Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142705.roa
File: AS142705.roa (raw, json)
Hash identifier: /mbpBoLZGDCOiJrK23OouZxQD+N5CUuIHpWqaGAngHA=
Subject key identifier: FD:4C:22:CE:18:D4:C1:80:D9:C9:CE:63:52:A6:CC:64:3E:B8:2F:42
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D1F73884833A9397EDEE5E59515EA58ECE443BF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142705.roa
Signing time: Mon 25 May 2026 01:20:19 +0000
ROA not before: Mon 25 May 2026 01:15:19 +0000
ROA not after: Mon 24 May 2027 01:20:19 +0000
asID: 142705
IP address blocks: 240a:a037::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:1f:73:88:48:33:a9:39:7e:de:e5:e5:95:15:ea:58:ec:e4:43:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:19 2026 GMT
Not After : May 24 01:20:19 2027 GMT
Subject: CN=FD4C22CE18D4C180D9C9CE6352A6CC643EB82F42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:24:40:94:3d:cc:31:6d:08:77:d1:aa:41:
a7:be:90:f1:a4:07:36:b0:63:15:64:2c:97:e9:67:
bf:e3:01:d8:e6:66:2e:cc:58:b2:1c:9f:2b:1f:1a:
6c:7e:6b:98:62:50:41:41:ff:09:33:fe:d2:7a:8f:
af:3a:09:97:7b:3c:f6:8c:75:c0:a7:ef:9f:36:14:
62:82:ca:a2:97:35:91:50:39:e8:07:bb:38:b7:98:
1f:31:c9:54:90:8e:b2:ec:14:f1:a3:b2:9f:2f:b6:
99:68:d6:95:06:02:fb:30:5d:78:c2:07:0a:d8:d1:
60:c4:f1:08:ec:0f:e1:b1:48:a2:eb:69:20:97:26:
1d:5e:4b:e2:fd:26:53:37:92:f9:f2:88:26:b3:de:
fd:b9:2b:eb:fc:bb:d8:43:19:35:6a:11:36:e3:15:
31:ca:b0:c2:ef:a7:36:51:a7:ac:73:59:19:49:5b:
de:c3:bd:80:44:d0:a6:03:a0:98:a6:55:7b:94:92:
c8:7c:77:5d:65:1f:00:21:36:e6:f7:51:c4:9e:33:
f5:04:4a:1b:52:5c:28:d7:b2:d2:fb:98:b1:80:58:
8a:f2:1a:12:f2:6f:22:aa:6d:79:7d:f1:85:10:01:
e8:7c:e2:69:65:f9:19:1b:8f:ab:6e:c8:2b:ca:9a:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4C:22:CE:18:D4:C1:80:D9:C9:CE:63:52:A6:CC:64:3E:B8:2F:42
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142705.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a037::/32
Signature Algorithm: sha256WithRSAEncryption
63:b1:64:a0:27:af:da:36:4f:94:42:af:22:ca:54:92:eb:09:
73:ae:6c:d9:50:0b:0a:69:be:76:fe:e0:3d:a1:d2:a4:ab:2f:
eb:d9:70:85:cd:40:5e:4e:f9:82:df:1d:5c:b4:8e:72:cc:e3:
d2:aa:8e:3c:d2:82:f2:6b:a8:00:87:32:27:ef:59:67:db:97:
45:0d:ed:53:3f:c1:b3:63:6a:44:39:9a:5b:58:94:9f:ef:df:
9d:ea:72:79:90:67:80:10:b0:bf:39:1c:90:0f:a2:4d:76:cb:
74:3a:6e:8e:ed:3e:de:48:20:f7:66:80:e6:77:8c:e3:c7:14:
57:dd:2a:57:07:8d:ae:01:02:68:88:84:0c:48:3c:24:5d:b4:
ae:da:b1:89:cb:b7:17:90:28:7f:44:54:70:2f:73:70:fe:bf:
3e:a6:48:f2:d9:4b:78:21:3d:98:2f:e6:19:88:4e:80:a4:0a:
b3:3b:e5:03:e9:06:df:46:80:20:5a:b1:81:74:32:19:ea:f5:
b0:10:1e:f1:ca:5d:50:c1:4a:df:23:95:44:99:4e:ba:39:1a:
d3:cf:4d:4f:8d:fc:c5:a8:ea:5a:23:2b:51:3e:50:d7:08:11:
58:fd:76:f6:45:3b:fb:0e:fb:0a:e5:3a:b4:4b:59:6f:bd:07:
51:54:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:09 2026 by rpki-client