Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142808.roa
File: AS142808.roa (raw, json)
Hash identifier: E9aKrR/ClI09ZWXSQYGnK99Uaf3auc8o0Jk2IZYhcj0=
Subject key identifier: AC:95:87:96:EF:B3:31:BF:32:52:5F:47:A0:E7:C6:CA:BE:96:2F:32
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 45B5205764D1040AFA74E1D311F6B1EFF72FF57B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142808.roa
Signing time: Fri 22 May 2026 06:27:57 +0000
ROA not before: Fri 22 May 2026 06:22:57 +0000
ROA not after: Fri 21 May 2027 06:27:57 +0000
asID: 142808
IP address blocks: 240a:a09e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b5:20:57:64:d1:04:0a:fa:74:e1:d3:11:f6:b1:ef:f7:2f:f5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:57 2026 GMT
Not After : May 21 06:27:57 2027 GMT
Subject: CN=AC958796EFB331BF32525F47A0E7C6CABE962F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:18:1e:70:3c:1c:e3:0c:95:8a:51:66:44:
ef:50:28:ea:ea:34:7f:22:72:b2:a8:18:54:8e:d9:
6f:04:cf:b5:78:46:e6:d5:f4:1e:d6:48:91:41:ab:
fb:4b:37:5c:2e:87:c2:c8:b1:b3:48:3f:14:b3:79:
07:f1:39:b5:70:9f:5f:99:99:59:c3:de:c8:7b:31:
07:0c:57:6e:23:29:22:9f:db:03:36:b7:05:70:78:
dc:9e:ee:76:5a:32:4d:69:9d:c5:26:ab:40:77:b1:
68:18:fb:89:56:4a:d2:51:48:9e:bc:a8:43:3a:aa:
55:ff:cd:8e:75:25:ba:d1:92:70:e0:5c:d8:7c:d4:
49:ec:d8:2b:29:dd:f9:31:52:6a:27:1d:ac:a1:06:
b4:df:4f:29:92:3c:7b:af:fb:b6:d6:06:59:8a:68:
88:3a:f0:fb:e7:05:d3:5b:e1:bd:4f:81:dd:3f:5e:
cc:f7:0d:7e:aa:07:c6:62:c3:e9:73:4a:2f:45:5e:
97:85:bf:30:64:6b:16:b5:0f:5f:f8:bc:6c:df:ed:
24:f5:6a:b1:56:67:b6:dd:be:a5:21:f6:6d:c7:98:
d3:1d:7d:5d:3f:d7:99:8c:3d:d9:ae:df:de:98:41:
ae:6a:2b:83:cd:cb:ed:46:0a:b7:cd:47:cb:3a:97:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:95:87:96:EF:B3:31:BF:32:52:5F:47:A0:E7:C6:CA:BE:96:2F:32
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a09e::/32
Signature Algorithm: sha256WithRSAEncryption
ae:2b:5d:e2:55:af:56:57:a2:4a:15:c3:66:81:e5:a1:4a:14:
54:a8:a8:89:27:ea:98:58:1e:33:56:6f:1a:58:83:8c:7b:bb:
19:9a:37:d0:1e:d6:b9:5a:82:11:5d:ce:3d:0a:11:03:77:f0:
75:b4:ad:9c:1e:65:f2:6b:9a:5b:6c:89:7b:62:f8:e9:12:d1:
09:ea:7b:b7:29:b4:3c:3c:20:da:51:b5:08:4f:f4:10:fe:97:
5f:6a:8b:7e:8c:fb:f2:6e:1c:5a:13:99:c6:96:a2:be:1e:c1:
3d:af:97:ee:74:0e:a6:fb:2c:80:66:fc:56:5a:2d:81:8d:93:
12:54:66:c2:35:ea:c0:a4:f0:6e:90:fb:46:1a:1a:0b:e1:ee:
98:6f:62:e9:47:5f:ab:66:4c:25:b1:97:0b:3c:75:2f:92:63:
af:09:28:03:27:9f:ea:b8:21:f2:93:52:a1:03:2e:6c:2b:b6:
d2:d5:8c:9f:31:c7:69:51:47:45:41:e1:a6:6f:69:ac:e3:cd:
f6:a0:78:0c:4e:b8:58:a3:4b:03:b0:ce:1b:c8:36:70:a9:7f:
8e:f7:c9:3c:1d:a7:99:b2:6b:8e:ef:2e:06:db:db:cd:95:6b:
4e:19:93:c6:de:0f:7a:a6:32:c6:96:09:97:c1:a7:b8:82:03:
01:e0:b7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:49 2026 by rpki-client