Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142736.roa
File: AS142736.roa (raw, json)
Hash identifier: 0IHYSvUn9Ku5mGeS7W9uWRW7gvROc3x/9IPFj5wBTfM=
Subject key identifier: F3:6D:75:F9:0B:5D:81:71:C3:0D:5D:88:1D:6F:26:0C:61:59:43:FF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5E043C32FB5F0038B002A07BBFDED6D317AA4C5A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142736.roa
Signing time: Mon 25 May 2026 03:19:44 +0000
ROA not before: Mon 25 May 2026 03:14:44 +0000
ROA not after: Mon 24 May 2027 03:19:44 +0000
asID: 142736
IP address blocks: 240a:a056::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:04:3c:32:fb:5f:00:38:b0:02:a0:7b:bf:de:d6:d3:17:aa:4c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:44 2026 GMT
Not After : May 24 03:19:44 2027 GMT
Subject: CN=F36D75F90B5D8171C30D5D881D6F260C615943FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:83:88:36:89:6c:6b:33:b2:a4:16:95:d9:
70:28:33:94:fe:f1:19:87:51:27:1a:4e:1d:ec:33:
01:87:1d:1b:cf:87:59:89:51:d7:56:89:5c:03:1d:
0e:7f:2b:5e:17:4f:66:dd:5e:55:3c:c7:cb:b1:71:
42:00:85:0d:3b:b0:d4:4f:7e:89:91:5b:05:c2:16:
a3:d7:7a:af:38:53:bc:fe:c1:69:08:85:57:c7:06:
f7:e7:f8:d7:22:81:94:cd:9e:04:9c:34:93:1e:af:
5a:af:5b:bf:a7:83:c1:5b:13:47:af:19:73:f2:0d:
88:fc:ea:b4:e0:18:14:b1:68:d3:93:0b:eb:35:2f:
69:04:d8:25:40:d5:61:ca:23:95:bb:7c:35:d2:f4:
09:63:20:82:e4:9c:e5:76:64:85:c5:41:4a:1f:75:
04:58:04:5a:2f:9b:87:aa:08:a4:2f:35:40:b1:86:
eb:c5:7f:42:ad:e9:41:cb:4f:d6:ab:db:aa:1e:48:
df:9d:35:96:c2:b2:17:12:33:98:4c:e3:f7:3b:a0:
34:4f:fb:d9:32:c0:2e:d7:57:8b:7f:9d:27:4a:61:
fa:87:23:cd:df:db:e3:70:e2:43:8c:86:fd:ab:52:
c7:a9:18:97:02:b3:ea:b6:f4:75:30:0e:44:c7:10:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6D:75:F9:0B:5D:81:71:C3:0D:5D:88:1D:6F:26:0C:61:59:43:FF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a056::/32
Signature Algorithm: sha256WithRSAEncryption
5a:ae:e6:21:19:43:9a:43:ab:70:f3:c3:31:7f:5c:61:44:5c:
a2:e7:55:5d:f7:2c:3f:32:7b:dd:d2:27:36:ce:fa:52:a2:0b:
bc:b0:1b:0d:eb:b8:41:80:96:60:7d:73:ea:0d:1f:7c:9e:0e:
0d:77:3e:01:dc:4d:63:0b:40:f2:94:fa:48:83:c7:6e:76:e5:
1b:c4:af:0e:9f:37:d8:9f:20:a1:c1:a5:57:97:9e:56:b8:a5:
ec:33:72:de:16:53:b9:37:ed:f2:e0:2b:c5:23:75:2b:c8:07:
27:f1:d2:a3:c9:3b:83:aa:8e:ef:dc:cf:35:db:8b:81:83:9e:
8b:53:ce:48:1d:bb:48:0b:6c:4a:49:c5:10:02:f6:af:cd:c3:
21:87:eb:c9:b2:11:2a:45:8b:c9:06:c2:03:07:b9:53:dd:b2:
1f:4d:85:eb:be:93:f6:71:b1:88:2f:90:dc:4b:78:b2:3f:10:
52:b7:cd:ad:b0:5c:3d:6c:0f:34:9a:3a:58:3d:71:bc:0a:0a:
e2:73:1c:28:a7:0a:97:ce:d9:fa:54:02:cc:96:ea:63:7e:e9:
40:51:ec:80:42:ca:a3:f4:76:b1:1b:8b:71:5b:1d:92:f3:7c:
ad:00:1f:3b:9f:15:fe:1c:05:f8:1a:c0:fb:c8:ae:e2:dc:68:
78:2a:f3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:52 2026 by rpki-client