Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142850.roa
File: AS142850.roa (raw, json)
Hash identifier: 1Rh8f9llbp7ozy0RKRBgk585yfD194bElaol2uKV6CU=
Subject key identifier: 31:35:04:0C:34:DB:EA:9B:95:9D:12:DE:51:C4:D1:43:1E:AC:E7:D3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 42EC82E4B0C8F22B4F5F9BB4C988B13F7B3CEA0C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142850.roa
Signing time: Fri 22 May 2026 02:47:29 +0000
ROA not before: Fri 22 May 2026 02:42:29 +0000
ROA not after: Fri 21 May 2027 02:47:29 +0000
asID: 142850
IP address blocks: 240a:a0c8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ec:82:e4:b0:c8:f2:2b:4f:5f:9b:b4:c9:88:b1:3f:7b:3c:ea:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:29 2026 GMT
Not After : May 21 02:47:29 2027 GMT
Subject: CN=3135040C34DBEA9B959D12DE51C4D1431EACE7D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:c8:50:b3:d7:d7:5e:7f:4f:50:f6:04:94:
c2:e8:a5:a4:26:af:ba:b7:6b:06:6e:22:90:f3:28:
f3:85:9c:53:6e:1f:b8:2b:30:e8:78:10:07:56:7a:
63:3d:09:5b:07:e8:40:e4:57:21:8d:22:b6:5b:48:
60:6e:a8:90:7f:ac:dd:7d:a0:d4:e1:e5:32:b0:1a:
56:4b:c1:8f:0a:bb:2a:c8:f0:34:81:0d:f8:98:5c:
65:85:e5:33:f4:fc:01:5f:e7:ca:85:65:fc:6d:99:
d9:82:d0:41:00:3b:ec:3d:4e:57:a7:b2:67:19:3b:
e2:c9:15:e1:b0:a2:e2:f2:6d:e3:71:2c:fb:12:75:
e2:8a:88:ab:ca:41:ec:97:d1:0d:45:55:cf:18:70:
9b:0f:6d:9d:88:2b:fd:14:b3:11:0f:5d:9a:12:e9:
04:0e:5d:6d:f7:87:a4:a1:95:b8:31:6c:82:98:e6:
e7:33:c5:a5:ba:86:04:c7:cc:70:97:44:0d:73:d4:
82:34:b7:9e:92:5c:84:81:26:fc:4d:21:4c:0e:3e:
32:91:c8:43:02:83:cc:77:6f:19:23:89:12:fe:9e:
14:f6:f6:e2:01:2b:3c:2c:e0:07:e2:69:de:a6:db:
95:ad:31:52:45:16:56:43:e3:08:09:60:74:d3:38:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:35:04:0C:34:DB:EA:9B:95:9D:12:DE:51:C4:D1:43:1E:AC:E7:D3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142850.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0c8::/32
Signature Algorithm: sha256WithRSAEncryption
7d:82:d2:09:1e:09:d4:2a:54:15:5a:e8:b6:75:f5:c6:c5:35:
a2:28:93:67:5c:2a:4b:33:e7:73:c8:47:08:fe:1d:24:ae:e7:
5b:b6:30:2f:fd:6e:b3:4d:6c:33:15:81:32:36:f4:1a:7d:5b:
a8:9c:19:7e:db:e9:05:95:5f:cb:e0:6d:c4:87:b1:e8:ce:b6:
7b:d1:04:8c:4b:c8:91:39:ff:cb:21:77:b2:a0:37:49:f1:6d:
2a:11:1b:b1:ca:55:32:ce:87:b5:ce:57:4b:d7:1c:76:7a:e3:
09:0b:76:f6:39:72:93:0d:99:15:31:e4:f2:2b:23:b1:52:c8:
b0:53:52:20:96:9b:84:ac:2f:31:88:3a:b0:59:be:9a:79:e2:
c2:12:41:72:23:2d:d4:82:e8:ba:06:c1:fa:ad:a1:ba:3d:86:
a5:85:f7:9a:e6:c5:09:d7:c9:2a:f7:2c:99:c9:a8:18:ae:0a:
e0:f8:1a:b6:b1:2a:80:38:05:be:3c:f5:66:65:bd:5c:42:e9:
bb:a5:58:7e:cf:3c:f2:94:85:05:76:f8:5f:7b:bc:c7:41:52:
d0:0b:85:45:c9:49:3e:a3:d7:1e:a2:7b:b0:61:b4:0d:f9:f7:
fc:05:71:a9:c1:4b:10:09:4d:1d:de:89:05:d9:39:56:ba:0a:
8a:a7:46:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:19 2026 by rpki-client