Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142999.roa
File: AS142999.roa (raw, json)
Hash identifier: aULzByPKERAAX5RxJGgkGajfjH6ts2IAkuMkGA8pb5M=
Subject key identifier: AC:88:60:2F:F1:D1:4B:E5:A1:48:5B:99:24:E9:07:1C:FA:B3:20:4C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 44E1C129DB5D382CF762E296DBEF231A0CC4A7FD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142999.roa
Signing time: Mon 25 May 2026 01:38:14 +0000
ROA not before: Mon 25 May 2026 01:33:14 +0000
ROA not after: Mon 24 May 2027 01:38:14 +0000
asID: 142999
IP address blocks: 240a:a15d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e1:c1:29:db:5d:38:2c:f7:62:e2:96:db:ef:23:1a:0c:c4:a7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:14 2026 GMT
Not After : May 24 01:38:14 2027 GMT
Subject: CN=AC88602FF1D14BE5A1485B9924E9071CFAB3204C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:e9:12:cb:49:ef:af:e3:f7:1d:19:d2:62:
9e:79:75:bb:f8:a0:ff:b4:fd:fd:a1:dc:0b:2f:91:
63:d5:c3:ec:f9:1f:49:c6:11:27:2f:b9:41:fe:f0:
18:c8:1d:91:03:8f:91:6c:80:84:3d:d0:fd:a6:60:
13:ef:81:57:03:28:8b:b8:9e:55:30:9e:a5:90:8d:
87:73:f5:1e:db:8a:ed:4f:b4:cd:cb:51:41:b7:d0:
14:50:17:a8:b9:f7:61:2c:4e:c1:9c:e5:8d:be:3f:
cd:cb:e4:2a:6a:b5:85:f6:15:0a:93:f0:c3:63:d9:
b2:db:25:78:a5:90:e7:89:13:9f:a4:4f:9d:17:9c:
99:96:f4:0f:67:ad:54:97:e0:8f:24:33:72:88:61:
2a:40:3f:e7:e0:ed:22:3f:35:8c:31:fa:2f:4f:22:
c4:90:a1:60:ec:e7:ad:d7:8c:d3:0f:56:f6:d7:8b:
b5:ec:ed:28:4b:95:54:67:9d:bd:4a:eb:2c:91:9f:
68:8e:52:13:18:45:ef:3f:7e:cc:dd:14:6c:5a:f1:
e5:ce:af:e1:a4:68:fa:90:b9:64:ef:50:e1:87:ee:
87:69:37:db:bd:3d:dc:97:fa:97:4d:f3:46:7c:a0:
f5:ee:67:e6:93:7a:5f:30:41:c0:c0:1a:08:34:11:
40:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:88:60:2F:F1:D1:4B:E5:A1:48:5B:99:24:E9:07:1C:FA:B3:20:4C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142999.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a15d::/32
Signature Algorithm: sha256WithRSAEncryption
91:c4:f5:dd:5b:d3:de:28:df:1d:e1:91:35:f8:0f:1c:64:84:
5a:3b:de:36:5e:ee:c9:a7:3a:ce:08:91:09:ae:f9:ad:e8:16:
29:03:ef:48:37:03:fd:51:b5:f6:9f:86:e5:8b:aa:42:3d:90:
0f:66:0e:ca:ff:1d:9a:48:d0:77:82:04:dd:56:7e:ef:ce:e4:
3c:e5:41:7c:91:00:05:2c:80:c2:0c:57:51:0d:8f:9f:4a:11:
c5:6a:2e:4c:9b:54:74:55:c5:59:30:fd:a9:88:19:8e:ae:79:
82:6f:14:07:75:97:0e:89:e2:5f:cf:59:a0:ae:82:e2:6c:af:
9f:67:b7:f3:ee:15:fa:2c:86:05:e7:a8:15:50:cd:14:18:8f:
44:a4:ca:e7:cf:7e:ae:e1:96:46:48:55:0d:cb:39:aa:51:9a:
0d:78:16:e7:5a:0b:b0:1d:78:9c:bb:48:39:69:91:9c:8a:1d:
e1:d0:8b:95:2f:8f:d8:28:a7:49:23:39:cc:23:fe:a8:be:ba:
9f:e5:b3:31:6e:0f:f6:d4:54:8c:95:e8:1a:77:3f:54:69:a6:
e2:d8:a1:6b:f2:1a:7f:10:95:d9:d7:11:30:84:38:98:6d:72:
83:60:cc:5c:e1:3b:08:d6:57:37:67:f0:1e:99:fe:60:ce:7c:
36:ec:c3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:29 2026 by rpki-client