Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142983.roa
File: AS142983.roa (raw, json)
Hash identifier: bj+GemhvYXd/IPmszEhKm2KvvQFZRGBI2GxuSOIkanY=
Subject key identifier: 92:21:07:3B:E9:A9:01:E2:4F:6E:31:61:25:99:6C:8A:35:CD:2D:6F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1FB6195B81E5711A2B5C250E611E1F7F46A05090
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142983.roa
Signing time: Fri 22 May 2026 04:26:40 +0000
ROA not before: Fri 22 May 2026 04:21:40 +0000
ROA not after: Fri 21 May 2027 04:26:40 +0000
asID: 142983
IP address blocks: 240a:a14d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b6:19:5b:81:e5:71:1a:2b:5c:25:0e:61:1e:1f:7f:46:a0:50:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:40 2026 GMT
Not After : May 21 04:26:40 2027 GMT
Subject: CN=9221073BE9A901E24F6E316125996C8A35CD2D6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:15:11:65:f9:5a:2a:65:88:95:4d:7b:48:e7:
e8:31:c0:82:8b:0b:c8:82:80:df:d9:00:69:da:1a:
cc:ac:1e:23:54:be:57:3d:96:6d:9c:94:5c:c6:49:
15:36:55:47:1c:6f:fb:de:03:c6:b0:0d:ea:5d:52:
74:9c:a5:57:ed:f2:3e:8f:46:1f:67:23:b0:f4:5c:
00:12:e5:ab:f4:af:97:7e:7d:10:36:e4:86:a6:35:
26:8a:76:20:2f:71:ac:33:06:e0:7b:d3:cf:4d:5b:
cd:7d:d3:25:7f:1f:a7:b3:98:42:ff:18:e3:2d:a4:
28:02:dd:8a:c8:d4:69:ce:2c:b3:af:ed:32:88:4c:
dc:69:5b:e6:4d:12:b7:76:55:b4:ff:c7:6d:2f:c5:
af:b7:9d:de:de:b9:3a:a6:ce:e4:f4:bb:b1:a7:5d:
ce:ec:33:30:7f:0c:56:bc:59:f2:69:14:90:20:ed:
a9:2a:4e:5a:b3:cc:16:05:b6:ca:26:15:b1:a1:fe:
40:b7:fa:3c:56:b2:96:fc:07:c5:06:a2:49:f1:b9:
85:f4:7b:1f:5b:12:c3:40:76:a1:18:f5:b4:e1:ea:
64:e5:1e:dd:7b:63:f1:70:3c:ad:ac:59:2e:03:69:
95:1e:04:40:4e:46:35:09:24:dd:38:6f:81:b3:3e:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:21:07:3B:E9:A9:01:E2:4F:6E:31:61:25:99:6C:8A:35:CD:2D:6F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142983.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a14d::/32
Signature Algorithm: sha256WithRSAEncryption
15:da:32:03:3d:65:e9:ff:82:f9:a3:42:ea:fe:2a:97:6d:35:
e4:4a:8a:f9:09:23:50:ae:18:04:bf:03:1b:67:ff:da:de:d1:
c6:c0:17:64:02:64:53:c9:28:d6:c2:da:95:7e:cd:1f:c9:b7:
0e:ba:72:75:7b:2c:fe:2a:3b:1a:cb:ac:73:09:bb:11:f3:50:
66:33:b8:20:df:ca:87:4a:a0:51:3e:28:88:b0:3d:29:37:2c:
2d:44:bf:f0:69:65:63:6b:79:5e:7a:c7:43:d7:58:e9:1b:2d:
02:93:e4:3c:f1:6d:8f:4c:88:83:53:ec:8f:96:94:0a:d8:6b:
48:34:58:9f:fe:f8:ca:0b:aa:e3:b3:56:11:16:b6:24:b0:4f:
e5:de:47:2a:c4:78:6f:a4:85:78:a8:3d:be:96:f7:c4:3c:eb:
79:40:f3:74:eb:7d:4a:ef:9d:40:53:07:7b:7c:fe:df:cd:ac:
c5:5d:aa:e1:92:13:ac:a9:04:b5:fd:50:dd:3a:18:d9:d2:12:
9a:0b:53:5c:c7:2b:91:09:4c:a8:c0:22:7d:36:30:e4:02:03:
b0:66:a9:00:80:04:c6:b6:6f:51:95:c6:4a:38:e6:e9:9d:95:
4a:4b:8e:a4:fa:85:d8:cf:d0:73:43:55:26:69:91:2d:d7:eb:
0e:b9:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:08 2026 by rpki-client