Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142900.roa
File: AS142900.roa (raw, json)
Hash identifier: MUXjH4iCXJT1sEGvctB+Y2sdt3D6W+LdhfjLLtEXMNs=
Subject key identifier: F2:3E:C3:54:86:A5:54:51:CB:D3:49:84:94:91:FB:06:31:EC:51:69
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B563B124DB821210F99A63B42664ECCF1CC8492
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142900.roa
Signing time: Fri 22 May 2026 02:47:32 +0000
ROA not before: Fri 22 May 2026 02:42:32 +0000
ROA not after: Fri 21 May 2027 02:47:32 +0000
asID: 142900
IP address blocks: 240a:a0fa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:56:3b:12:4d:b8:21:21:0f:99:a6:3b:42:66:4e:cc:f1:cc:84:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:32 2026 GMT
Not After : May 21 02:47:32 2027 GMT
Subject: CN=F23EC35486A55451CBD349849491FB0631EC5169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:85:9a:46:9d:1b:15:0b:f4:8d:0e:a5:d2:
70:38:43:58:46:ff:79:14:25:a1:75:1c:e7:df:2b:
41:25:21:59:a6:a1:37:a4:32:92:a5:da:c5:64:10:
bc:87:e6:fe:66:b8:18:84:30:23:83:0f:64:38:86:
c6:d2:d3:72:c0:5e:56:3a:e9:98:03:bb:d6:72:c8:
66:ff:27:7a:1d:d3:5f:18:34:0e:02:36:04:c5:6e:
31:c7:3c:85:57:4e:2e:7d:27:b2:44:9a:94:02:88:
b3:80:0e:d0:db:55:77:c3:44:17:3c:c9:09:cd:e2:
15:14:73:5c:f0:ae:68:9b:77:28:13:bf:fa:8b:e4:
d0:b4:d9:2a:6f:2f:22:ca:e6:b7:f5:5f:06:b4:55:
6a:cc:41:10:ac:a3:06:cd:93:37:ba:46:b9:d2:88:
04:a2:56:46:46:4b:92:88:f9:0c:7b:6f:ca:81:dd:
7a:15:22:9d:2b:58:45:1d:bf:00:f9:8a:8e:25:45:
8f:3b:99:d6:b7:1e:39:a5:7e:3b:5c:24:c2:19:87:
0c:02:34:e5:70:f3:5a:1e:24:ef:08:de:5e:3b:ce:
c4:6c:10:3f:c2:14:2f:18:98:53:79:8e:e0:13:f4:
97:fc:ad:2e:17:9e:da:b1:e9:6f:76:18:6a:77:06:
67:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3E:C3:54:86:A5:54:51:CB:D3:49:84:94:91:FB:06:31:EC:51:69
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142900.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0fa::/32
Signature Algorithm: sha256WithRSAEncryption
1a:90:ef:41:f4:7d:98:31:43:20:25:c0:fa:46:60:23:db:e7:
60:20:4d:b4:96:da:97:fe:14:29:40:6f:4c:44:c9:14:2b:db:
63:65:e9:11:ec:71:3b:d0:18:40:79:94:f3:bc:b4:b3:59:b2:
9b:34:dc:12:c4:6c:42:e7:8e:9a:66:c2:c4:11:72:ca:8a:7e:
44:a3:0f:67:b5:de:c0:b2:bf:33:2d:f3:33:c4:ca:1a:6d:76:
aa:2a:1c:e4:67:85:dc:bc:e6:c0:b0:0d:1c:fb:5f:97:94:ee:
94:97:51:5e:46:9b:e4:72:6b:8e:0e:c8:32:0b:94:25:6a:e1:
e9:db:51:46:3e:36:97:de:9b:50:4e:a6:aa:16:c2:4e:a8:88:
f8:37:7b:0c:a6:8f:b1:a0:e4:4a:5d:94:89:43:a7:ca:2d:10:
45:2e:3b:25:9a:35:8b:6a:bd:24:9b:2c:11:e2:1a:be:14:cb:
67:5a:e7:05:af:99:f3:a4:52:1d:e6:6e:26:a8:19:4b:30:bb:
72:00:0d:82:21:d6:b2:e2:10:78:23:cf:e4:b1:28:97:57:90:
a5:5e:b0:59:32:3f:09:12:04:19:2c:fa:b0:88:d5:fc:1e:62:
88:45:57:15:92:6b:e3:fd:c7:60:07:a9:02:f5:a1:c9:48:bc:
38:b6:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:45 2026 by rpki-client