Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142884.roa
File: AS142884.roa (raw, json)
Hash identifier: Zq1z7aRD9m83Wi7gk5rpFXhM4gRR2UGXCJh4/5btug0=
Subject key identifier: 6A:AA:A5:22:E1:F5:E8:37:C5:E0:27:FD:71:86:84:05:B2:7F:52:A2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C2C58ACA9B113E52C8ECBE2441ABA78883F58B9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142884.roa
Signing time: Fri 22 May 2026 07:32:24 +0000
ROA not before: Fri 22 May 2026 07:27:24 +0000
ROA not after: Fri 21 May 2027 07:32:24 +0000
asID: 142884
IP address blocks: 240a:a0ea::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2c:58:ac:a9:b1:13:e5:2c:8e:cb:e2:44:1a:ba:78:88:3f:58:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:24 2026 GMT
Not After : May 21 07:32:24 2027 GMT
Subject: CN=6AAAA522E1F5E837C5E027FD71868405B27F52A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:57:dd:f4:cf:79:01:c9:c3:55:24:b0:d2:
1e:30:6f:0c:a0:2c:62:5d:ff:fc:81:0b:de:2e:2b:
d3:b5:c0:16:83:38:a5:32:0e:a5:29:81:22:8d:7e:
89:09:8a:03:be:20:b5:79:33:dd:d5:91:21:3b:95:
31:d1:e7:ed:11:72:08:03:90:4d:cf:2e:2b:8a:27:
e3:a5:6b:88:06:2d:89:6e:d6:3f:14:d9:41:6a:f8:
5d:48:58:c0:72:dc:64:33:13:dc:ba:52:fe:a2:67:
6a:bc:bd:d2:c4:5e:9a:e9:91:1a:18:fd:77:1b:78:
e7:be:38:d3:a3:64:da:6b:be:33:ae:01:4d:86:f2:
29:26:af:68:49:31:dc:d2:a2:74:a2:c6:10:af:70:
ad:83:b5:19:fb:53:1d:b5:ad:06:0f:9e:c8:a3:e9:
d6:61:fe:27:30:35:d3:5b:fc:6f:d1:ef:ab:13:de:
e8:c5:a7:e8:04:0a:74:d7:4a:8f:3c:b1:0b:b8:f7:
f0:ca:f5:65:fb:61:2d:14:50:25:a7:f9:fb:04:4a:
79:43:a6:e5:10:bd:a6:e7:15:4b:79:5c:de:14:7c:
b7:b6:36:6d:f7:cc:0c:24:75:df:7c:5b:c4:71:07:
5b:c2:68:2b:63:c5:74:be:67:a0:24:99:9d:6f:ec:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:A5:22:E1:F5:E8:37:C5:E0:27:FD:71:86:84:05:B2:7F:52:A2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142884.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0ea::/32
Signature Algorithm: sha256WithRSAEncryption
31:8d:ab:2f:4b:8c:4c:e5:21:b1:b1:81:e7:cf:2d:4e:4b:49:
5d:82:df:18:0f:b9:19:72:9b:d0:8e:28:ef:cc:0f:62:27:4f:
d1:d4:d8:28:5a:07:72:05:3c:fd:2f:d5:3f:a2:52:f2:65:78:
7b:02:ba:41:19:87:ae:d3:5d:f5:c9:4c:e3:b6:f7:91:9f:6a:
b2:e6:04:b8:46:c5:1a:64:28:3a:eb:4d:52:b9:56:2c:90:77:
81:39:51:5e:40:5e:87:92:92:86:58:30:45:a7:ca:b2:68:0a:
da:b4:ed:0f:65:de:40:ec:39:67:5f:24:9d:6c:12:8a:b8:01:
e2:04:31:64:7a:1b:b9:54:7d:9a:fc:af:21:96:9f:87:b3:a9:
b3:ca:d9:f9:ae:40:12:29:1c:34:ac:d3:08:9f:70:4b:06:2d:
85:61:40:19:b9:cb:37:c2:32:64:b8:34:0a:35:67:66:a0:2b:
79:bc:6a:51:a1:45:ea:55:7b:d7:21:94:b9:25:82:95:d8:ad:
dd:71:dd:73:a3:97:a9:3e:48:1f:12:42:64:bd:98:5e:ea:c8:
da:7d:30:0c:03:9a:0e:73:ec:11:a6:73:ef:ee:1a:ef:fa:b1:
9a:8e:f3:76:f9:0f:bd:b0:b6:6f:bb:be:89:40:23:84:9e:c1:
d9:39:e4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:44 2026 by rpki-client