Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142873.roa
File: AS142873.roa (raw, json)
Hash identifier: VS/TMO96DDaTRL4oG8rl8dOLU2g+OvjTJCtp5f568lY=
Subject key identifier: 78:7B:3F:AD:0B:69:2A:7A:3E:0D:7D:54:13:BB:92:5A:7E:3F:93:B6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43C056ACB0A66574358A7539F7B337616BDC1513
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142873.roa
Signing time: Fri 22 May 2026 07:24:22 +0000
ROA not before: Fri 22 May 2026 07:19:22 +0000
ROA not after: Fri 21 May 2027 07:24:22 +0000
asID: 142873
IP address blocks: 240a:a0df::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c0:56:ac:b0:a6:65:74:35:8a:75:39:f7:b3:37:61:6b:dc:15:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:22 2026 GMT
Not After : May 21 07:24:22 2027 GMT
Subject: CN=787B3FAD0B692A7A3E0D7D5413BB925A7E3F93B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:a8:e8:95:f3:fb:ff:41:61:35:ef:22:90:
38:72:77:73:46:0b:29:3a:e6:15:65:a6:7e:cf:83:
11:31:cb:17:c4:c7:c1:42:6c:21:38:a9:35:49:f7:
6d:cb:b2:11:7c:9e:a6:f4:ea:27:f4:ad:47:c7:c4:
a0:0c:c1:bf:45:82:4c:46:71:b3:00:33:81:7e:a3:
ff:50:dc:07:b1:a9:65:f4:ce:27:0c:49:c8:c3:e4:
71:e8:ef:e7:4d:6b:f0:76:bd:a6:05:b7:65:95:1c:
4c:65:69:f1:86:b5:54:19:ff:98:13:57:27:eb:40:
0f:aa:53:6d:6a:00:f1:c4:3c:c3:35:96:41:6f:cc:
7f:1a:a9:4c:5f:85:28:44:1b:20:41:83:03:fe:d9:
02:43:ef:6a:61:7b:05:be:89:2d:89:d1:18:35:b5:
9f:a1:8a:e9:ca:4f:21:23:a2:a9:73:0d:ef:69:f9:
97:01:95:6a:c9:d1:42:94:a0:9b:e2:f8:d1:ac:1e:
1d:eb:00:59:bc:d5:7c:0a:00:2b:e1:7c:1b:bc:21:
e9:68:d7:7a:8f:c0:16:ac:e7:af:d8:bd:49:cb:8a:
47:cb:03:ef:c4:eb:48:04:ba:88:e5:cd:40:2f:3a:
dd:d2:e8:eb:4b:d1:c7:3c:fc:d6:16:ba:95:ab:ef:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7B:3F:AD:0B:69:2A:7A:3E:0D:7D:54:13:BB:92:5A:7E:3F:93:B6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142873.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0df::/32
Signature Algorithm: sha256WithRSAEncryption
6e:6c:b9:12:09:00:df:c8:94:9e:52:59:46:c7:7b:26:61:7f:
a5:18:0e:17:f3:1a:18:dc:c8:a4:e7:4a:17:72:52:17:0d:78:
1d:8a:55:3c:4d:55:d1:e1:af:bd:df:ba:7f:98:0f:75:79:06:
1f:e8:38:bd:ee:9a:e4:e3:d3:95:81:ac:00:0f:39:6f:1f:61:
93:81:15:d3:0e:94:38:32:b9:17:db:c4:8d:bc:55:1e:df:5d:
21:86:08:0a:f5:cb:a0:ca:dd:7f:5e:21:c3:7d:c9:8b:49:61:
04:2b:d4:90:c1:1f:8c:b5:fe:41:99:45:e0:d9:d8:78:aa:17:
58:b3:b9:44:a1:72:37:55:70:aa:bf:2c:0a:53:f2:4e:77:f9:
ae:d2:53:2f:fc:3c:87:b0:76:53:84:3c:b3:95:e9:4e:9d:03:
65:95:7f:00:90:dd:fd:67:1f:b7:bd:4e:c2:76:0a:fe:6c:b5:
70:50:11:3f:8f:75:cb:ec:4c:a1:5a:d7:3d:53:58:f4:aa:2b:
e5:bf:0a:bf:39:17:99:1f:3e:c6:04:68:3a:05:04:0b:5c:cf:
4a:67:63:b1:41:3a:1c:67:1e:e6:5d:a1:c0:de:a1:cc:27:cd:
f0:07:f7:99:ea:6d:d8:b7:c5:2d:4f:a2:d3:37:40:6e:54:c0:
33:be:88:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:02 2026 by rpki-client