Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142689.roa
File: AS142689.roa (raw, json)
Hash identifier: FIlpHzxP0k6IGSbLTdo2Nrs7j7W3/PBslEv+jPU+lSQ=
Subject key identifier: 2C:D0:76:EB:4E:49:13:2B:AE:E2:10:22:E2:5B:34:00:B8:68:B4:E4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 639E69D774E12DCE22CCACDF504E2AEC3C5DD1F6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142689.roa
Signing time: Tue 26 May 2026 03:16:43 +0000
ROA not before: Tue 26 May 2026 03:11:43 +0000
ROA not after: Tue 25 May 2027 03:16:43 +0000
asID: 142689
IP address blocks: 240a:a027::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:9e:69:d7:74:e1:2d:ce:22:cc:ac:df:50:4e:2a:ec:3c:5d:d1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:43 2026 GMT
Not After : May 25 03:16:43 2027 GMT
Subject: CN=2CD076EB4E49132BAEE21022E25B3400B868B4E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:73:52:0b:92:7b:14:bc:de:68:60:20:1b:
d7:93:2d:8f:6a:5e:d5:12:4d:66:da:b5:cc:05:29:
fb:e6:29:ce:fe:92:15:a7:ab:aa:e0:72:ac:a9:38:
7e:4d:cb:28:54:b2:d0:b8:3a:49:e7:e5:e6:9d:16:
d3:1e:a5:00:c0:9f:65:43:f8:38:66:e8:df:b8:3b:
69:37:f3:1e:7e:ad:22:a2:b5:3e:cd:2c:78:79:fd:
13:65:4b:a3:28:13:c2:28:46:76:12:fb:28:28:c4:
ff:b3:49:db:7d:b1:9b:b4:1f:75:d1:be:b4:12:6a:
61:b1:c8:3e:9b:42:93:19:ae:58:61:4c:fd:0a:cd:
47:0d:83:05:1b:17:a9:c2:1b:3c:bd:24:5f:43:b4:
26:24:92:6c:68:89:15:14:46:49:23:d9:5f:2e:7f:
b5:0b:e6:57:c3:2f:3d:ff:02:69:8b:32:4e:16:64:
b1:6c:d6:db:c7:ad:47:a0:a7:43:a7:ee:13:e0:7d:
ed:61:7d:a7:7e:dc:43:f8:fa:fb:cf:40:0e:94:9a:
7d:da:64:1d:63:de:06:90:37:77:9d:e9:89:34:e4:
c3:f5:3b:4c:3d:a9:95:10:b7:b2:f4:2b:0f:d9:c8:
9b:e4:ff:e0:98:41:33:17:14:03:42:80:08:73:9c:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D0:76:EB:4E:49:13:2B:AE:E2:10:22:E2:5B:34:00:B8:68:B4:E4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a027::/32
Signature Algorithm: sha256WithRSAEncryption
1c:cf:ec:05:36:53:f2:a6:77:bb:99:68:c0:b7:0e:f6:7d:cf:
e3:69:bf:f9:ab:78:5d:ce:a2:a3:7f:c5:7e:59:6d:14:de:66:
05:b1:70:69:8f:ba:c4:dd:64:34:4f:d8:3d:d4:35:34:e9:ef:
43:4d:6a:04:5c:1f:c4:f6:c8:dc:63:77:7b:47:09:4f:fb:b1:
b7:ba:78:ae:da:7a:84:09:be:ce:41:0c:4f:19:1b:87:3b:21:
f4:97:4f:21:17:46:2e:ee:d4:54:ad:35:d8:eb:e5:1e:36:89:
c0:75:69:a1:c1:34:13:70:c2:39:9c:32:88:30:b0:f9:79:0f:
7c:21:00:ed:52:43:97:53:09:67:ae:ac:e4:c6:7d:6a:0d:56:
c6:7b:77:f2:04:94:56:4a:84:2b:57:5d:e1:e4:65:85:88:9d:
45:44:52:ee:7b:3f:39:0c:ff:03:70:6a:ec:92:19:2f:f9:c4:
41:8e:1b:71:b9:d8:99:ed:54:ac:6f:ac:02:37:d0:f2:30:de:
57:e3:9c:ef:85:69:9b:51:c0:c8:6c:2e:1d:f5:3d:b1:53:9f:
79:54:f8:9f:4d:f4:eb:3c:b8:eb:13:15:22:21:79:c5:24:f0:
66:24:a1:a8:f2:28:62:2a:53:ab:78:d1:16:2a:39:8e:6d:5c:
f2:37:cf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:16 2026 by rpki-client