Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142802.roa
File: AS142802.roa (raw, json)
Hash identifier: b7GSK2RHKYKAF3UeSt0PXppNHo84oBWYg1wGG8VmFBs=
Subject key identifier: 9C:22:5F:86:F4:CF:44:F7:64:DD:14:CB:9F:5B:8C:80:D2:88:40:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 440BBC818F8B69E4080E0D4E2FC53297E69BA738
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142802.roa
Signing time: Mon 25 May 2026 02:22:15 +0000
ROA not before: Mon 25 May 2026 02:17:15 +0000
ROA not after: Mon 24 May 2027 02:22:15 +0000
asID: 142802
IP address blocks: 240a:a098::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:0b:bc:81:8f:8b:69:e4:08:0e:0d:4e:2f:c5:32:97:e6:9b:a7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:15 2026 GMT
Not After : May 24 02:22:15 2027 GMT
Subject: CN=9C225F86F4CF44F764DD14CB9F5B8C80D2884070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:2f:64:0f:56:7d:b7:c6:01:6e:e9:75:0c:
f9:37:7f:0d:1c:a9:f6:d7:39:4f:e0:db:1a:63:b9:
0e:b8:34:82:b5:24:85:a8:23:71:59:5c:fd:fd:45:
a3:e2:fa:70:28:ec:89:97:63:3a:42:98:0e:39:76:
45:3a:5c:c1:fe:a0:b2:99:9e:7d:f2:7d:53:0d:b3:
e7:37:e8:8a:42:df:b8:aa:e5:fa:76:50:d7:8e:18:
93:b7:c8:8c:63:9e:cd:d2:c9:a4:fc:d8:b0:7b:74:
57:9b:41:05:e2:5f:7c:3c:08:02:dc:f5:e7:ec:c3:
01:d2:b7:8b:cc:37:51:21:99:e0:da:6d:2a:d4:d3:
a5:6b:c2:a7:15:57:7e:7b:f7:7b:84:22:07:9e:8b:
b2:2e:75:4b:f0:59:45:cb:1b:57:6a:fe:32:68:32:
b2:ec:c8:ba:06:1d:28:ed:c4:4c:4b:b2:1a:bf:35:
3f:2c:fd:58:86:5b:80:52:a3:4d:a6:16:f9:a8:13:
a4:50:c2:1c:70:38:00:27:70:60:70:2c:0f:af:92:
32:c5:ba:6e:73:79:10:96:56:83:e6:f7:1b:cb:99:
53:b7:2e:33:a2:a6:90:cf:46:1d:19:4e:41:fa:ca:
99:3c:71:f9:8b:88:02:aa:ab:ec:86:ce:ea:7e:e3:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:22:5F:86:F4:CF:44:F7:64:DD:14:CB:9F:5B:8C:80:D2:88:40:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a098::/32
Signature Algorithm: sha256WithRSAEncryption
22:96:af:a0:b0:8c:d6:09:24:56:e3:b3:44:8b:fc:20:20:4a:
e3:d0:5d:f7:b9:79:d3:e3:ff:5a:b9:79:5f:c6:6d:15:fc:12:
d8:d5:34:5c:1d:5d:d6:93:23:77:ef:cb:35:3b:88:65:e8:a0:
73:52:75:0c:45:e8:8a:d4:75:c1:16:2b:22:5d:64:48:33:7c:
32:bc:0e:3a:69:4b:99:54:e5:f3:c6:43:66:f2:ed:2f:51:52:
4c:94:cf:be:73:7a:50:ce:56:69:94:b6:f1:f2:b5:20:d6:34:
14:ac:94:5e:ea:f6:4e:97:b4:b1:51:1a:d9:b4:ca:3c:37:ef:
fa:f4:20:8c:74:92:33:ed:f8:48:03:5d:4f:08:54:d1:f9:5e:
93:47:d7:12:1c:13:a2:94:a3:a7:5e:39:1b:b3:ec:27:b8:c8:
67:ff:6e:b6:5b:f7:dd:f5:99:8e:01:84:c0:dd:dd:43:8d:fc:
15:55:9f:8c:82:8c:c1:95:90:14:7b:06:77:b3:36:71:68:76:
0a:3d:a4:b5:aa:64:f6:d2:88:6e:6e:9b:64:3e:8d:72:4e:d2:
0c:78:a6:18:e7:eb:f4:47:90:84:6d:6e:b9:56:1d:8a:0c:74:
2d:a1:ac:4b:b0:91:02:94:f9:34:1e:76:83:4f:ec:1a:28:e3:
ac:ef:fa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:00 2026 by rpki-client