Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142697.roa
File: AS142697.roa (raw, json)
Hash identifier: A/1gSxw7Hnt/NhOfc68guM/AxFlofQQtdrTXwFSN8gg=
Subject key identifier: 08:02:08:F2:81:EC:CF:B0:DB:97:0D:35:43:07:89:4D:71:88:5A:26
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5E198B45AC2681CF93C1269771613795DA9F1B74
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142697.roa
Signing time: Tue 26 May 2026 06:30:29 +0000
ROA not before: Tue 26 May 2026 06:25:29 +0000
ROA not after: Tue 25 May 2027 06:30:29 +0000
asID: 142697
IP address blocks: 240a:a02f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:19:8b:45:ac:26:81:cf:93:c1:26:97:71:61:37:95:da:9f:1b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:29 2026 GMT
Not After : May 25 06:30:29 2027 GMT
Subject: CN=080208F281ECCFB0DB970D354307894D71885A26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:67:ca:fe:d7:4b:18:b8:41:98:8e:0a:62:
d3:46:8d:e9:1d:8e:73:ce:9e:e5:1f:84:df:10:c7:
d2:7b:26:33:c9:d2:38:ee:a8:b5:74:d8:32:6f:b8:
f9:22:44:c3:6c:74:d9:88:41:ba:37:76:9f:62:79:
4e:ee:a8:e2:d7:24:94:94:5b:df:64:1b:94:3d:4a:
8e:82:ae:c8:5c:07:e0:d2:31:47:e1:0a:72:41:f2:
5c:81:44:6f:7a:15:82:4d:05:c3:7d:88:9f:cb:8e:
10:59:ef:91:54:b0:45:e9:78:bb:08:c1:a2:66:13:
65:0d:54:6e:c6:6f:56:be:2e:93:11:aa:53:9a:9c:
b4:1a:f3:40:a1:b8:df:81:f0:a8:d8:c0:34:08:cc:
f2:18:07:0e:db:7d:ab:63:6a:08:94:7f:ef:f0:a9:
ba:c9:aa:c7:cc:cd:c3:47:5f:16:19:b7:56:74:a0:
a2:cd:b9:07:08:46:96:69:0b:a7:43:e8:e7:24:e1:
53:2e:68:93:1b:82:24:1d:30:27:5c:14:f8:ce:84:
b2:73:3d:55:2e:5d:e6:ac:4b:f0:57:2b:82:13:9b:
b1:ff:9a:c9:a9:08:f2:01:59:77:71:c4:5a:44:3e:
cf:e6:c7:a1:f8:30:91:72:35:06:d0:8f:86:01:a4:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:02:08:F2:81:EC:CF:B0:DB:97:0D:35:43:07:89:4D:71:88:5A:26
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142697.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a02f::/32
Signature Algorithm: sha256WithRSAEncryption
0b:6a:15:b0:05:bb:3d:6e:7c:ba:ab:88:e8:95:5b:9c:5f:65:
ef:ca:3f:4e:f7:4f:3f:57:58:83:e7:20:7e:be:70:9b:2c:83:
41:5f:bb:f5:2d:5b:8d:00:bb:74:75:45:06:c3:3d:1a:fd:0c:
48:38:11:b6:4b:7d:30:fc:00:e5:85:bf:b9:35:c5:ff:d6:3f:
de:c7:b0:b4:91:39:21:f0:1d:26:e5:bf:b0:f9:40:0e:2b:5e:
78:d5:e5:01:c2:91:c5:1e:56:b7:46:19:b9:d2:61:73:18:84:
3c:b4:81:94:f4:ef:5c:4d:ee:10:c8:03:d1:06:08:f4:f2:a5:
4b:0e:24:25:f1:6b:9f:eb:b9:10:29:e4:2e:57:fa:9d:63:b1:
96:da:ee:e8:d4:2d:de:29:6b:4f:06:4a:b3:ac:44:94:43:b7:
fb:6f:c5:ca:a5:93:bf:c5:da:70:ea:79:bb:b8:37:86:78:2d:
d5:9b:81:2b:16:7f:dc:b3:fa:b8:88:84:62:4e:c8:e1:bd:3f:
d6:fe:3f:45:08:e6:b7:6b:d4:3e:7e:38:e5:a0:90:1d:ed:98:
be:78:84:68:78:cc:4e:8c:bb:20:23:0a:e0:58:14:a7:2d:b6:
0e:13:87:4b:37:d1:4d:42:fa:4e:50:56:eb:58:a7:2f:37:7a:
9e:ac:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:06 2026 by rpki-client