Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142688.roa
File: AS142688.roa (raw, json)
Hash identifier: wAW4DDMCAKg8EKSVVF53MC9EQxEIoB3MZTkoAZB71e0=
Subject key identifier: EA:DC:10:6D:31:0D:5E:FE:E1:48:F4:7B:98:AA:DD:D7:52:6B:91:56
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 526EAA8FF0C4FEF8719AD9C457286B0F69B16B0C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142688.roa
Signing time: Fri 22 May 2026 06:46:30 +0000
ROA not before: Fri 22 May 2026 06:41:30 +0000
ROA not after: Fri 21 May 2027 06:46:30 +0000
asID: 142688
IP address blocks: 240a:a026::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:6e:aa:8f:f0:c4:fe:f8:71:9a:d9:c4:57:28:6b:0f:69:b1:6b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:30 2026 GMT
Not After : May 21 06:46:30 2027 GMT
Subject: CN=EADC106D310D5EFEE148F47B98AADDD7526B9156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:4f:91:ff:79:5a:2d:dd:e8:61:03:95:07:
9e:16:cd:08:2f:6a:b8:78:ff:d6:ff:b7:64:c1:a0:
30:8f:e6:8c:de:63:9a:65:0c:f3:e3:92:c1:91:fb:
a3:24:de:ae:03:b3:c8:0c:b0:8d:17:74:dc:49:f1:
a9:a1:cb:12:42:48:66:ab:d6:44:52:6c:2c:36:84:
76:67:1e:97:77:c2:1d:99:a9:ad:59:2a:3d:86:e4:
51:94:26:3f:ff:ce:6f:3f:7c:88:66:13:3e:54:5b:
91:dc:ff:70:c3:bd:ee:75:f3:c1:3d:b2:05:13:bb:
15:41:27:cb:8f:07:37:c5:b3:2e:45:ee:ad:5a:91:
ce:62:90:e2:8d:57:66:93:13:ce:20:8b:f0:9c:a5:
52:fe:04:48:30:3a:89:ef:18:85:6d:f0:2d:7d:b6:
88:9d:33:58:e8:f7:8a:46:75:05:e8:ac:02:a9:db:
02:c2:9a:2e:45:02:96:0a:a1:d6:c4:47:e2:50:eb:
f7:57:28:f4:95:ec:b1:9f:c1:84:66:a0:a8:dc:04:
97:a1:53:23:bc:0a:d5:eb:52:05:2e:54:42:8c:83:
b3:9b:d6:4d:4e:7e:20:fc:94:91:eb:b2:b2:4c:b2:
bb:fd:ba:7f:75:1c:d9:91:b5:f4:cd:4b:88:24:08:
de:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DC:10:6D:31:0D:5E:FE:E1:48:F4:7B:98:AA:DD:D7:52:6B:91:56
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142688.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a026::/32
Signature Algorithm: sha256WithRSAEncryption
32:e4:cd:17:78:c3:85:71:28:82:e1:01:7f:03:cd:c2:a2:42:
c1:e4:f5:2b:ea:94:8b:b3:fa:c6:77:70:70:27:91:2b:cf:63:
61:55:8e:6a:b7:67:13:66:13:a2:c3:4f:cb:69:c3:f8:44:0b:
bc:74:ee:5c:66:33:60:73:65:a3:63:9d:4e:b1:a7:e7:34:74:
a3:b0:06:2a:3c:b7:44:19:50:20:7d:e6:49:07:34:10:3a:c9:
cb:5c:ba:ba:19:15:a4:03:a4:72:63:81:0e:40:d4:99:67:f1:
1c:2d:c8:28:e4:08:b3:e6:1a:16:c4:20:a8:fb:9a:09:d1:6a:
48:2a:d7:a0:84:45:bb:66:99:1f:04:0f:d8:1f:55:9b:8e:42:
c8:08:33:0c:b8:8b:b4:21:f0:1b:21:de:0e:55:c7:95:61:f9:
d3:65:d0:9b:b7:6a:ce:71:3f:59:d2:3b:03:6b:88:5d:c9:b3:
35:f1:ad:a4:1f:51:47:51:cb:40:fe:bc:ce:38:23:bf:10:5b:
fb:53:5f:6a:bc:c0:d5:d0:a0:4d:0a:c0:79:8c:13:e1:e0:36:
4e:08:50:82:33:ab:13:f6:9a:52:8e:91:c6:9c:18:16:3f:d8:
6e:86:3f:ab:13:22:72:c7:7f:8e:ee:08:d8:c8:06:34:f6:b7:
15:d7:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:19 2026 by rpki-client