Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142867.roa
File: AS142867.roa (raw, json)
Hash identifier: iOoobJLnr1fO75IJKnRYXIodnAV+cdxFeU5iSv+/h+w=
Subject key identifier: 9C:30:85:EA:C0:6D:B3:02:4A:C7:85:67:35:29:13:38:BE:1A:42:78
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2C75C0CA95B4EAC23E31FB6456F17F4A63AB0DA1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142867.roa
Signing time: Mon 25 May 2026 01:38:04 +0000
ROA not before: Mon 25 May 2026 01:33:04 +0000
ROA not after: Mon 24 May 2027 01:38:04 +0000
asID: 142867
IP address blocks: 240a:a0d9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:75:c0:ca:95:b4:ea:c2:3e:31:fb:64:56:f1:7f:4a:63:ab:0d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:04 2026 GMT
Not After : May 24 01:38:04 2027 GMT
Subject: CN=9C3085EAC06DB3024AC7856735291338BE1A4278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:08:ee:94:d7:cf:c0:4a:bb:f3:b3:ed:e0:
80:81:ba:cc:ff:24:6e:94:31:02:e5:cb:ce:52:f8:
25:72:25:1d:03:4a:38:6e:dc:a1:0f:58:54:d1:80:
ac:db:9b:ce:d4:57:af:d0:82:10:20:d2:6b:03:59:
b7:86:21:01:7f:75:75:26:5e:d3:35:fe:7b:ba:cc:
e3:21:6a:8f:0a:fa:02:b6:5a:de:2a:cc:5b:09:9e:
19:e3:4e:28:aa:3a:22:4d:de:ab:b4:1f:a6:76:7c:
f6:e8:10:4f:94:df:53:83:b9:a3:6c:f1:ef:03:ce:
94:8f:5d:6b:ff:df:40:f7:9d:f3:46:ab:49:93:32:
87:68:25:98:3e:64:6b:d7:b4:7b:22:5c:87:49:d2:
17:1e:f0:dd:7e:41:4f:8a:ad:a0:ef:c1:cb:be:57:
83:b7:d7:fb:88:8c:2a:12:39:54:44:99:0c:b8:f3:
83:50:65:a4:4a:96:43:25:89:f3:bf:74:9f:7a:7b:
01:a9:62:e8:97:88:a7:a4:c9:b4:b3:92:bc:73:1c:
5f:c9:d1:10:ad:7f:86:29:bf:f1:84:4b:ed:1d:01:
cf:75:d3:78:87:b2:88:9a:4e:58:63:2a:1b:d4:13:
e5:91:05:b0:27:98:5b:cf:4b:73:fc:e0:c0:f5:db:
70:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:30:85:EA:C0:6D:B3:02:4A:C7:85:67:35:29:13:38:BE:1A:42:78
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142867.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0d9::/32
Signature Algorithm: sha256WithRSAEncryption
26:01:c2:a5:a8:f3:60:7d:4f:24:c2:5c:94:c9:3c:cc:50:96:
02:89:09:5f:c4:6c:7a:88:9f:87:3a:e6:f7:b3:11:bf:1c:82:
02:02:c6:61:f7:45:d4:03:e3:cb:d8:98:73:75:aa:0b:09:42:
a2:75:10:50:80:c5:60:8b:75:49:3e:37:11:34:f0:f5:ce:03:
f1:11:63:73:be:8e:84:2b:be:e6:d5:46:4a:70:ce:6f:0c:6c:
7b:0a:da:7d:d4:df:23:74:7e:62:01:fc:62:5c:2f:ba:29:74:
73:fe:b6:a5:08:40:a3:a0:da:b0:ff:5d:62:67:0c:77:a5:ff:
4a:3c:8b:54:49:e9:52:04:31:9b:7d:cf:0f:20:65:ab:14:e4:
c4:94:92:71:4e:22:9f:2b:6f:d8:be:46:53:d6:85:1d:1c:d8:
22:70:ed:b8:54:b2:1f:26:4f:f5:d6:67:54:40:5c:6c:11:ff:
da:78:91:a6:d4:98:88:be:7d:e8:52:b9:f0:fc:96:d4:04:81:
f4:85:f2:6a:b1:cf:9e:01:a6:51:64:ec:b3:86:43:22:6f:d2:
a6:11:49:22:73:0e:4f:29:33:ce:f2:48:fc:e3:8e:ef:7d:b8:
4c:eb:bb:cc:a9:c6:32:f0:2b:b3:50:5b:74:f5:4a:d2:ed:a8:
b1:b0:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:08 2026 by rpki-client