Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142695.roa
File: AS142695.roa (raw, json)
Hash identifier: uWlio8JmnqENfcebOzG8UiUjo2YUe5sCHwVA0P1jVNc=
Subject key identifier: 3F:D4:57:E5:C0:95:3B:F6:BE:71:81:DA:8B:0B:4A:01:F7:96:F5:67
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3802C1C51AD8B515359B3CCAA4B03660CE320539
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142695.roa
Signing time: Mon 25 May 2026 01:20:16 +0000
ROA not before: Mon 25 May 2026 01:15:16 +0000
ROA not after: Mon 24 May 2027 01:20:16 +0000
asID: 142695
IP address blocks: 240a:a02d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:02:c1:c5:1a:d8:b5:15:35:9b:3c:ca:a4:b0:36:60:ce:32:05:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:16 2026 GMT
Not After : May 24 01:20:16 2027 GMT
Subject: CN=3FD457E5C0953BF6BE7181DA8B0B4A01F796F567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:15:94:08:31:d4:43:9b:22:28:7d:24:0c:
93:95:a1:ba:00:86:da:8a:99:3a:60:d1:19:21:d5:
e8:7a:db:9f:02:c7:20:a3:23:b4:c5:b8:b7:22:34:
e3:2f:1c:d0:99:67:7f:ad:cc:09:2a:17:13:59:28:
63:f4:8d:a6:ca:a1:b3:65:e1:b8:c0:c0:95:aa:19:
01:ee:de:ad:32:4d:8b:5a:65:c7:54:2f:58:0d:6f:
7a:1b:7c:8b:fe:b2:74:3f:de:e6:1d:37:b9:7a:3b:
57:4c:9f:72:c5:34:0c:42:89:af:86:c5:bf:8a:de:
bd:41:8f:ce:79:cf:95:1d:1b:ae:ea:bd:be:c0:0d:
34:a1:af:73:81:2b:4b:ef:a3:ee:2c:08:e0:1f:22:
e6:1b:c1:7b:1b:15:0c:4d:a5:c9:0f:15:e4:4e:d1:
5c:e9:73:bb:46:84:ff:57:c6:b0:78:b4:95:e2:2f:
3f:e1:f1:fa:e5:f9:08:4d:ad:99:75:9b:6c:ed:ae:
f8:ee:6d:2f:6e:4e:bd:91:8f:a7:3a:d6:46:98:30:
93:69:81:39:34:61:18:45:45:aa:a1:4e:cc:25:1e:
d0:67:e0:9d:e4:f2:ef:11:92:99:29:39:bd:a5:b1:
38:4f:c6:0b:b3:04:9f:48:27:22:bb:54:de:af:31:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D4:57:E5:C0:95:3B:F6:BE:71:81:DA:8B:0B:4A:01:F7:96:F5:67
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142695.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a02d::/32
Signature Algorithm: sha256WithRSAEncryption
62:7e:da:be:ac:2d:09:92:fc:a0:78:8a:92:60:4b:fa:4b:d5:
93:79:d4:a4:46:6d:67:e4:cf:62:d8:99:a5:3f:f1:ff:44:48:
0b:32:af:70:df:60:f8:51:8d:c1:5b:61:7f:98:d4:b1:92:bf:
4b:08:0a:d9:2c:99:68:bf:d3:69:3d:84:d3:20:b8:67:b4:24:
4e:9e:e6:45:fe:09:1a:2b:77:28:9a:f6:06:35:d3:b6:05:12:
48:91:45:8e:51:2a:9d:b1:6b:d6:d9:9b:62:98:00:ca:63:9b:
c2:a6:df:9b:b1:2a:09:48:e1:16:13:8e:3c:53:fd:44:05:47:
bd:79:a7:a1:66:b0:e4:c8:2c:57:72:ea:ba:7e:9e:f5:03:bc:
2c:75:5b:db:20:19:d7:43:35:bb:9d:b6:70:e9:a9:5a:ef:ec:
a8:59:04:a0:aa:3a:7f:d7:47:68:2d:f7:75:7d:4f:02:bf:0d:
c4:1b:e7:03:cc:93:77:32:21:22:57:3e:bb:9e:48:c4:9f:5d:
d8:1c:9e:93:b0:af:8b:3f:cb:8b:82:ff:c0:42:cc:c9:a8:a5:
00:89:a9:6a:ea:9f:0d:00:63:72:6a:bd:a0:6a:57:cb:d0:31:
47:9a:97:07:4d:3a:2f:d1:c2:d4:e0:ca:fa:1d:66:f3:0f:11:
d3:3d:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:53 2026 by rpki-client