Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142813.roa
File: AS142813.roa (raw, json)
Hash identifier: WXTFTpkZPKLPjhAXfF15FLcF9ZxhzSy3vhwTJEofQkA=
Subject key identifier: 32:04:69:41:BC:79:5E:3D:B8:87:9B:43:14:9D:90:6C:A0:9A:08:E9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 54D8826411219F87686644F7C2FDA58091AF0696
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142813.roa
Signing time: Mon 25 May 2026 03:19:36 +0000
ROA not before: Mon 25 May 2026 03:14:36 +0000
ROA not after: Mon 24 May 2027 03:19:36 +0000
asID: 142813
IP address blocks: 240a:a0a3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d8:82:64:11:21:9f:87:68:66:44:f7:c2:fd:a5:80:91:af:06:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:36 2026 GMT
Not After : May 24 03:19:36 2027 GMT
Subject: CN=32046941BC795E3DB8879B43149D906CA09A08E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:aa:2f:76:4b:1b:a0:ae:2a:81:3f:dd:06:
54:61:57:21:41:6d:65:f8:5a:02:b3:5d:fe:31:9c:
62:26:e3:da:f1:e8:02:62:6a:b5:95:1d:cf:7e:9b:
81:a4:66:6c:eb:cc:b4:bf:50:03:fc:da:96:50:4b:
f4:b0:d2:cb:9b:08:bd:86:e2:d8:bf:0f:5b:d1:64:
48:a8:d5:88:da:5a:04:ca:22:91:60:63:c0:f6:b5:
35:56:52:00:bb:d8:d7:36:b6:4b:d3:09:74:51:0d:
9b:58:69:7f:b1:ed:43:38:b2:2b:98:6a:67:76:45:
77:20:6e:b2:5a:63:8d:d1:4f:d7:89:fc:39:27:da:
f5:4a:12:45:08:53:13:0e:50:7f:e1:b4:30:9d:5e:
a2:82:cb:b6:e1:33:c2:3a:eb:4b:f9:a0:22:a4:93:
f7:af:47:dd:d5:af:20:77:d7:df:6b:c3:12:15:4f:
93:9e:26:0b:e7:ce:f5:09:e5:f7:e4:28:5a:4f:58:
68:6f:f2:9a:ef:32:c4:c7:1d:de:8e:44:56:f6:4f:
1b:a9:52:62:64:d1:b3:75:aa:61:c3:93:32:25:b4:
0e:00:f8:12:33:8d:11:84:cd:01:bd:e6:8c:d1:51:
64:1e:c8:19:d5:97:b6:6d:b6:0b:9d:62:c0:02:15:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:04:69:41:BC:79:5E:3D:B8:87:9B:43:14:9D:90:6C:A0:9A:08:E9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142813.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0a3::/32
Signature Algorithm: sha256WithRSAEncryption
bd:7e:58:09:19:2e:a2:17:39:83:ad:1d:97:fa:e5:19:3c:53:
48:b2:89:69:83:c4:51:11:b0:70:4b:b8:df:a4:d5:b9:8b:d0:
04:e5:a7:db:92:d5:ab:2b:12:e1:e7:c4:bd:a7:fa:95:58:c9:
e5:c8:03:bf:de:3a:a7:91:60:47:a8:b7:e9:9f:dc:1e:70:2d:
0d:f5:10:64:4d:ce:4e:a5:12:63:66:3e:13:54:46:b4:54:85:
98:5d:4b:51:6c:53:89:1b:ab:93:2b:40:00:1a:51:27:61:8d:
c9:85:2b:bc:fb:06:c7:7e:a6:d3:b6:bb:c0:bc:00:c0:43:7d:
f8:a6:78:2b:a0:f7:0a:14:dc:44:86:a0:69:55:02:67:86:36:
01:d6:7f:2c:61:f4:d2:f0:e8:5c:8f:23:59:c4:f4:08:8f:70:
71:c9:6e:a8:5d:e2:24:27:a4:19:4e:31:d1:04:1d:7a:4c:8d:
34:97:7b:85:54:06:6c:5b:56:fb:dc:0c:91:3c:21:6c:bb:a6:
e5:1e:a5:93:79:12:fa:7e:12:12:19:fb:28:6b:3e:7a:f6:1e:
3e:90:20:29:bf:b2:39:9c:3f:32:cf:c6:6b:c0:99:52:89:4a:
bf:d1:c8:59:70:a4:6c:b4:36:50:e8:01:10:a7:e8:8c:75:85:
df:68:ec:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:55 2026 by rpki-client