Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142863.roa
File: AS142863.roa (raw, json)
Hash identifier: WO62XTBx//tza7I/OhRBkd2Aqs91aYfBEhq4KJl52oI=
Subject key identifier: 4A:C0:0B:0F:DF:9C:85:44:C6:52:DA:28:9D:FB:8A:97:0C:9D:4F:A5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 622A185F59C0A6D6DE8AC06E8FEE2D9980B3858B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142863.roa
Signing time: Tue 26 May 2026 02:34:59 +0000
ROA not before: Tue 26 May 2026 02:29:59 +0000
ROA not after: Tue 25 May 2027 02:34:59 +0000
asID: 142863
IP address blocks: 240a:a0d5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:2a:18:5f:59:c0:a6:d6:de:8a:c0:6e:8f:ee:2d:99:80:b3:85:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:59 2026 GMT
Not After : May 25 02:34:59 2027 GMT
Subject: CN=4AC00B0FDF9C8544C652DA289DFB8A970C9D4FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:bc:69:6a:f6:f0:91:43:01:37:3e:b7:7f:
67:d8:84:dc:f4:53:28:3a:a6:d0:44:48:b4:f3:12:
16:a3:45:37:6c:cb:2a:4d:86:90:ed:e7:61:47:7c:
39:84:1c:c2:e6:47:91:e4:31:17:85:20:87:38:09:
94:b5:c0:97:22:13:fd:c6:25:e9:d8:97:6b:09:3b:
35:ae:3c:b1:7a:fc:8d:39:5e:9b:28:2e:b1:c2:02:
ee:2a:2a:e8:7c:aa:c4:dc:b8:92:71:c7:ba:33:8a:
56:32:b4:74:55:53:4a:12:87:90:d0:e3:17:1c:2e:
f4:f4:59:0e:f8:2c:d1:b9:f9:38:70:d5:e0:61:cb:
79:8e:e2:b8:c5:43:eb:8b:ec:7f:97:11:ff:d9:21:
3f:3b:70:cc:a0:1f:cc:e9:c4:94:77:13:f3:20:5f:
39:e3:15:63:85:22:ff:58:75:72:17:c3:79:d3:0f:
8e:f1:b6:1e:32:00:53:ed:82:fa:19:61:56:ac:68:
26:c5:ae:f7:e3:f2:e7:97:a0:fd:74:ac:b3:f4:c5:
f7:10:a8:c2:19:67:a1:c2:91:14:74:d0:c5:fc:0b:
a8:f5:8f:df:28:53:83:4e:3a:ae:e4:c1:85:64:f5:
a1:fc:ce:13:92:7c:56:a3:c5:fd:0f:f7:27:85:36:
ae:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C0:0B:0F:DF:9C:85:44:C6:52:DA:28:9D:FB:8A:97:0C:9D:4F:A5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142863.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0d5::/32
Signature Algorithm: sha256WithRSAEncryption
96:3f:47:38:26:10:29:ae:66:92:ca:ba:74:d4:f3:a5:a9:68:
1d:2d:a9:1a:fd:92:68:ad:98:b0:92:7d:00:9c:11:fe:20:9b:
4a:ae:5b:85:5f:10:81:48:a6:0b:a9:bd:30:3d:43:22:3b:0e:
48:86:d9:6e:32:da:ca:33:11:fb:58:d6:b7:9c:d6:13:ab:50:
d1:62:0c:74:77:52:47:cc:36:03:9a:37:bf:ec:28:cb:fb:69:
da:e0:a4:5a:dc:93:2e:2b:66:ad:91:d4:18:7d:a8:3c:64:12:
74:9f:03:46:9d:e4:6d:24:53:eb:04:78:82:6c:6e:bd:f8:6e:
5b:cd:7c:64:16:0f:13:16:94:bd:cb:2a:95:07:ae:0a:5a:e1:
20:4a:aa:52:fe:e6:81:60:4c:31:99:4a:95:7e:20:c8:26:2c:
5c:db:46:c8:a1:29:9b:d2:16:63:48:7a:1a:13:0d:17:ae:fd:
6a:49:f5:80:40:47:73:cb:42:53:6f:a1:83:3f:f5:aa:83:be:
4c:27:40:16:ab:a5:5f:af:7f:ed:53:fb:6e:76:60:fd:a7:75:
9e:f2:e4:ea:e0:cf:bf:b7:7e:2c:7c:cb:2b:bb:09:04:07:55:
a3:d3:4b:31:a9:10:12:65:ad:55:00:60:94:5d:06:bf:ca:44:
c1:1e:e7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:39 2026 by rpki-client