Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142783.roa
File: AS142783.roa (raw, json)
Hash identifier: Le1PKIkrR5oUbdxJde/sXxXlk25F/J9OyQELdlh7xx8=
Subject key identifier: 86:8B:E2:D4:89:50:1F:67:BD:22:5D:59:B6:2C:3A:F7:A6:2C:0F:94
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 46258C7558B5B2045211952599474B79E6CA8A32
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142783.roa
Signing time: Tue 26 May 2026 02:35:17 +0000
ROA not before: Tue 26 May 2026 02:30:17 +0000
ROA not after: Tue 25 May 2027 02:35:17 +0000
asID: 142783
IP address blocks: 240a:a085::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:25:8c:75:58:b5:b2:04:52:11:95:25:99:47:4b:79:e6:ca:8a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:17 2026 GMT
Not After : May 25 02:35:17 2027 GMT
Subject: CN=868BE2D489501F67BD225D59B62C3AF7A62C0F94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bf:3b:88:0f:ec:cb:c7:70:e2:22:54:91:88:
03:d7:9e:67:0f:2a:3a:0a:85:bb:2d:6e:c5:88:02:
31:e5:27:89:9b:6a:83:5c:15:7f:aa:fe:36:6a:ef:
0d:e9:18:97:45:18:c4:2b:34:ce:f1:95:d9:43:cf:
5e:58:1a:ab:db:77:b1:fd:b9:ce:93:c7:e7:e5:de:
33:fe:46:fe:59:98:8d:a5:23:3a:bf:a5:d5:32:88:
ee:a1:dc:8d:14:ec:56:61:33:46:df:bc:c9:82:af:
37:78:7e:2a:67:e6:d3:7c:44:89:07:c1:99:d5:5a:
e5:eb:0a:a4:b2:6d:58:5e:fb:9a:05:f2:e7:b0:d4:
e5:9f:ef:fe:18:81:5a:58:8e:3c:52:dd:e1:80:e1:
37:01:6a:f0:15:4c:dc:a4:d1:5f:84:dd:86:42:ad:
69:99:d7:48:4b:d2:0d:9f:c0:4a:2c:15:92:aa:c9:
32:6b:39:8e:9e:1e:1b:ac:70:d0:39:81:c6:12:19:
8c:c8:ed:50:b4:48:80:08:d7:4c:53:25:7a:9a:e1:
0b:91:19:9d:4d:40:9c:0a:1a:87:a1:0c:48:7d:41:
d1:ed:44:98:26:6f:4b:4f:ca:13:4c:ff:1c:b3:ab:
1b:e1:92:e9:a2:48:99:40:84:2b:66:0b:4f:54:ca:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8B:E2:D4:89:50:1F:67:BD:22:5D:59:B6:2C:3A:F7:A6:2C:0F:94
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142783.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a085::/32
Signature Algorithm: sha256WithRSAEncryption
2c:34:31:e0:9f:80:7a:cd:93:b9:4d:1b:26:75:09:fb:38:13:
7a:44:6b:50:37:d8:b6:7f:85:d2:33:70:c5:27:c4:19:62:94:
09:04:19:e4:e0:db:5c:83:bc:08:ac:ba:87:2e:bb:e4:e1:42:
c4:f2:f6:e4:56:32:e6:fc:36:66:e6:b5:da:a1:04:74:a4:b1:
21:e9:9f:49:00:f0:d6:53:e9:90:cd:08:2d:f0:23:cc:8a:ca:
6b:5f:68:0f:34:3b:e7:bf:72:fe:6e:e0:cd:dd:c3:43:ee:7c:
3f:44:26:c7:c6:43:9e:a6:45:ec:c5:33:27:18:b1:98:f1:59:
21:da:62:0e:28:41:db:48:75:69:82:e0:80:24:49:c3:5b:78:
18:31:db:bc:cf:2a:6f:75:f8:4b:0b:71:0a:b4:56:4a:45:31:
31:c5:79:e6:5d:3e:cd:e9:b2:b0:5e:9b:cb:35:a2:ce:b0:ef:
59:fa:20:85:e7:0e:a5:be:b5:87:66:c6:6f:1a:20:6b:87:b5:
37:56:67:b1:ed:aa:b1:16:25:d7:89:6a:0e:42:7b:a6:9e:7c:
62:1f:4c:5b:ee:09:cd:2c:51:03:da:d4:d1:28:bf:9e:c1:3a:
83:05:00:82:2c:dd:7f:7d:6b:3c:7a:f8:4d:d4:c9:0c:a8:9f:
c1:9b:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:12 2026 by rpki-client