Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142852.roa
File: AS142852.roa (raw, json)
Hash identifier: yXnEHIukoiFwXVhklqN6Em/zyKr8StvfGJFF+P3roP0=
Subject key identifier: 93:D2:66:D9:CB:3B:3B:7E:78:8C:66:C8:F1:17:D4:B0:54:BC:95:82
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7D360A83A8FE4B1192861EF276D310C9E612BAC7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142852.roa
Signing time: Mon 25 May 2026 03:19:32 +0000
ROA not before: Mon 25 May 2026 03:14:32 +0000
ROA not after: Mon 24 May 2027 03:19:32 +0000
asID: 142852
IP address blocks: 240a:a0ca::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:36:0a:83:a8:fe:4b:11:92:86:1e:f2:76:d3:10:c9:e6:12:ba:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:32 2026 GMT
Not After : May 24 03:19:32 2027 GMT
Subject: CN=93D266D9CB3B3B7E788C66C8F117D4B054BC9582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:5c:56:1b:15:aa:96:fd:f0:2e:97:a3:73:
f9:fd:d1:a0:4b:c1:fc:a6:4c:ac:1c:01:26:6e:c6:
aa:b9:f1:a8:aa:13:14:cb:4a:ef:f7:3e:82:92:ce:
8b:12:d5:c0:b3:e0:09:e4:03:f8:90:e7:7f:b5:96:
8e:ad:e2:be:f7:92:53:10:b9:e7:d9:ee:c1:da:3e:
68:73:f3:10:29:57:b2:79:e3:02:ee:3e:5e:40:5d:
93:34:32:ea:3c:c1:56:79:77:24:8f:54:f5:f1:78:
2d:8e:0e:1a:ce:ed:df:bd:86:b3:f6:34:8d:5a:bd:
06:4f:af:50:f1:e1:c6:f4:33:45:6a:96:84:32:6b:
49:30:1a:64:65:21:28:73:80:7f:08:a4:3d:34:fd:
42:4f:21:92:42:63:7b:56:51:21:c3:60:65:62:a9:
92:9b:c5:b5:15:64:99:b8:2f:56:ec:ed:af:1e:6b:
17:42:c6:23:b1:9b:07:3e:be:03:a3:98:14:ad:c0:
84:ba:86:a3:6a:e4:52:73:5e:82:92:2d:14:eb:0a:
11:ad:fc:0f:c6:87:5b:5d:03:38:27:08:f4:de:7c:
28:b7:31:8b:22:29:41:10:3a:23:61:d8:95:e7:a3:
30:a7:76:d8:ca:26:a0:03:95:c2:6c:61:b0:c4:8c:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D2:66:D9:CB:3B:3B:7E:78:8C:66:C8:F1:17:D4:B0:54:BC:95:82
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0ca::/32
Signature Algorithm: sha256WithRSAEncryption
1c:e0:94:8b:81:e7:d9:8f:ef:ce:a4:5a:5f:cd:29:98:b7:6d:
5a:77:02:0b:8c:b4:88:a4:1f:ad:e9:2a:d7:9c:af:ed:5c:34:
42:58:89:d7:75:db:bf:7e:72:f2:e9:27:e8:64:d5:0e:0d:8d:
f1:d1:bd:8d:dd:57:9d:5b:2e:00:39:9e:4a:fc:1b:6d:8a:ad:
1a:25:93:fe:74:44:bc:69:2a:22:94:3f:1d:69:6f:22:55:36:
a1:7d:7c:d4:07:85:d7:f5:14:fa:63:f4:a9:94:38:87:0f:50:
8b:52:61:56:a5:dc:8c:9e:35:a9:ed:a0:62:5d:32:09:ca:c8:
02:8d:ae:91:4c:bc:db:f7:88:05:3a:1b:b6:00:e3:a7:02:40:
15:c2:de:c9:3f:e7:be:ea:ac:8b:c8:18:61:d7:c0:11:02:fe:
7a:a0:ac:65:fc:c7:ff:eb:ee:d8:55:90:1e:d1:e8:83:29:46:
19:f2:f4:35:e6:0d:37:7d:79:78:c0:e8:66:b2:b2:cb:b9:99:
f2:15:6e:e8:99:a4:d8:da:fc:04:55:c3:fd:74:04:fd:2d:4d:
94:03:2f:63:2e:a3:47:e5:66:55:4b:7d:12:ea:04:cd:70:b8:
cc:b5:c1:86:a9:65:d9:70:59:5b:b7:fb:17:4e:9c:ad:2b:ee:
4e:26:d7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:40 2026 by rpki-client