Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142691.roa
File: AS142691.roa (raw, json)
Hash identifier: ODnfyQP7jGZhPC1kFX7IZ0DLSrQUi7ywTSYlU3kuKI8=
Subject key identifier: D1:DE:2E:B3:BB:0D:C4:A9:43:9B:57:29:91:DF:37:5C:A5:3C:99:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5C03C0320E8A297D3A56D001A03D59CAB6139E87
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142691.roa
Signing time: Tue 26 May 2026 06:12:58 +0000
ROA not before: Tue 26 May 2026 06:07:58 +0000
ROA not after: Tue 25 May 2027 06:12:58 +0000
asID: 142691
IP address blocks: 240a:a029::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:03:c0:32:0e:8a:29:7d:3a:56:d0:01:a0:3d:59:ca:b6:13:9e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:58 2026 GMT
Not After : May 25 06:12:58 2027 GMT
Subject: CN=D1DE2EB3BB0DC4A9439B572991DF375CA53C9910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:4c:01:c0:e0:77:55:a0:89:e4:fd:91:ae:
59:7e:32:dd:07:9b:28:77:fb:b3:39:d0:6a:04:ff:
67:6a:80:c1:0e:d8:64:7b:c1:08:6a:60:fc:cd:7a:
32:d2:4c:5f:fa:c9:16:59:73:f0:4f:91:75:94:2d:
85:38:8a:c4:78:cc:dd:f3:95:95:ac:da:4f:09:a8:
4a:3c:e6:b5:60:b3:bd:16:ac:03:b9:0a:bd:7b:da:
c2:82:70:84:54:63:1f:59:9c:78:cb:95:49:92:2f:
a4:77:07:a2:56:69:f5:35:5f:2f:a7:8d:19:72:f7:
46:a5:12:ac:85:53:ee:5a:53:aa:af:b3:2e:ee:45:
b2:9e:30:ac:c5:40:80:ab:6c:bf:7a:c4:f1:8c:9f:
d7:31:4c:ba:0a:61:0a:38:65:9b:3d:e9:c7:8b:40:
a9:07:b9:1b:20:89:40:86:f5:91:9a:56:a5:46:ea:
48:94:32:41:5a:0e:5f:0c:49:56:74:9c:ec:30:bd:
06:a5:3f:23:32:49:5a:51:d3:1b:a0:4f:36:56:02:
27:5e:58:c4:2c:f6:c1:c2:35:c1:65:93:33:b4:e3:
ae:8a:57:40:f4:d2:1d:e5:6d:91:ec:1f:5e:3c:62:
f7:3b:63:b4:d2:c9:6f:39:d5:c2:fb:c0:86:07:57:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DE:2E:B3:BB:0D:C4:A9:43:9B:57:29:91:DF:37:5C:A5:3C:99:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142691.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a029::/32
Signature Algorithm: sha256WithRSAEncryption
04:4a:fd:fe:e5:f8:a4:37:82:5a:63:e0:e2:a5:5b:bb:eb:ef:
dd:3f:98:da:33:70:a3:f3:a4:00:96:da:d2:a5:25:5a:2c:f9:
50:62:fb:42:18:80:a8:01:4c:0c:4d:3f:1e:f4:05:78:2f:07:
6e:39:21:d9:82:dc:b6:72:04:65:aa:ab:bf:f0:35:33:10:41:
0c:27:ba:f5:70:6b:0a:b3:e5:76:6b:21:7f:a1:75:b8:68:16:
b3:4a:a5:36:ac:d0:5a:b6:35:c4:00:ab:8a:32:ac:bb:e2:44:
70:3e:77:1d:c8:de:76:9f:45:24:8c:a8:96:0f:8a:e3:4b:82:
c8:34:3b:30:14:71:d5:07:37:f4:43:35:2a:8d:f0:46:88:09:
bf:ac:9f:22:73:0b:9e:9e:a8:be:2e:14:00:0c:20:1a:15:b8:
4f:25:ec:b5:5f:c7:48:d0:76:8b:cd:26:e5:cf:93:a1:d5:84:
e4:71:ae:42:cc:02:43:79:e0:e5:92:1c:5a:79:43:02:7a:a1:
21:b0:cf:9d:12:e8:56:21:fd:8e:ad:20:ec:44:b0:f5:9e:e9:
bf:99:d7:b8:42:01:b6:71:d5:59:b3:90:4b:50:7e:12:f1:80:
f9:ac:1f:b4:c3:4d:17:19:c7:0c:82:41:87:96:fd:05:b2:e9:
ff:92:03:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:16 2026 by rpki-client