Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142791.roa
File: AS142791.roa (raw, json)
Hash identifier: 2V73TuKrBTtc5hz9IRIsHsx4ghK4I9eQqET3pfBBngM=
Subject key identifier: 77:C7:4C:CB:7E:BF:5F:5F:E6:64:0D:19:A8:13:2B:29:A2:91:E8:7C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B3FB8E87DB39A5414144563BFA0B883362CD9FA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142791.roa
Signing time: Mon 25 May 2026 01:20:19 +0000
ROA not before: Mon 25 May 2026 01:15:19 +0000
ROA not after: Mon 24 May 2027 01:20:19 +0000
asID: 142791
IP address blocks: 240a:a08d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:3f:b8:e8:7d:b3:9a:54:14:14:45:63:bf:a0:b8:83:36:2c:d9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:19 2026 GMT
Not After : May 24 01:20:19 2027 GMT
Subject: CN=77C74CCB7EBF5F5FE6640D19A8132B29A291E87C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:9f:b0:00:c4:15:e9:b6:d2:0e:c1:41:59:
fb:09:fa:a0:9b:8b:da:bb:4a:27:01:16:af:7b:b8:
ce:b2:07:7e:83:8f:50:6f:74:23:e1:da:f2:b1:c2:
58:b0:11:0e:f1:32:df:20:6b:db:da:d3:43:d7:66:
74:ce:c3:4b:48:cd:45:c6:a2:23:b9:75:7e:8e:59:
7c:5b:c6:93:45:7d:b8:63:fc:35:ec:be:28:a3:ae:
f2:60:46:cb:0e:60:72:09:b6:07:52:18:72:ee:4d:
5f:3a:6b:31:7f:39:7d:84:64:11:68:12:a5:48:79:
b6:6b:96:20:3e:fb:aa:59:8a:9d:de:1f:59:d4:32:
98:e4:c7:3a:2a:6a:c4:bd:a6:5d:d7:93:63:0b:90:
e6:a3:23:c9:b2:d6:99:88:0a:ff:b6:06:a9:f5:78:
91:58:f0:0f:dd:89:71:9f:71:9b:45:3b:cf:7e:54:
8d:49:af:5b:a4:a7:a7:7b:1a:e5:64:67:60:cf:ca:
b7:b2:d1:e0:2e:5a:c1:70:c2:27:c6:03:1b:53:93:
71:80:7b:31:8c:45:03:95:e3:9e:ff:0f:ee:f6:11:
a6:70:b9:51:3e:ce:eb:51:d0:45:c8:d1:5f:6c:00:
6c:e5:54:21:76:57:21:31:3b:d0:8a:5e:ab:d7:da:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:4C:CB:7E:BF:5F:5F:E6:64:0D:19:A8:13:2B:29:A2:91:E8:7C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a08d::/32
Signature Algorithm: sha256WithRSAEncryption
94:f1:c0:e9:44:c2:31:b4:b3:a5:3f:62:af:78:62:0e:27:9f:
7c:44:16:53:bc:e4:47:32:de:52:91:1f:bb:c8:8e:2f:df:7b:
c3:8d:b1:93:e2:05:ec:94:a9:90:bd:07:dd:9c:92:a9:e9:62:
75:5b:7d:9e:05:a8:46:0d:9e:b7:99:90:39:0b:74:8f:29:b8:
b3:ad:5b:ef:fb:5b:2b:81:5d:e1:4e:02:45:e6:b5:c5:0f:db:
82:28:12:ba:88:11:77:44:f4:8c:08:36:e1:e5:77:c8:5a:94:
13:c5:2d:bb:1c:82:c8:86:5d:94:b9:81:cd:f7:8e:53:af:83:
9b:d3:bf:70:44:e1:87:da:b3:84:d0:f9:58:be:eb:be:6d:f7:
ee:4f:08:36:15:fd:b5:de:6f:bd:3b:dc:3b:6c:47:44:ec:d0:
b1:37:fa:41:57:bd:b0:3f:3e:93:e1:7f:95:a5:66:21:9a:ff:
3e:b7:1c:a8:03:20:0f:7f:4f:62:e9:c4:57:3f:6b:2f:07:27:
b6:ca:e5:fa:0c:96:24:e1:57:24:d4:79:eb:85:04:20:39:4e:
fc:32:31:5b:3e:f5:ec:2c:3e:b0:d5:c5:99:5c:da:d7:58:22:
65:d6:a2:ca:ef:1b:10:af:5a:28:d7:58:f0:e4:77:33:c2:ad:
90:94:e5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:13 2026 by rpki-client