Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142770.roa
File: AS142770.roa (raw, json)
Hash identifier: OVLPf+6iVqeJ8IC1CsRdBKeoeHvt/lCtbM0CuKHqA8U=
Subject key identifier: ED:57:09:BE:4D:FD:74:96:D7:9E:E2:E0:B7:BB:BF:4A:67:D4:EB:A3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5D153AE376B353C56A002BA2A1FEE9D0D03D6429
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142770.roa
Signing time: Tue 26 May 2026 03:16:36 +0000
ROA not before: Tue 26 May 2026 03:11:36 +0000
ROA not after: Tue 25 May 2027 03:16:36 +0000
asID: 142770
IP address blocks: 240a:a078::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:15:3a:e3:76:b3:53:c5:6a:00:2b:a2:a1:fe:e9:d0:d0:3d:64:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:36 2026 GMT
Not After : May 25 03:16:36 2027 GMT
Subject: CN=ED5709BE4DFD7496D79EE2E0B7BBBF4A67D4EBA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:06:de:a0:e2:6c:94:eb:d8:7f:86:80:e0:
ba:d8:86:a7:3a:df:f4:b5:9c:a9:41:ba:af:aa:e8:
ed:52:0c:2a:c4:92:d2:8f:77:65:6c:46:aa:19:54:
bc:37:01:75:a4:15:e2:59:8f:3f:fb:76:78:9f:94:
16:01:93:a4:5f:17:74:91:02:52:ef:d3:da:94:50:
9a:c7:19:60:b7:a8:ed:3c:8b:38:2c:33:8b:1e:ba:
63:8c:d8:4b:f5:d4:74:3d:48:dd:50:d4:01:e0:6d:
90:ca:0b:03:5d:b0:a9:00:0f:2e:bb:22:1d:95:94:
73:f4:ea:00:29:0e:3c:8f:16:0f:42:dd:b0:84:eb:
88:ae:0a:14:b1:ac:e9:09:ad:05:44:d8:e1:43:83:
8b:9f:7f:78:cc:c7:e0:be:8b:7a:1f:c9:ed:88:9a:
f8:7c:39:e1:c0:59:1f:87:ed:6b:0c:01:50:a4:de:
9f:1d:d8:4c:4e:74:bb:87:c5:35:a2:38:ba:14:38:
f8:de:d7:75:31:24:be:17:e0:a8:ca:20:44:86:b8:
9f:38:86:56:2a:a1:15:1a:cb:f7:a0:bc:b3:1a:b1:
e3:78:51:6a:46:bd:ab:31:fa:cc:c8:d9:64:46:53:
cb:6d:ae:01:1e:68:a6:00:a8:a4:6b:38:7c:7b:c6:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:57:09:BE:4D:FD:74:96:D7:9E:E2:E0:B7:BB:BF:4A:67:D4:EB:A3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142770.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a078::/32
Signature Algorithm: sha256WithRSAEncryption
67:4f:c9:86:28:21:f6:8d:ea:67:85:47:fe:fe:f2:ae:fb:62:
fc:de:94:7d:c4:9d:b9:7d:d5:4f:33:c7:e8:21:00:98:9e:e5:
67:8c:7e:2c:66:07:e3:ad:2c:62:52:b2:e1:e8:67:ff:8e:78:
18:d8:3c:29:b4:78:a4:eb:84:ba:38:70:8f:54:28:98:ad:19:
09:93:68:34:6d:3d:4a:f6:ba:19:05:cd:79:42:0e:70:c8:90:
e8:37:7f:4b:8c:8e:fd:31:25:ec:7e:92:cc:50:53:07:11:45:
37:6d:6a:50:55:76:07:5e:f1:8f:36:0b:b8:62:9a:8d:af:c8:
2e:f6:d0:a3:66:3e:93:d9:a0:6d:eb:d8:75:ef:cd:82:48:86:
58:d8:62:a4:56:ab:c2:8f:59:dd:13:54:da:84:46:93:a5:0d:
f3:c2:4b:05:cd:7c:24:8c:18:ef:d7:46:5f:18:3d:8d:4d:82:
d4:c5:d7:06:c3:0f:5e:d5:05:c3:30:f9:fd:d4:53:0c:6f:69:
04:b7:47:a9:e8:2e:d7:00:ae:3e:ac:2b:08:3a:c3:ef:1b:2b:
21:2c:8c:25:c9:d4:bf:c0:17:f3:20:74:c9:82:42:32:8a:31:
38:97:ee:35:52:59:e5:b7:b6:b0:94:89:0e:84:ac:fa:03:e8:
d7:a0:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:12 2026 by rpki-client