Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142796.roa
File: AS142796.roa (raw, json)
Hash identifier: pFeBb0pSc1OZqreozMHLQEPgNlqAWWvU3fF8oY71nhE=
Subject key identifier: 32:1F:8E:37:2E:E8:80:DF:23:60:1D:AB:94:D2:0C:A5:AB:FF:A8:08
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6C8A2320F9A76576458739463CBC347B7F0BA907
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142796.roa
Signing time: Fri 22 May 2026 04:27:08 +0000
ROA not before: Fri 22 May 2026 04:22:08 +0000
ROA not after: Fri 21 May 2027 04:27:08 +0000
asID: 142796
IP address blocks: 240a:a092::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8a:23:20:f9:a7:65:76:45:87:39:46:3c:bc:34:7b:7f:0b:a9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:08 2026 GMT
Not After : May 21 04:27:08 2027 GMT
Subject: CN=321F8E372EE880DF23601DAB94D20CA5ABFFA808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:96:0c:ec:dd:9c:e1:fd:36:fd:30:61:e4:
e5:73:39:f1:47:78:11:1f:f9:a4:a5:7b:c6:d1:10:
56:5d:54:a6:92:15:e2:08:39:d2:f3:e3:ef:95:d5:
0e:02:ec:20:5d:35:b9:aa:59:09:ca:81:70:af:10:
7b:83:80:87:45:0f:4c:63:c4:cd:77:0f:a1:41:1a:
98:b7:90:68:29:34:b9:ea:c9:d0:6a:8e:c8:a6:0f:
02:ef:48:05:98:01:37:5d:43:dd:d8:56:c2:95:53:
47:eb:51:06:8a:1a:64:2a:8a:e9:95:1e:f5:e1:af:
8b:37:ba:19:49:8f:32:fb:54:87:c0:7b:f2:e7:43:
22:86:65:8c:86:e5:c1:b9:81:ab:00:e4:a6:01:a2:
73:df:77:f8:2d:b6:36:87:3e:5d:24:b9:50:d9:7f:
78:44:b6:3c:bd:94:54:94:71:3c:0f:e8:b7:a2:82:
22:ae:d7:d7:71:42:1b:0c:21:83:6a:cc:84:d8:cd:
d1:37:81:66:d7:16:e4:b2:94:dc:5a:0e:34:db:44:
64:4f:99:fc:47:8a:e8:30:4f:4c:ea:d2:1c:57:f5:
54:dc:c1:9e:71:b3:f2:34:4c:ff:c3:ae:58:c9:b9:
ea:c9:8a:a2:5a:70:ef:65:d9:47:7b:a2:81:2a:5a:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1F:8E:37:2E:E8:80:DF:23:60:1D:AB:94:D2:0C:A5:AB:FF:A8:08
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142796.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a092::/32
Signature Algorithm: sha256WithRSAEncryption
84:13:f3:1f:e1:80:c6:91:24:2e:a5:65:6d:11:9d:25:53:34:
54:de:c3:2a:77:3f:75:77:19:2f:5a:67:9d:81:9c:cd:b8:57:
8a:b7:15:10:79:71:43:50:68:c1:88:5c:41:c2:03:a4:a9:8a:
3f:43:d2:9b:d5:17:31:34:e7:dd:d2:cb:00:23:d3:56:08:e8:
44:2f:de:bc:2c:7d:c6:14:6f:97:4a:32:a6:68:3a:03:db:9a:
b5:7b:fc:fb:86:79:38:4c:1f:a6:84:8b:35:d6:96:9b:d8:7c:
cd:ea:5a:a5:4f:2a:c0:76:10:7d:99:06:7b:4b:86:16:5a:9b:
2d:54:7c:65:b5:2b:f0:42:e9:cf:dd:a0:65:1c:e0:64:65:19:
d7:7a:df:27:c2:df:84:61:e1:d9:5b:11:6e:94:7d:5f:97:ed:
ee:1e:30:2c:12:8c:4c:f1:1b:15:dc:21:6e:dd:b8:60:db:7e:
83:03:1e:70:7e:4c:a0:0d:0c:c9:c3:77:3b:b0:ce:0e:b1:f4:
5c:d1:85:00:9c:c3:d9:0c:eb:6e:7d:57:5c:e5:73:e6:ec:de:
96:7f:02:73:26:7b:fc:81:1a:bd:7a:c4:31:df:7c:c4:7c:0e:
39:13:73:29:10:ab:06:e8:6e:31:aa:d9:91:ec:1d:ed:28:29:
27:b3:5d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:42 2026 by rpki-client