Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142991.roa
File: AS142991.roa (raw, json)
Hash identifier: IxTPW2xDhgXI80kYVbM+dj+nmEWGKmRK9lz3X5XHBIk=
Subject key identifier: 03:9F:61:2C:07:4B:97:28:68:D0:80:F4:1E:FA:BE:F2:98:B9:4E:4A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 708334A8E535509E084980C279AF468D2AD487E9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142991.roa
Signing time: Fri 22 May 2026 07:09:18 +0000
ROA not before: Fri 22 May 2026 07:04:18 +0000
ROA not after: Fri 21 May 2027 07:09:18 +0000
asID: 142991
IP address blocks: 240a:a155::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:83:34:a8:e5:35:50:9e:08:49:80:c2:79:af:46:8d:2a:d4:87:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:18 2026 GMT
Not After : May 21 07:09:18 2027 GMT
Subject: CN=039F612C074B972868D080F41EFABEF298B94E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:3f:83:e9:27:0b:0d:ef:dd:ba:dd:47:c1:
e5:7e:25:48:75:a4:6a:fb:b3:be:58:6f:4c:79:45:
e8:dc:7d:d7:b0:c9:cb:53:7d:91:fe:eb:d7:99:10:
fc:86:1b:42:e7:64:ff:0e:1a:d9:69:d6:76:43:97:
4e:92:13:f7:f3:04:73:fc:49:8e:1d:33:c7:c0:07:
8d:78:37:e7:71:89:57:9b:78:83:53:47:46:dd:7b:
b0:2e:65:3e:99:c5:cf:2d:a2:5e:02:f1:8b:e1:55:
0f:61:86:bb:1e:3e:9d:89:6a:c3:b5:50:8b:6c:be:
00:e1:c0:64:73:f0:00:db:0b:f2:ce:54:e2:d5:85:
92:2e:8a:ab:eb:b7:59:a4:46:cf:2a:95:77:c9:2c:
22:fd:b0:b2:56:44:aa:57:ca:16:f2:70:af:9b:ab:
c9:50:21:bc:0c:ea:85:39:42:53:7f:70:9e:50:81:
43:24:4d:5d:73:c0:ea:c4:1a:8b:4c:7b:02:d0:82:
87:b8:06:9f:98:50:b5:23:4c:1d:ae:18:7e:96:4b:
04:d9:f0:ce:24:4e:e2:05:95:49:b2:b2:ce:e0:68:
b7:b3:a4:e9:5e:b8:87:36:16:cf:a0:27:43:4c:9c:
82:f3:57:fa:92:0f:0a:69:ec:aa:85:b6:13:af:8d:
87:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9F:61:2C:07:4B:97:28:68:D0:80:F4:1E:FA:BE:F2:98:B9:4E:4A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142991.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a155::/32
Signature Algorithm: sha256WithRSAEncryption
b1:9a:5a:0e:b9:ea:43:5f:51:2a:c1:3e:35:b4:ee:28:47:4a:
98:78:7d:3e:90:4b:45:d0:0c:cb:ef:ba:b1:1d:4a:2e:09:66:
5d:82:04:0d:6e:62:e7:88:de:a9:16:b5:94:67:a5:b3:d3:98:
e6:c3:c9:c8:63:bb:82:e5:e0:94:03:1d:be:24:e1:f9:1d:11:
4b:86:12:b3:4d:0a:4f:d0:c6:e3:a5:71:cf:3b:54:e3:65:d1:
fa:b3:92:05:6d:28:fd:05:fe:25:6e:3a:e6:e6:7d:1e:d1:48:
8e:5a:0c:15:44:68:b1:96:64:7b:aa:fb:f6:b4:28:55:81:c7:
f5:7a:01:2b:f3:e6:0b:87:52:eb:7b:d8:f9:2d:5e:20:b1:f2:
6e:27:43:d0:39:55:a7:f6:e3:8e:e2:f0:af:9a:48:0a:8a:8b:
44:81:83:28:c2:a1:db:50:81:e8:75:b9:2d:2d:12:fb:bd:20:
9c:78:ff:a0:6f:3c:86:98:79:c0:37:a5:4e:39:34:c2:a1:86:
f4:d3:4b:22:22:39:5d:3e:1b:a9:0a:29:c3:ec:0a:1e:a4:b1:
72:0c:7a:39:ab:c0:47:d1:92:87:1e:df:09:33:ca:72:4a:75:
bd:f3:c6:45:a9:60:7d:07:1f:e6:14:a9:a2:2a:36:4d:8c:f3:
cc:c1:fa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:52 2026 by rpki-client