Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142984.roa
File: AS142984.roa (raw, json)
Hash identifier: 1Ct8aQD1x6Ld8XXdIyfgDiZ8mSCJ88Ww7rwL4qaLlQI=
Subject key identifier: D5:FF:7E:CB:A7:3E:38:00:4F:96:70:37:8C:D5:20:39:71:5D:F1:BB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 40FEC3700EBF4C2DC7BC6ABA32C1BD9903F9C9D0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142984.roa
Signing time: Fri 22 May 2026 04:26:39 +0000
ROA not before: Fri 22 May 2026 04:21:39 +0000
ROA not after: Fri 21 May 2027 04:26:39 +0000
asID: 142984
IP address blocks: 240a:a14e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:fe:c3:70:0e:bf:4c:2d:c7:bc:6a:ba:32:c1:bd:99:03:f9:c9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:39 2026 GMT
Not After : May 21 04:26:39 2027 GMT
Subject: CN=D5FF7ECBA73E38004F9670378CD52039715DF1BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:ac:80:44:1b:bb:59:3d:ac:91:46:f6:42:
9f:cb:f7:fb:9f:20:3a:60:b2:7f:58:f8:30:e3:78:
8a:fa:84:4c:3b:0c:a2:4c:bc:cc:e9:79:51:39:f2:
90:6c:05:8d:9f:e9:04:24:10:93:3c:64:56:f4:a9:
45:34:fc:30:c7:b5:0f:a5:b6:28:34:ab:5d:7e:78:
e4:6e:74:3e:aa:82:0c:b7:cb:31:43:4f:ad:45:ba:
75:9f:f2:1c:5b:a8:35:b7:71:a5:a5:59:82:d8:b4:
3f:9c:7c:fe:11:27:42:5b:64:66:1c:14:59:c7:8f:
dd:63:3f:9b:2f:c4:f5:34:de:f6:60:17:47:90:34:
6c:f5:4b:8b:ca:b3:e2:1d:06:cd:b8:42:92:af:31:
6d:31:8f:32:4c:59:4c:3e:88:09:f9:5b:e2:b4:ab:
33:8f:1a:c2:4f:81:4f:e1:f8:30:11:05:80:eb:f5:
c8:4f:01:a3:85:87:4d:cb:87:a7:60:62:3b:ad:90:
bc:89:88:d3:71:48:9a:72:83:c8:58:30:4a:26:45:
ae:fc:d0:e2:5f:77:19:37:ee:bd:05:7b:78:a3:00:
eb:52:22:e8:24:fa:74:b6:45:83:a2:91:dc:b5:41:
0a:d1:64:66:a9:6a:59:20:2c:22:df:84:40:52:fb:
f6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FF:7E:CB:A7:3E:38:00:4F:96:70:37:8C:D5:20:39:71:5D:F1:BB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a14e::/32
Signature Algorithm: sha256WithRSAEncryption
44:5a:18:5b:66:97:17:a9:4d:8a:66:f4:97:aa:3c:df:30:19:
80:29:fc:f6:19:ac:5d:75:b8:69:1a:26:eb:6e:77:4e:27:ba:
82:87:50:9d:64:b7:2a:16:26:aa:81:d7:d2:57:b9:e6:c9:32:
79:bf:e2:e7:3b:aa:64:bf:a0:74:01:6f:e6:65:5c:6a:ad:d5:
f7:9d:ea:68:34:84:83:3a:54:44:d3:23:e8:f6:5c:65:e6:5d:
54:7c:53:8e:cc:0c:fd:ad:18:27:1a:65:f7:15:7a:c4:60:af:
b6:d6:7e:3f:9d:23:49:89:73:12:2a:4c:2e:91:25:a1:8f:15:
91:cc:65:e4:5b:db:84:61:65:d3:3c:0d:a3:96:3a:40:31:23:
c7:01:b8:67:38:05:46:33:50:05:f5:bb:c5:30:73:0a:fe:dd:
83:55:63:fc:94:8b:d0:8e:65:53:7b:0e:ee:ca:77:73:86:31:
46:a3:23:63:78:35:ac:15:94:44:b8:fd:4a:0c:dd:83:ca:72:
ac:ca:46:1f:d9:06:39:54:f6:35:93:2e:ad:ff:6c:05:29:6b:
01:b4:b1:db:37:56:fb:4e:6c:4e:1c:ba:b1:ff:1f:fb:a4:92:
e4:cb:1e:a0:e3:f3:21:c9:af:6d:ef:25:ec:dd:90:f6:5f:3a:
35:bb:80:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:35 2026 by rpki-client