Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142769.roa
File: AS142769.roa (raw, json)
Hash identifier: rpUPRAajslQmcPxdE8nSy82+MUDTFobtgaGF5ccmmcI=
Subject key identifier: 8D:4E:A1:76:E8:AC:63:64:7F:55:5E:50:20:C8:F8:62:C6:64:44:FA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1464876C12EFCAE25FE29E6876FF93DD0BF3879F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142769.roa
Signing time: Fri 22 May 2026 07:09:14 +0000
ROA not before: Fri 22 May 2026 07:04:14 +0000
ROA not after: Fri 21 May 2027 07:09:14 +0000
asID: 142769
IP address blocks: 240a:a077::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:64:87:6c:12:ef:ca:e2:5f:e2:9e:68:76:ff:93:dd:0b:f3:87:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:14 2026 GMT
Not After : May 21 07:09:14 2027 GMT
Subject: CN=8D4EA176E8AC63647F555E5020C8F862C66444FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4d:48:0c:f3:24:8b:58:96:63:c4:1c:93:0f:
ed:25:5e:23:72:aa:46:42:76:78:74:25:57:89:3d:
1a:6b:e3:a9:06:1e:80:ca:95:c7:4e:1b:56:c8:ef:
7e:18:d6:91:3b:7b:08:2e:09:bb:fa:28:d7:7e:12:
f6:ba:ee:6e:6e:f4:15:de:c1:dc:69:87:89:1a:d7:
f0:44:2f:53:9c:c4:97:ba:46:a8:49:19:38:77:10:
c4:6a:5a:59:31:47:2a:8d:bd:7e:c5:46:a7:2d:1f:
38:f0:de:9f:05:cd:3e:38:16:97:cc:da:be:11:76:
fa:7f:d0:2a:b5:2f:d6:30:ac:8f:0c:bc:7a:d2:64:
cb:c9:70:d4:9e:ce:22:24:c6:3a:7b:e6:38:46:00:
06:c3:3b:7f:b4:e3:75:c9:58:89:14:92:fd:af:dc:
ec:c1:66:87:d5:47:18:b6:ac:b0:9d:3d:96:a2:5f:
41:2f:69:c5:5a:f4:f4:8b:1e:45:a4:e0:8d:ab:78:
9f:19:4e:f5:d7:e2:07:59:07:25:2a:2f:f5:6a:05:
9f:ee:16:b0:3e:29:54:53:75:af:28:0a:4d:91:82:
42:98:d3:e3:5f:3e:c2:ad:f4:d7:4d:1d:6d:ce:6d:
b9:a1:52:6a:9b:8f:81:35:04:f3:c4:31:4f:7f:6b:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4E:A1:76:E8:AC:63:64:7F:55:5E:50:20:C8:F8:62:C6:64:44:FA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142769.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a077::/32
Signature Algorithm: sha256WithRSAEncryption
a3:99:ad:d8:41:f3:12:2c:15:0c:7d:a0:0d:26:9f:9d:e2:54:
80:cf:3b:e5:73:06:41:9f:56:95:dc:c2:af:3c:cc:53:6d:69:
c0:4e:e1:f6:d9:eb:98:94:4c:1a:eb:69:d7:9d:e5:72:71:d1:
53:c3:da:38:4e:0f:fa:cd:de:c4:7c:fe:28:3f:3c:67:6f:99:
c4:78:e6:27:e7:40:63:17:73:99:35:0b:95:9a:51:fd:f9:29:
cc:51:f4:33:5e:85:7d:57:94:b7:00:a7:b7:31:0c:63:c3:23:
5d:09:10:19:4a:ab:c1:80:70:9d:88:05:1b:ea:64:87:f3:73:
12:70:0c:cc:55:e2:9b:18:d8:f7:d3:03:93:c8:e1:e5:c8:af:
a3:26:53:9f:0b:d0:eb:40:af:4a:89:69:04:b2:2c:4f:67:b4:
58:84:37:56:ed:46:89:86:da:bb:63:87:e9:14:03:de:1b:8c:
9e:0c:2b:12:ec:5f:64:1a:24:e8:e2:66:6d:75:61:27:23:56:
fd:77:ac:e7:c8:3f:d0:6d:d2:e2:75:cf:12:95:7f:b3:ed:96:
86:8b:ff:a1:75:c0:b7:b9:a4:35:80:1a:ac:ee:f1:57:29:64:
40:23:1b:0a:00:d0:ab:52:88:cb:f7:33:db:62:41:79:78:d9:
ab:d3:28:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:50 2026 by rpki-client