Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142896.roa
File: AS142896.roa (raw, json)
Hash identifier: BT4nsihGHLGkmC9eICDYwDJzG97nCjhvQDsncPDXkDU=
Subject key identifier: EC:0F:8C:23:EA:30:80:21:CB:A8:29:98:DF:7D:D7:BE:16:91:44:BA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 351897FB2BE3819F4E84EA2598FB7132FA572EEA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142896.roa
Signing time: Fri 22 May 2026 07:41:09 +0000
ROA not before: Fri 22 May 2026 07:36:09 +0000
ROA not after: Fri 21 May 2027 07:41:09 +0000
asID: 142896
IP address blocks: 240a:a0f6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:18:97:fb:2b:e3:81:9f:4e:84:ea:25:98:fb:71:32:fa:57:2e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:09 2026 GMT
Not After : May 21 07:41:09 2027 GMT
Subject: CN=EC0F8C23EA308021CBA82998DF7DD7BE169144BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:8f:9f:48:f5:0f:70:6a:4f:d2:a0:5c:d8:
31:d8:0e:8f:c4:30:5a:42:67:70:e2:91:9c:4a:26:
30:aa:fc:bb:06:f6:b3:09:16:eb:2c:9c:63:2c:fc:
78:bc:98:3d:40:bc:ca:5e:10:10:b1:5d:1f:15:e9:
eb:7d:1e:fc:1a:de:9d:d5:69:4f:7f:34:ba:48:7f:
e2:2d:dc:f5:7c:f0:e4:34:d9:df:3b:b8:11:6d:1b:
84:4d:58:10:15:13:22:10:75:b7:c3:23:e2:40:c4:
91:55:22:e2:c3:c5:7d:6c:21:b1:bc:37:cd:2b:2d:
9c:6d:b7:ab:7c:73:74:41:13:a4:fa:d4:37:4c:0d:
21:f8:d5:b5:b0:bf:a7:5a:a4:8d:0c:5b:16:92:3f:
4f:52:c2:1d:2f:7f:6e:aa:9c:bc:14:86:5d:3a:28:
a8:56:2d:3e:02:c0:eb:5c:0a:3c:75:07:91:a3:7b:
2d:4c:00:f8:c8:f9:08:e2:21:34:6b:44:9e:e1:ea:
54:02:f3:90:6a:be:c2:ef:11:d3:f3:23:5e:6b:88:
ef:8e:f5:25:48:0d:1f:d6:7e:7f:7c:ef:a0:f6:99:
41:57:2f:77:cd:69:09:9e:15:3e:d5:25:90:6b:0a:
fe:c4:bb:6e:87:1f:a6:27:8e:50:91:d9:26:cb:a3:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0F:8C:23:EA:30:80:21:CB:A8:29:98:DF:7D:D7:BE:16:91:44:BA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142896.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0f6::/32
Signature Algorithm: sha256WithRSAEncryption
6a:64:7f:29:b7:8b:19:1e:32:a7:de:2f:9f:bc:9f:d4:ae:0e:
92:9a:d5:81:60:25:76:f6:9e:b3:a6:89:4c:5e:3d:dc:ec:dd:
d2:7c:2a:1f:8f:24:b5:f7:33:2c:e5:6e:24:e7:99:60:ed:db:
62:3c:a2:ac:72:32:06:cd:37:9b:c7:4d:e2:db:85:aa:21:e1:
d2:ef:3e:28:6e:e9:b9:1b:52:89:09:1e:44:ca:90:4c:c8:a9:
0c:1c:0d:be:ec:f4:1d:4e:8d:fc:71:20:32:db:b1:15:77:ca:
b5:fb:b4:b8:86:a4:0d:4c:8e:00:47:94:5c:c3:68:7e:69:28:
98:71:1a:75:96:0b:dd:8e:4b:ef:0e:7a:81:3a:52:72:51:84:
2b:74:6a:f6:65:61:23:92:6d:67:71:88:32:06:6e:ea:7e:12:
c7:6b:35:86:c8:fd:98:b7:4d:29:0a:68:27:27:11:6b:c6:ce:
d3:eb:10:e7:b8:aa:13:ba:36:ab:ff:f3:23:63:92:03:87:a0:
8c:e7:99:7f:50:5e:01:5a:af:9b:98:01:1d:bf:be:64:ab:a7:
ff:01:1a:f4:67:6b:d9:aa:fb:5a:d3:89:8f:e9:e7:57:95:b9:
02:6a:70:c4:61:e7:20:0f:a3:9e:b7:47:44:77:03:13:66:5e:
4a:5b:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:53 2026 by rpki-client