7F:44:C6:6F:59:A2:46:B9:DA:0B:2C:6A:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 438D65B7329EF684F9A50FCC73C74A59F178CD09
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142977.roa
Signing time: Fri 22 May 2026 04:08:22 +0000
ROA not before: Fri 22 May 2026 04:03:22 +0000
ROA not after: Fri 21 May 2027 04:08:22 +0000
asID: 142977
IP address blocks: 240a:a147::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:8d:65:b7:32:9e:f6:84:f9:a5:0f:cc:73:c7:4a:59:f1:78:cd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:22 2026 GMT
Not After : May 21 04:08:22 2027 GMT
Subject: CN=AD3B01ECF1C7BE7F44C66F59A246B9DA0B2C6A1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:25:3d:63:88:ce:b6:f2:90:4a:6a:ec:4c:
fe:9e:8c:90:43:da:84:23:98:a2:8f:11:84:09:90:
98:3a:bd:5a:bd:be:8c:4b:b5:60:94:56:0d:fe:7d:
70:88:f9:90:05:64:a8:b2:6a:15:5b:69:c7:5f:af:
9f:20:48:36:d9:d7:3a:00:c2:d3:8e:01:48:77:77:
c4:43:24:50:f7:99:d6:69:17:f2:ae:b5:36:ba:f5:
af:e2:d1:2e:1c:2e:28:d6:6b:9b:4f:82:7c:4a:27:
52:9d:b4:55:59:3c:a2:99:0c:91:ab:53:28:1c:2b:
94:d9:71:c7:2f:6a:83:da:62:86:66:22:4f:b4:0f:
e6:d6:3d:07:64:52:4b:40:a6:3d:e0:ff:c3:3e:85:
0c:88:6b:81:b7:79:54:ba:8e:49:dc:d6:04:48:ce:
1b:ca:83:04:4c:7b:95:9d:84:ae:34:e9:56:77:0c:
2a:12:06:38:e3:9e:fd:d6:75:4e:27:bd:e1:29:4c:
68:26:15:16:32:a3:33:a9:b7:60:1a:f3:56:41:9b:
3f:5b:b2:fa:ea:60:c4:b6:3a:5b:5e:09:0b:e9:b1:
7e:cc:97:1b:1e:62:1e:56:c2:e4:a2:98:9e:41:a7:
3e:aa:01:14:c6:ac:74:ac:a9:aa:dc:cf:fd:77:7a:
04:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3B:01:EC:F1:C7:BE:7F:44:C6:6F:59:A2:46:B9:DA:0B:2C:6A:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142977.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a147::/32
Signature Algorithm: sha256WithRSAEncryption
22:17:09:dd:c5:d9:02:60:f8:a9:4e:16:3b:80:54:f6:42:0a:
67:63:5a:eb:d5:14:c3:c9:ef:76:a4:9d:90:15:93:3e:ec:6f:
e9:60:ab:d8:94:2a:f8:ae:38:b4:13:b9:8f:71:ff:9a:10:ac:
75:31:ce:62:f6:53:18:76:76:f7:59:df:08:1e:5e:04:cd:2d:
a9:16:ac:6d:94:60:68:97:f0:83:45:32:cc:a9:3a:54:e8:1f:
df:5c:29:e4:5b:7f:8f:67:f0:22:65:41:f9:32:56:35:e0:e0:
d6:fe:80:c4:b5:a2:85:b9:c4:d5:db:6a:95:bf:93:06:6b:ef:
ea:85:d8:8d:65:a3:21:86:ca:52:04:34:d3:79:f9:4c:83:f1:
43:e1:71:dd:d7:a5:2a:d2:a1:b8:ab:58:3a:18:e7:00:d0:06:
29:4a:0f:c2:af:2b:1f:04:a6:7e:32:1b:1d:e6:6b:52:96:4b:
6e:5e:04:ed:be:88:c1:ec:82:3e:b5:8e:7d:64:86:41:6b:b8:
54:6d:0d:cf:69:63:85:0e:04:e4:cc:39:04:ee:a1:ce:20:34:
a7:27:84:31:38:31:5a:02:30:a9:33:3d:72:d6:d4:8b:d7:c6:
7e:c4:5a:62:f1:90:e4:af:98:e3:3c:d8:11:48:4a:c5:2d:a4:
f0:b5:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:33 2026 by rpki-client