Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142723.roa
File: AS142723.roa (raw, json)
Hash identifier: keFO6eZsEzag/idqJ2I27c1GLiZxYw9JcBEsWKmQ878=
Subject key identifier: E9:C1:94:56:96:7A:29:D0:01:57:3C:95:79:02:1B:89:5A:92:78:8D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1CE93685F4B23ACB7FD316AB6C0A5B94E3418A98
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142723.roa
Signing time: Mon 25 May 2026 03:19:50 +0000
ROA not before: Mon 25 May 2026 03:14:50 +0000
ROA not after: Mon 24 May 2027 03:19:50 +0000
asID: 142723
IP address blocks: 240a:a049::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e9:36:85:f4:b2:3a:cb:7f:d3:16:ab:6c:0a:5b:94:e3:41:8a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:50 2026 GMT
Not After : May 24 03:19:50 2027 GMT
Subject: CN=E9C19456967A29D001573C9579021B895A92788D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:18:98:77:5d:f4:b0:a7:ce:13:35:ef:13:f1:
db:8a:f2:15:74:af:10:46:72:76:cc:1b:0c:a5:7f:
80:c9:93:4a:5e:a5:86:bd:56:21:66:4c:be:79:fe:
54:56:fe:55:fb:d1:e8:18:22:96:dc:f9:ef:00:3c:
a0:38:42:f4:c0:ec:83:b4:c2:6b:df:f8:04:3e:97:
21:f0:c7:95:cf:c7:2d:5b:fe:30:b2:ee:df:f6:76:
b8:99:f8:55:ed:bb:94:f9:6c:a9:cb:54:c5:f1:d3:
d0:78:ed:86:a5:2a:87:83:90:1a:bf:2c:f4:6d:7f:
60:5d:a3:6d:a7:b3:5f:3a:de:4a:68:82:d3:9b:65:
7a:35:02:35:92:2f:e0:3a:08:f2:ba:59:58:15:12:
b6:5b:8f:6e:af:82:0f:ae:27:bf:54:45:d7:1b:af:
46:61:f1:23:41:cc:bb:7a:24:4e:9a:f3:d6:c8:74:
b6:7c:ab:ba:36:9f:f4:3e:4d:00:e9:e9:96:44:4a:
b0:43:f9:f4:ea:ce:81:a2:75:a8:40:29:6a:e0:05:
ac:99:65:72:9f:e5:f4:e6:e0:b1:99:2e:e5:1d:c8:
99:15:4e:c3:07:10:34:26:87:06:2c:75:07:0e:24:
c6:4d:5e:a6:e6:b7:d8:56:65:9b:a5:76:95:e9:df:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C1:94:56:96:7A:29:D0:01:57:3C:95:79:02:1B:89:5A:92:78:8D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142723.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a049::/32
Signature Algorithm: sha256WithRSAEncryption
2c:30:5e:e8:34:23:5b:3d:da:7a:a9:6f:22:f2:fa:d9:59:4e:
58:e0:a6:f9:3f:8a:cc:4b:4b:cf:c1:ed:9a:33:78:4a:0f:a3:
3a:e8:7b:30:f2:50:51:a7:85:b6:41:b0:e1:19:60:cd:ad:50:
b0:ed:60:99:9f:ef:9c:30:bb:0c:97:4e:97:e1:fb:95:32:49:
fa:29:da:a6:b4:bf:0b:ac:3a:03:9d:47:95:dd:d0:9e:08:8a:
1a:f6:b0:2c:71:3c:f3:33:33:be:a1:ac:84:60:ec:66:a3:c2:
f4:57:de:4f:f1:39:d0:ef:12:a1:d2:18:a5:ad:3b:69:3b:1d:
0b:69:15:ea:fb:f3:ed:74:cb:01:82:98:8d:83:b8:91:9e:30:
1c:95:89:bb:7b:20:db:55:fd:65:ec:bc:f4:47:e0:d0:b1:b7:
c2:e9:8d:83:80:60:b3:c9:e4:ad:1e:cd:8a:48:ed:15:6b:9f:
92:ba:e3:d4:08:e7:6f:b6:c6:58:5d:7c:bd:c3:c0:7b:83:2f:
95:5e:9d:27:e8:1e:20:22:5d:5f:d6:4f:71:a8:46:e1:0d:c9:
4a:00:d7:ed:83:18:69:aa:1b:b5:f7:83:2e:9f:fb:70:02:95:
f2:26:ec:00:d6:3f:cc:e0:79:80:6c:8e:4c:0e:14:4b:51:06:
b1:14:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:06 2026 by rpki-client