Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142893.roa
File: AS142893.roa (raw, json)
Hash identifier: d44KuwaO3sJs0p/CFD0mHAE4sPN6585J7IRk6ATQSy8=
Subject key identifier: C4:D2:26:5D:B7:3C:CC:53:CA:3D:E3:BB:20:03:71:5F:0A:35:11:A8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5670A73222303AFB7AF063E421AC1EA22DBB7AD9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142893.roa
Signing time: Fri 22 May 2026 07:32:22 +0000
ROA not before: Fri 22 May 2026 07:27:22 +0000
ROA not after: Fri 21 May 2027 07:32:22 +0000
asID: 142893
IP address blocks: 240a:a0f3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:70:a7:32:22:30:3a:fb:7a:f0:63:e4:21:ac:1e:a2:2d:bb:7a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:22 2026 GMT
Not After : May 21 07:32:22 2027 GMT
Subject: CN=C4D2265DB73CCC53CA3DE3BB2003715F0A3511A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:15:a3:5d:b7:54:4f:7a:1e:7f:ee:4f:bf:
e5:a2:06:47:8e:22:2a:f4:c4:a4:05:22:62:3f:6b:
1d:9c:01:03:99:f4:47:1c:3d:3d:e3:cb:be:30:d2:
86:88:ce:d6:b1:19:ef:e1:cd:5a:6b:b9:df:4f:8d:
f9:59:66:98:f2:96:4b:49:af:bb:37:38:80:14:75:
c9:ba:f3:f2:85:c2:88:2a:11:ca:27:c5:1f:96:8f:
1e:0a:6a:d8:66:c8:af:d0:4b:09:5b:00:9c:fa:21:
8b:c9:2e:89:f8:6e:38:19:2f:60:fa:20:4e:c0:0c:
91:d9:97:5c:2f:7e:d0:4c:97:79:f1:10:13:20:bb:
01:5c:c7:69:5b:35:26:76:94:38:c9:eb:52:59:04:
81:d2:ab:51:1a:46:6f:d6:f3:f6:ac:90:5a:ab:3b:
1c:ec:08:d1:f6:24:e1:b5:ee:60:2a:d2:8b:ee:47:
d3:da:6a:d1:af:9a:de:56:32:ad:e1:e9:e0:4b:72:
2d:48:81:46:e2:cf:48:16:2c:e7:3b:80:a9:18:2b:
b7:49:73:95:6a:d7:eb:09:07:91:43:12:37:07:5b:
57:93:2f:f0:41:b7:ae:87:3c:1b:c7:7b:aa:d2:31:
49:7b:3b:b7:8f:c5:42:b4:0a:da:a3:51:97:5f:23:
d6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D2:26:5D:B7:3C:CC:53:CA:3D:E3:BB:20:03:71:5F:0A:35:11:A8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142893.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0f3::/32
Signature Algorithm: sha256WithRSAEncryption
5b:80:20:7a:05:bf:3b:5c:29:5e:52:51:cf:07:07:a4:5b:55:
d7:22:91:78:bb:46:de:47:12:9a:af:41:d6:e7:d5:35:4a:eb:
25:ed:36:3a:4d:6c:21:b1:44:b2:48:79:c3:ac:e0:8d:18:33:
96:ec:d8:74:6b:9f:a2:71:12:02:38:ab:d2:f1:eb:3f:44:89:
f1:83:bf:71:bd:38:ea:8f:75:83:7d:fe:0c:9a:97:40:ee:79:
39:c7:b7:99:9d:9f:de:8f:87:b4:42:83:55:64:03:36:89:a4:
ed:c2:0a:ef:44:ba:2a:5d:dd:c3:dc:74:2e:fd:01:da:d5:cb:
9a:06:d8:4a:f8:6f:d0:d4:66:16:33:b3:a5:3b:19:f9:ca:e0:
46:82:c9:bb:d0:3b:82:de:27:b2:bf:d0:3b:37:89:5d:2c:6f:
20:18:80:7f:3e:21:2a:74:4d:7f:51:a6:eb:14:3b:4d:41:3f:
c2:13:cb:e8:ba:5d:68:b4:76:0a:50:4c:b5:83:fa:1c:42:56:
14:28:98:e4:06:7b:28:f8:da:01:a1:44:7b:18:63:a2:87:b0:
c9:c4:c8:d5:dd:66:2c:eb:d3:cf:ba:4f:10:b7:c4:7b:ce:7d:
3c:90:6a:02:50:3d:fd:05:c3:60:66:3d:1e:b4:e6:a9:ce:b8:
f8:45:12:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:28 2026 by rpki-client