Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142987.roa
File: AS142987.roa (raw, json)
Hash identifier: KGF04cNOr5LjAARBHWOJ6R9rImtF3zIvBf9KUBw2odE=
Subject key identifier: 9A:0B:0B:54:86:A4:CC:21:01:21:5B:1C:55:E4:B2:82:A8:E7:DF:42
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 442D79151B8AD1CF28866A82217A049F94AAF335
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142987.roa
Signing time: Mon 25 May 2026 01:38:10 +0000
ROA not before: Mon 25 May 2026 01:33:10 +0000
ROA not after: Mon 24 May 2027 01:38:10 +0000
asID: 142987
IP address blocks: 240a:a151::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:2d:79:15:1b:8a:d1:cf:28:86:6a:82:21:7a:04:9f:94:aa:f3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:10 2026 GMT
Not After : May 24 01:38:10 2027 GMT
Subject: CN=9A0B0B5486A4CC2101215B1C55E4B282A8E7DF42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:42:26:ae:f2:1f:0a:d1:03:40:3f:9f:a0:
84:61:aa:cc:22:fb:b1:e8:87:3b:f5:f7:72:18:53:
3f:81:85:1a:89:70:44:b4:94:4c:83:37:7a:30:7a:
b5:db:9f:fb:f5:f6:f8:c1:ca:80:5b:dc:05:ae:5c:
ad:6b:4a:79:ba:77:01:36:99:69:98:d3:2e:ee:b1:
68:e0:97:bb:b6:5b:5c:00:8b:3b:40:45:de:aa:0f:
1e:5e:44:ea:b6:12:5e:c4:a4:64:38:d0:a8:ee:f3:
44:d5:70:15:4a:bb:e5:58:7c:17:d1:80:e3:c2:1b:
e3:eb:94:c6:b1:21:51:f2:5d:6a:15:b2:89:62:3b:
c8:11:2d:26:63:9e:1c:a2:1f:c6:7a:63:1f:d2:4e:
dd:45:be:4c:43:76:5a:3b:f0:4f:40:84:10:eb:78:
5e:09:d1:c2:71:13:87:3a:21:7b:7c:03:73:74:a4:
45:02:7c:3a:15:dc:bf:a5:5e:7f:3a:78:7f:1e:07:
ee:42:d9:e4:93:7b:4d:18:00:61:ab:58:c9:76:83:
cc:f5:40:ab:d9:7a:2f:af:7d:b7:bc:ce:c2:14:07:
5c:a5:fe:cb:55:16:cd:b8:01:12:c9:6f:36:51:4a:
b1:6a:c7:a7:82:07:95:c7:c1:d5:a0:06:a3:45:f2:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0B:0B:54:86:A4:CC:21:01:21:5B:1C:55:E4:B2:82:A8:E7:DF:42
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a151::/32
Signature Algorithm: sha256WithRSAEncryption
4b:99:24:1b:f6:ab:84:9d:d6:f5:01:bf:f0:4a:77:9c:71:f6:
66:5f:b4:cb:d1:17:95:16:37:48:8a:8f:6e:19:b5:6b:99:52:
31:93:16:e8:be:f1:d5:c8:1c:3a:ab:a2:10:44:80:86:65:ea:
02:c7:fa:87:b0:bd:18:eb:3c:e8:2c:b0:49:b5:fa:2a:1e:42:
b4:5b:76:19:da:2c:45:80:43:aa:53:e7:e8:52:b8:50:84:6c:
f3:9a:f6:a7:5d:b0:43:0c:6b:3d:ef:33:9b:9d:82:68:b9:c1:
36:e1:ae:77:55:6f:15:f5:34:c2:47:62:6d:e7:76:10:b7:44:
f2:70:d6:06:86:49:82:38:12:64:45:ab:41:03:72:ec:21:02:
59:13:e2:0e:c3:4a:90:73:b1:9d:86:e9:cf:06:47:3c:f9:f8:
d5:c1:57:d7:5f:d2:0c:48:96:d7:e5:5f:18:ea:f7:ed:77:5d:
81:57:11:97:3b:35:2e:ab:c8:33:5f:e5:59:f3:fc:69:32:d5:
da:01:51:6c:94:65:7a:68:b2:11:48:fa:b3:37:c5:96:0b:c9:
07:40:35:6b:13:69:45:dc:ed:58:6e:8c:ef:66:05:7d:f1:67:
8b:19:1f:dc:af:e1:c4:26:0c:73:c9:11:63:a9:a5:6f:8a:55:
72:c4:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:57 2026 by rpki-client