Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142660.roa
File: AS142660.roa (raw, json)
Hash identifier: GP0L4q07YtEtzBzfJlPL+6UkgVZLzsdAXZYa2Itksek=
Subject key identifier: 7E:CA:22:2C:ED:68:CB:EC:D7:A4:BF:EA:7A:B4:C7:D2:F1:32:AB:40
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3AC90AC8E729179809E504F5F8007BEC5521D360
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142660.roa
Signing time: Fri 22 May 2026 07:09:06 +0000
ROA not before: Fri 22 May 2026 07:04:06 +0000
ROA not after: Fri 21 May 2027 07:09:06 +0000
asID: 142660
IP address blocks: 240a:a00a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c9:0a:c8:e7:29:17:98:09:e5:04:f5:f8:00:7b:ec:55:21:d3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:06 2026 GMT
Not After : May 21 07:09:06 2027 GMT
Subject: CN=7ECA222CED68CBECD7A4BFEA7AB4C7D2F132AB40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:bb:25:36:e3:93:1f:e1:a1:05:6b:17:3b:
c8:5b:c4:c4:df:72:67:88:d9:40:50:eb:c6:1b:7c:
21:fe:d2:f9:cf:12:b9:2a:52:ae:88:eb:53:52:be:
78:80:a2:5e:c4:51:3a:cd:f3:35:02:68:11:c4:2d:
c1:49:e5:9f:0b:e4:30:33:9d:63:6a:17:17:89:48:
a7:86:f3:ee:69:7b:e3:ee:a4:a8:5f:cf:88:e5:5a:
34:5a:0b:fc:fe:bf:e1:fa:83:1c:d5:58:f4:da:d5:
7b:8b:d0:a1:ca:a3:c7:ea:62:97:53:b2:f2:43:5d:
ad:e1:7e:e6:7c:6a:88:cf:ce:7f:5b:34:ff:0f:53:
54:5a:7f:1b:cc:84:d4:e8:96:50:6b:d5:8a:1b:ad:
cb:42:db:0c:48:59:9d:1c:48:dd:2b:df:f8:d1:ce:
34:d8:4a:76:8d:20:5f:01:1f:f9:9b:b4:0f:be:72:
7f:d9:56:3e:ca:bf:51:f8:24:2f:55:09:ba:68:a2:
2f:21:69:7c:5d:44:93:eb:aa:ce:26:99:64:40:e7:
cd:3b:48:d6:58:95:f9:46:a1:1c:46:2e:00:10:c5:
aa:5b:f0:03:d2:b4:fe:cb:6f:d4:88:72:72:44:b6:
f0:b6:0e:57:86:bd:d6:33:f2:03:39:28:b2:47:92:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CA:22:2C:ED:68:CB:EC:D7:A4:BF:EA:7A:B4:C7:D2:F1:32:AB:40
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142660.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a00a::/32
Signature Algorithm: sha256WithRSAEncryption
9e:1e:28:a5:0f:f7:24:ce:72:22:a1:5d:94:99:2d:34:e2:e9:
68:4f:3d:50:6d:62:83:e9:0f:e4:33:f6:50:24:84:07:0f:cc:
54:a5:96:ae:d9:8b:38:c0:a7:76:54:db:a4:63:c1:a0:62:fb:
e8:77:85:2a:ca:f0:2e:59:b1:1c:81:05:a0:38:57:e9:44:c3:
c2:f0:04:65:d7:eb:8d:f3:3c:7c:2d:ad:47:c1:53:46:15:ba:
d3:5c:88:16:fe:b1:9c:93:f2:36:5c:50:ba:bf:3e:eb:a1:46:
cf:06:14:41:0a:5b:63:b0:e2:3a:e9:3b:89:b6:56:8c:50:d4:
b3:e6:f9:03:6a:9e:f5:61:44:26:7d:32:06:03:c8:8d:c6:ad:
cd:5e:1d:13:20:fa:18:eb:4d:1d:a2:9c:2a:56:28:96:c8:53:
b6:79:d9:d3:8d:d7:53:48:93:88:b4:fa:0e:8e:51:0f:88:1d:
b0:22:71:d6:d1:56:7f:66:06:10:6a:c5:5e:a6:75:ac:72:2a:
ca:16:15:84:80:aa:82:f1:05:47:19:fd:fa:70:9a:be:5c:47:
b9:d2:ed:aa:f9:bc:2d:8a:8f:dd:d7:76:82:04:a1:12:c9:04:
9d:df:70:af:30:39:b2:87:e3:91:41:49:be:4e:c2:c6:b0:e4:
55:16:cd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:32 2026 by rpki-client