Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142696.roa
File: AS142696.roa (raw, json)
Hash identifier: mqIotvUCm13x8aClJVjZhKxw2yA048LIibH6m74EhQA=
Subject key identifier: 98:1F:57:02:1A:E4:11:A3:DA:A7:39:A2:14:12:87:E2:53:94:DE:9E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 517E426EFBCED3409059BD7B847C97D106919D40
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142696.roa
Signing time: Fri 22 May 2026 06:05:19 +0000
ROA not before: Fri 22 May 2026 06:00:19 +0000
ROA not after: Fri 21 May 2027 06:05:19 +0000
asID: 142696
IP address blocks: 240a:a02e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:7e:42:6e:fb:ce:d3:40:90:59:bd:7b:84:7c:97:d1:06:91:9d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:19 2026 GMT
Not After : May 21 06:05:19 2027 GMT
Subject: CN=981F57021AE411A3DAA739A2141287E25394DE9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:8b:79:e0:6e:31:97:31:b4:8d:d2:57:43:
91:f1:c7:d3:ba:ba:7e:8a:14:ba:8e:af:ad:9e:bd:
b2:1a:71:c7:2e:3e:96:5a:dd:eb:f5:fb:88:fd:3a:
7e:5f:87:f2:b0:30:d0:d8:1c:85:54:d8:c7:47:fd:
bd:de:82:10:43:45:fd:49:48:b2:55:4d:81:04:f2:
41:03:71:b9:3e:6a:93:87:36:27:50:bc:ce:9f:01:
ee:e4:7f:e7:9b:f2:e9:3f:64:4c:bb:33:91:c6:e2:
cb:d9:5c:6a:68:df:4a:e7:7f:93:49:24:a7:ad:aa:
d1:12:4c:31:17:4e:b2:e1:24:f3:ac:50:f4:2c:bf:
41:e3:ee:11:34:ae:72:f9:37:f5:b9:00:bf:f3:dc:
f3:49:7e:07:40:5d:03:94:b3:cb:66:80:d8:6a:8c:
38:d9:c7:74:d5:38:59:c9:86:16:09:44:79:48:a8:
52:3f:6d:37:1a:5c:d2:d9:32:f6:cc:fe:c0:25:84:
62:eb:5b:d6:0a:21:e8:47:60:20:48:5a:76:cf:ec:
8c:c2:dc:74:28:b0:e7:9a:a1:f4:8c:9f:dd:62:66:
d4:74:f4:f8:5d:31:9d:e4:61:84:ef:21:56:ea:a6:
d2:06:af:7d:be:6e:fd:c4:24:fc:a5:a5:df:ec:64:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1F:57:02:1A:E4:11:A3:DA:A7:39:A2:14:12:87:E2:53:94:DE:9E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142696.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a02e::/32
Signature Algorithm: sha256WithRSAEncryption
1e:ce:38:46:fd:d1:e9:a6:33:0d:7e:9a:74:97:1d:b5:0b:ee:
51:c1:72:70:ee:24:c8:c7:51:bf:97:8f:50:2d:3f:3a:d8:10:
67:aa:ed:dc:25:d4:9a:a0:cd:8c:d9:16:19:c1:11:4d:1a:2a:
61:ee:a9:cd:00:1b:be:82:b5:2a:4c:af:f4:da:bc:b4:4a:99:
41:8a:db:8c:6a:6c:5b:87:ce:47:1f:8f:5a:a7:43:5d:76:bb:
e1:5a:23:b8:28:2a:ef:82:b8:13:00:b8:9a:7d:a5:c5:f2:43:
67:4f:81:4b:f7:17:28:ab:3f:d0:62:5d:fd:5d:a2:ac:26:cf:
be:b1:87:1e:1c:35:c0:43:10:81:9b:07:55:9f:f2:76:fd:de:
31:b2:14:bd:89:7f:6e:f7:a3:ec:b5:5c:12:51:2b:b8:07:0b:
52:82:59:96:90:8d:27:5d:b3:d6:fb:fc:9d:5e:e3:0b:b5:a3:
80:c3:b9:db:fb:ee:55:41:89:cd:48:cb:11:58:c1:d3:7d:4b:
94:c4:51:fe:50:7c:7c:99:a2:23:fb:f2:f7:10:40:6d:b0:02:
7d:78:87:8b:ec:17:65:80:7d:b2:e0:7c:1b:df:49:1f:2a:65:
07:6f:f5:13:8b:6a:2b:fb:60:7c:cf:62:f6:ad:32:cb:be:10:
ae:c5:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:30 2026 by rpki-client