Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142754.roa
File: AS142754.roa (raw, json)
Hash identifier: TTtgvU4dTMkQjWKrmfC/awSf2vu28DkamZRKT/L6pUw=
Subject key identifier: 11:B8:42:28:23:5C:19:DD:92:36:BA:8D:DB:94:49:E2:D2:E1:2E:72
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 17845397240793C7B4452855DF368E88E68C8417
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142754.roa
Signing time: Fri 22 May 2026 06:58:49 +0000
ROA not before: Fri 22 May 2026 06:53:49 +0000
ROA not after: Fri 21 May 2027 06:58:49 +0000
asID: 142754
IP address blocks: 240a:a068::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:84:53:97:24:07:93:c7:b4:45:28:55:df:36:8e:88:e6:8c:84:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:49 2026 GMT
Not After : May 21 06:58:49 2027 GMT
Subject: CN=11B84228235C19DD9236BA8DDB9449E2D2E12E72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:87:b9:bd:c8:c1:eb:4f:dc:0c:03:d5:3d:
d1:21:3c:64:d0:48:bb:41:a9:6a:bb:32:5c:c4:c6:
39:8e:94:2a:f0:17:81:ce:44:45:98:4b:0f:7c:53:
e5:1a:52:92:05:bb:7f:d5:8d:83:a3:3d:13:24:83:
79:5a:3b:e3:4d:19:88:be:f7:4f:b2:fd:53:9a:a8:
25:58:41:d7:ed:65:69:a7:d2:7f:77:a8:60:1d:8d:
e5:ec:d8:3e:6c:95:9d:2f:20:cb:2c:a6:2a:96:52:
34:a3:48:3c:ad:be:54:3e:61:71:db:6b:94:06:c3:
f9:6f:87:97:64:90:5a:a8:80:9c:b1:75:75:3e:71:
c3:7c:66:b2:7d:54:29:65:8b:09:72:a7:fe:12:2d:
49:48:d8:ac:5c:1e:1b:30:99:f6:29:f1:12:d2:10:
72:5d:5e:1b:89:5b:60:6b:68:38:85:33:42:ba:1c:
49:85:db:99:7f:2b:7b:c1:58:b2:09:b4:6c:a6:6c:
5c:9c:5c:97:c6:49:93:09:39:f6:9a:d0:4d:d9:08:
9d:e3:ed:77:8c:6e:e8:69:ec:13:b6:55:da:e8:a8:
3b:7b:ef:57:dd:07:37:8f:b7:06:17:c6:13:db:01:
59:00:00:a9:94:54:32:a6:31:2d:dc:14:cd:b2:38:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B8:42:28:23:5C:19:DD:92:36:BA:8D:DB:94:49:E2:D2:E1:2E:72
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142754.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a068::/32
Signature Algorithm: sha256WithRSAEncryption
33:5d:bc:8d:b8:62:21:2b:ce:71:c5:47:63:e5:ee:86:1b:0b:
47:f3:74:01:ae:95:b2:04:c5:17:a7:7d:66:93:16:ba:54:90:
8c:91:94:ba:13:92:93:0a:82:91:5a:3e:48:24:e1:eb:63:5e:
df:10:16:8f:47:de:bc:d0:23:db:71:ee:6c:0d:0f:d9:ba:5d:
66:84:16:67:88:99:76:9e:5f:7b:88:80:82:86:a7:b2:1c:cd:
10:7d:31:1e:59:c2:f5:6e:08:e0:93:91:8f:e5:39:e3:6c:03:
5a:bb:4e:b4:c2:fe:1d:f4:5b:ca:62:6d:cf:43:02:21:aa:f5:
56:fb:d7:bb:5c:fb:05:9b:41:2e:84:54:23:fe:48:50:f0:71:
6d:65:3d:f8:c7:4a:22:3c:f6:57:5d:08:0d:02:65:ca:0e:77:
1c:48:e3:70:5f:5a:c5:b6:85:01:04:17:b2:e4:36:b8:91:16:
ed:ab:83:33:bb:98:f8:8a:a0:7a:f1:10:a5:8a:19:0d:b4:53:
e2:d0:35:6e:c9:86:31:ed:6d:64:b3:92:95:8e:7e:a4:41:d7:
5d:08:5c:b0:2f:ca:2b:a4:0a:27:5d:3d:0c:11:4c:22:7b:f6:
a9:8a:aa:e5:2f:8e:26:a2:3e:bb:0a:8f:16:c2:5a:20:de:23:
65:c0:2f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:53 2026 by rpki-client