Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142882.roa
File: AS142882.roa (raw, json)
Hash identifier: oSvpcYTmPhWF3q9E/KiYudaRWAgHbXTp2P4AIULaTsc=
Subject key identifier: 5F:EC:6E:6B:B2:A8:F1:02:F0:C6:37:4E:4A:4C:C9:DE:C2:BC:A8:98
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 41682B1B032735EA8084F6A988F83C625787A1CC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142882.roa
Signing time: Mon 25 May 2026 01:51:21 +0000
ROA not before: Mon 25 May 2026 01:46:21 +0000
ROA not after: Mon 24 May 2027 01:51:21 +0000
asID: 142882
IP address blocks: 240a:a0e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:68:2b:1b:03:27:35:ea:80:84:f6:a9:88:f8:3c:62:57:87:a1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:21 2026 GMT
Not After : May 24 01:51:21 2027 GMT
Subject: CN=5FEC6E6BB2A8F102F0C6374E4A4CC9DEC2BCA898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:66:6c:14:06:8a:9e:2b:1c:4c:81:e0:2d:8a:
90:62:78:80:fe:c6:57:f8:a1:f1:bc:b3:4a:09:e0:
e4:e5:42:b8:49:0d:25:f7:f2:71:24:33:64:44:90:
82:43:9d:1a:2b:82:5a:1d:3f:b6:df:fd:74:90:99:
a0:99:89:50:e4:78:0d:64:a0:f4:9d:f7:57:c7:24:
91:2d:26:1a:14:aa:69:e6:40:c3:a5:9e:64:25:be:
18:99:8d:07:02:8a:16:ef:80:73:c6:7a:23:37:c8:
72:fd:f7:af:0e:b9:d3:5e:29:e1:b6:5e:a4:ae:c4:
96:0f:26:7c:3c:36:67:88:ba:c7:6b:fd:20:99:8c:
60:c2:7b:4c:91:33:c6:65:13:31:7b:51:68:5f:0d:
8d:ce:af:a8:d5:0e:e5:f7:d0:d5:64:60:40:23:d7:
59:87:92:e8:96:b4:0a:cb:e4:c4:51:35:cc:bf:de:
54:21:7e:7c:6b:e4:a3:b6:e8:1a:be:76:d2:71:98:
c0:b1:af:ce:de:f2:40:45:f2:95:d2:52:e6:9c:e3:
91:b9:76:d0:24:59:70:b4:2c:3c:4c:10:93:8f:58:
35:79:15:ee:48:44:9b:ad:59:cb:82:86:94:8f:f8:
60:85:d5:79:e5:cc:b5:1a:2c:90:a4:aa:7e:6e:fd:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EC:6E:6B:B2:A8:F1:02:F0:C6:37:4E:4A:4C:C9:DE:C2:BC:A8:98
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0e8::/32
Signature Algorithm: sha256WithRSAEncryption
38:e0:11:f6:19:a1:83:60:a8:54:0d:22:c3:45:a5:77:10:2a:
66:ba:da:19:00:cb:a0:2a:90:79:e4:33:80:c5:3c:07:3c:3d:
8a:22:42:7e:02:02:3d:e8:0a:1e:0f:ee:e7:84:17:87:e2:aa:
a7:4f:26:82:8d:7f:99:9c:05:45:d1:4c:ce:e2:d3:f4:a4:f5:
ea:1a:ce:cb:c3:90:da:e6:79:2f:e6:b1:20:45:63:b3:60:18:
ce:8b:48:3e:80:c2:eb:ec:0d:3c:33:d4:3e:a7:ff:7d:11:f1:
92:b8:d1:91:ff:07:13:43:4f:9c:82:75:b4:2f:b3:49:f7:48:
9d:11:23:b2:e0:7f:e0:34:8c:98:0f:82:8e:9c:0d:10:e6:04:
f3:96:b4:73:a2:6f:e3:2b:a2:c3:81:ba:58:4d:c4:5e:4c:4c:
ab:f3:1e:68:06:2e:e1:ec:dc:21:5e:c3:10:f9:6b:ef:3d:21:
57:99:bd:65:e6:f6:b5:38:56:86:3c:00:18:43:40:77:62:30:
f0:c4:e1:57:8b:f2:2a:fb:d1:b7:83:ff:b5:3c:43:b7:53:06:
79:18:73:4f:f5:d2:98:5d:2d:71:fa:a6:f3:af:6f:5a:34:bd:
55:af:f9:5e:f2:58:1a:17:e7:2e:c0:57:db:9f:b6:60:98:ea:
1a:bc:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:36 2026 by rpki-client