Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142755.roa
File: AS142755.roa (raw, json)
Hash identifier: RZt3gMBXN2dwyCxbFOxOdShgH5b7XEPByb9tXdUZEg0=
Subject key identifier: D1:B9:62:0D:9F:29:00:0C:3B:91:CB:97:67:0E:F1:3D:63:BD:2D:26
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4504F1F371B34DC68F86D0B8868B894CA45FCBFD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142755.roa
Signing time: Mon 25 May 2026 02:22:22 +0000
ROA not before: Mon 25 May 2026 02:17:22 +0000
ROA not after: Mon 24 May 2027 02:22:22 +0000
asID: 142755
IP address blocks: 240a:a069::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:04:f1:f3:71:b3:4d:c6:8f:86:d0:b8:86:8b:89:4c:a4:5f:cb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:22 2026 GMT
Not After : May 24 02:22:22 2027 GMT
Subject: CN=D1B9620D9F29000C3B91CB97670EF13D63BD2D26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:3d:ff:92:b9:e2:1b:50:d9:78:21:b9:6c:
45:53:84:bb:f8:2d:d3:ea:6d:3c:2e:16:fd:30:94:
a1:9c:0a:ae:bf:62:89:91:4c:80:a9:f9:ad:6f:4a:
01:e1:ab:ff:80:9b:a0:f3:87:62:43:74:8a:70:83:
21:43:33:da:85:69:e6:18:a4:d0:75:38:ca:dd:c4:
4f:8e:53:e6:77:3c:20:61:ad:c3:76:1b:11:a7:f1:
10:cb:bc:1b:bc:a0:a7:33:5f:86:68:ef:3a:37:f2:
70:c2:4a:74:56:69:06:3b:1c:0e:8b:6c:f0:ad:86:
52:be:e1:c9:a7:50:3d:26:5d:9d:ae:75:66:10:a0:
a9:05:5a:b8:3c:7d:bf:a9:2c:44:5e:36:f9:11:96:
e4:a0:95:24:a4:fc:a1:48:c5:b9:aa:b9:33:de:5e:
2d:bb:a2:33:20:8b:18:77:c8:a6:0c:33:27:90:b8:
87:39:f6:ba:76:2a:fe:33:ce:b5:72:28:e7:18:28:
8e:65:05:94:1b:29:13:1f:c9:1c:a1:0b:57:a5:8a:
38:32:25:00:56:72:1d:80:b2:f8:b0:94:13:1b:8f:
13:14:a8:d9:e0:b4:59:c4:45:d3:e3:08:3f:ed:c6:
97:03:b3:da:44:ef:bc:8b:5f:d8:f0:7f:b3:d9:c6:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B9:62:0D:9F:29:00:0C:3B:91:CB:97:67:0E:F1:3D:63:BD:2D:26
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142755.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a069::/32
Signature Algorithm: sha256WithRSAEncryption
50:cc:e4:30:0c:c6:84:4a:d1:70:c2:a3:82:1a:73:5d:c6:c7:
e7:d6:ca:27:17:77:a7:80:e6:d0:8e:9a:60:19:32:33:d6:81:
68:1d:94:ca:92:76:66:e8:e6:57:a7:d3:be:a5:72:4a:29:c1:
46:0c:60:9d:f5:cb:1b:86:c6:bc:1f:4e:81:34:93:8a:13:1e:
f0:a8:a0:be:72:a0:7d:cc:0c:2b:dd:31:23:e3:3d:38:b3:ad:
94:09:21:e3:3a:a7:f9:ae:41:8a:e3:35:a5:e6:0a:e8:dc:b4:
54:97:fb:aa:a8:3a:ff:5c:bd:4b:18:f9:7d:05:8c:77:98:84:
fa:20:da:70:38:31:43:70:ad:12:7e:4d:64:32:07:d8:6c:43:
8f:62:d9:d2:a9:fd:12:36:e5:cf:2f:31:58:f9:1f:38:78:f6:
60:a3:94:6b:78:58:8f:85:d4:5a:9c:5d:64:1a:f6:7e:3a:52:
8c:14:42:1d:25:12:91:8e:7d:bf:ce:5b:bc:6b:f5:15:50:48:
21:c2:b3:d8:8e:ce:87:ee:dc:3a:9a:35:0b:d7:2d:ca:41:28:
83:b3:aa:78:cb:44:07:5d:18:b4:3a:2c:79:dc:85:b3:86:65:
da:2e:73:0d:0e:4e:51:7f:f6:67:bd:d3:f3:bb:fd:a9:9d:ee:
8d:d4:7d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:33 2026 by rpki-client