Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142997.roa
File: AS142997.roa (raw, json)
Hash identifier: mv8onkGxsRG5p9s/5mtHYDkV6mQPz6Z7SWuevH5Ci/I=
Subject key identifier: 33:67:21:17:40:0C:20:37:E1:0F:59:DD:9D:38:FC:6B:15:04:3F:62
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 270FFC22F69DC711B4CDD3B47F60D1D4B5BFBDB7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142997.roa
Signing time: Tue 26 May 2026 03:16:38 +0000
ROA not before: Tue 26 May 2026 03:11:38 +0000
ROA not after: Tue 25 May 2027 03:16:38 +0000
asID: 142997
IP address blocks: 240a:a15b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:0f:fc:22:f6:9d:c7:11:b4:cd:d3:b4:7f:60:d1:d4:b5:bf:bd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:38 2026 GMT
Not After : May 25 03:16:38 2027 GMT
Subject: CN=33672117400C2037E10F59DD9D38FC6B15043F62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:d8:14:b4:cb:6e:fe:01:aa:4e:f9:b2:0e:
fc:f0:29:6f:88:86:86:bd:65:fb:e1:09:9f:ee:0b:
18:b4:1c:5e:18:dc:4f:6c:dc:4c:a2:a1:15:89:b7:
a0:8e:2b:76:b0:80:e2:97:62:75:dd:fd:1a:d5:95:
63:8e:cd:b8:cd:ee:c7:32:c7:b1:45:44:63:e0:2a:
37:06:82:d3:a6:a6:37:b7:ec:c4:6f:51:f5:ca:43:
db:23:bc:cb:49:71:6f:4a:1d:1e:ef:c8:3f:4e:90:
6c:8d:06:06:60:62:f5:4d:1a:69:35:35:b9:d3:f5:
d6:25:67:1d:6e:70:2c:e7:9c:79:7c:48:de:68:91:
29:27:a1:0e:98:7a:68:15:c4:5b:9f:f4:6e:a9:0b:
bf:34:31:4b:db:30:bb:8f:9f:71:8d:6f:cc:57:a7:
e2:25:25:53:a7:fd:ac:26:94:9d:41:47:fb:78:97:
31:5f:56:65:7a:95:4b:16:32:a0:7b:c2:58:2c:17:
d2:4a:3d:1d:25:c5:11:e7:cf:1d:28:52:74:a5:d2:
da:f3:86:53:a6:2f:40:4a:99:ab:44:57:a7:d1:e8:
31:0e:64:ac:d1:97:bb:59:3b:a8:d6:34:6e:80:7f:
ed:7d:98:b7:40:f8:4c:e5:1b:fa:06:07:63:8f:5b:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:67:21:17:40:0C:20:37:E1:0F:59:DD:9D:38:FC:6B:15:04:3F:62
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a15b::/32
Signature Algorithm: sha256WithRSAEncryption
25:46:b0:26:02:59:e7:40:b9:e2:56:20:6b:ec:82:cb:7a:a2:
ed:f1:1a:7b:d6:eb:2f:4f:5f:62:ee:92:77:ab:e2:43:f1:29:
06:a5:c0:e9:64:b3:90:f3:41:ab:d1:b9:0c:52:61:d0:fe:93:
34:58:e9:0a:27:ce:c7:cd:7c:b2:eb:12:c7:e6:ac:e7:14:75:
c2:5e:a7:12:0a:41:e6:53:bb:67:41:f8:8f:e7:a1:bc:2f:1a:
a3:b8:03:db:e2:f7:5e:b8:2c:08:f1:29:7c:34:1c:45:f7:9b:
a3:a4:c6:9f:14:b5:aa:21:5c:9d:cb:b8:33:ed:3e:e0:6f:d4:
12:4a:f7:40:2d:ef:50:1f:7b:01:3b:7b:e6:97:41:97:cd:e7:
c2:02:55:37:bf:dd:b7:c9:16:10:c7:b9:4a:a4:a2:c9:64:80:
a1:7b:27:98:e2:ff:7c:17:41:fd:fd:23:78:37:6f:57:42:9d:
ce:67:cc:e5:78:da:45:a3:e5:49:d1:f8:d8:2c:12:18:28:39:
49:7a:fa:89:30:da:5e:f9:10:f2:dc:ac:31:9a:de:5c:50:46:
4d:81:4c:01:07:0e:51:2a:de:52:5d:62:6d:23:0d:f8:b9:08:
69:4f:19:4a:3c:7a:3c:f9:08:f2:58:b7:62:81:56:9d:69:34:
6f:26:6f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:39 2026 by rpki-client