Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142865.roa
File: AS142865.roa (raw, json)
Hash identifier: PdWtmj2tASUI2tIb0J7SeERdawaTxcUOkm/HdG5dL3I=
Subject key identifier: BA:E4:43:14:08:54:7A:F6:72:FF:D3:33:6A:2D:35:86:F2:2F:49:DF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6F4E6D21B39610534C4549952143BF855CADBD21
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142865.roa
Signing time: Fri 22 May 2026 06:05:11 +0000
ROA not before: Fri 22 May 2026 06:00:11 +0000
ROA not after: Fri 21 May 2027 06:05:11 +0000
asID: 142865
IP address blocks: 240a:a0d7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:4e:6d:21:b3:96:10:53:4c:45:49:95:21:43:bf:85:5c:ad:bd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:11 2026 GMT
Not After : May 21 06:05:11 2027 GMT
Subject: CN=BAE4431408547AF672FFD3336A2D3586F22F49DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:01:25:92:16:f7:5f:21:2c:5e:18:3f:e2:
af:3c:ee:a4:b8:63:6c:9a:c5:ba:43:e9:01:0d:a2:
c1:29:ec:f7:fd:90:f5:df:da:96:2c:ca:39:0e:be:
ee:c7:e4:02:17:cb:3d:11:c8:78:9f:c0:0e:2b:61:
07:0e:1e:d8:7a:af:6a:2e:46:45:26:1c:42:6e:2d:
87:96:81:c6:78:08:43:12:cb:e0:d9:e8:6e:a3:73:
38:45:62:2a:56:92:69:bd:9a:37:08:62:0b:c6:49:
a1:46:ca:b8:6a:25:9e:37:42:61:b8:3e:6a:d0:d3:
33:cf:a0:89:84:12:1f:fc:34:72:d9:95:52:6f:8c:
45:4d:31:d7:14:a1:c0:74:fb:42:96:c7:53:ff:de:
4f:5b:5f:25:d4:22:54:af:c4:c9:53:c6:4b:6e:d7:
e2:8b:1e:3c:58:bf:e4:21:47:ce:8d:0e:05:2d:aa:
85:cc:89:90:07:4e:f5:ad:04:fe:44:e8:22:89:70:
77:84:b6:6a:34:51:bd:05:69:73:61:42:0b:60:ee:
08:54:e2:85:1c:16:04:a0:c9:4a:d9:72:af:bd:a5:
32:2b:5a:af:71:97:b1:b7:13:38:6d:f1:74:2f:ab:
79:34:ed:dd:e5:d0:0d:45:51:dd:3a:3a:1d:98:4c:
19:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E4:43:14:08:54:7A:F6:72:FF:D3:33:6A:2D:35:86:F2:2F:49:DF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142865.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0d7::/32
Signature Algorithm: sha256WithRSAEncryption
71:d1:f8:a2:b9:a7:22:3c:1e:76:1f:0b:86:3b:bf:dc:b0:80:
49:54:f2:42:5b:bc:29:74:78:46:ee:e2:09:72:3b:1c:ce:81:
59:32:d4:7d:79:7c:3b:91:7d:38:96:b6:6f:3b:e2:d7:f1:45:
12:1d:ae:41:c4:0e:f2:3a:a7:99:84:82:26:b8:12:e3:17:a2:
79:83:33:fa:f2:72:6b:76:6d:56:23:5f:a6:1b:a0:6d:fa:27:
4f:02:b2:4f:93:1d:c7:33:8c:f6:15:40:80:85:03:2a:8b:c8:
13:aa:50:0a:7f:67:af:f6:c7:ed:0b:9a:fe:df:37:af:e1:f7:
3a:a1:56:61:04:40:15:6a:d8:9a:55:b0:23:19:d7:88:c1:0d:
f7:2c:6f:25:72:f2:54:e8:1c:22:91:d0:ec:8c:d2:f7:e5:92:
ba:69:df:dc:69:cc:35:e1:b6:09:2f:97:57:51:10:68:c3:20:
8a:33:2b:e5:6e:da:e0:fc:48:b7:fb:77:6d:03:29:e2:16:6c:
b5:74:b4:4b:3d:5b:dc:e3:2c:87:b8:c2:51:05:4c:87:4c:96:
65:0f:de:c9:b1:40:ce:68:a2:09:93:32:c3:07:19:f1:b9:90:
ff:fb:88:1a:f2:2c:24:42:95:39:79:fe:ae:8a:90:2b:32:ce:
b3:2f:7b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:55 2026 by rpki-client