Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142706.roa
File: AS142706.roa (raw, json)
Hash identifier: U2nlCXDsULyKt27K/MNI/JLsSzMEVPZIlTYDp32yvlI=
Subject key identifier: 05:8B:17:3C:9E:E0:2D:4A:EA:55:7B:C1:6D:F6:48:3A:BB:03:98:F6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 422C1114A5640B8114521DCC8440E305B6159963
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142706.roa
Signing time: Fri 22 May 2026 06:46:16 +0000
ROA not before: Fri 22 May 2026 06:41:16 +0000
ROA not after: Fri 21 May 2027 06:46:16 +0000
asID: 142706
IP address blocks: 240a:a038::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2c:11:14:a5:64:0b:81:14:52:1d:cc:84:40:e3:05:b6:15:99:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:16 2026 GMT
Not After : May 21 06:46:16 2027 GMT
Subject: CN=058B173C9EE02D4AEA557BC16DF6483ABB0398F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:34:cc:ba:dc:ad:39:d2:fc:d4:97:4e:9b:
86:9d:da:78:d8:8b:2f:f9:5d:87:8e:e0:0f:5e:65:
fb:08:80:68:63:a1:b3:80:34:71:ba:ea:8c:67:09:
02:f7:e2:88:d0:98:57:e4:ff:fa:59:7e:c4:8f:1b:
7c:8d:c1:12:b1:46:23:39:cc:14:62:71:99:ad:be:
3c:76:9d:cd:93:b7:01:ca:aa:98:67:aa:6a:a5:e4:
cb:9e:bf:7d:2a:44:e2:a3:36:99:a4:27:e2:81:cf:
98:0b:af:36:6f:8d:5c:54:23:0f:60:cf:f4:9c:66:
70:ca:9c:dd:7a:ca:7e:2c:7a:78:d8:91:cb:33:6d:
8e:2e:82:f6:8b:61:da:77:a9:37:fb:25:a2:f6:c2:
e1:0a:74:64:9f:78:eb:d9:9c:bf:70:2d:03:a6:6f:
7c:ce:f5:8f:fe:0b:75:7a:a9:3f:17:26:8a:67:c5:
9d:7c:00:e3:b4:32:89:10:ff:2a:c9:d9:7c:86:b6:
4a:91:5c:a4:89:19:f7:8d:ef:7a:86:30:ac:82:d9:
39:d7:02:8d:47:7d:22:64:61:77:b3:23:41:ed:e8:
c4:4a:e0:b4:bc:cb:d5:32:da:54:9f:0d:e3:e5:47:
39:4e:00:33:3b:b9:1b:ad:9d:b5:21:09:a0:27:d6:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8B:17:3C:9E:E0:2D:4A:EA:55:7B:C1:6D:F6:48:3A:BB:03:98:F6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142706.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a038::/32
Signature Algorithm: sha256WithRSAEncryption
7e:27:31:d9:12:14:41:d0:6d:67:02:04:3e:4b:f5:cc:aa:6b:
9e:b9:73:8a:11:36:1f:08:08:c5:2c:9b:9c:02:c7:8c:71:23:
bf:c8:99:cf:de:47:f9:49:8c:ce:b0:13:f8:cc:4c:16:04:0d:
7d:fe:59:8e:e0:a2:06:83:bc:ae:96:53:d4:7f:ae:e7:38:d4:
2e:05:05:79:0a:ba:dc:82:11:08:03:13:e3:63:2f:9b:93:c5:
20:7f:bd:42:c7:05:e0:9b:6a:1b:3a:83:3b:48:a6:1e:5b:7e:
5d:8c:cf:0a:86:87:43:b2:fd:89:58:59:52:a5:d6:f6:75:3f:
72:d0:f7:00:0f:7e:48:51:25:83:b9:e6:f7:98:17:9f:a7:c6:
9d:54:4d:56:d7:1b:94:2d:35:33:63:58:29:dd:36:7a:a4:ce:
25:5f:0b:2b:e4:c1:b8:66:f5:65:c6:e7:ef:6a:30:42:6f:cd:
34:84:89:04:3f:09:3b:61:2a:2c:be:cc:a1:37:8c:b6:fd:00:
a5:da:52:62:3a:fe:39:2b:34:02:98:fa:e8:de:dc:af:cd:83:
23:e0:f7:7a:bd:6a:d5:de:ad:e1:13:88:51:87:a4:8e:39:63:
31:da:4a:5b:d2:3a:07:80:74:3c:32:3a:41:cc:b9:1f:94:a4:
51:7c:55:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:18 2026 by rpki-client