Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142902.roa
File: AS142902.roa (raw, json)
Hash identifier: vTArU9Md43VvbkDecDrcWNXLtgTEsVRHZ5M/Nv+65qQ=
Subject key identifier: 4D:BC:3F:6D:83:8B:83:B0:DB:F5:F8:D6:62:17:FD:6F:07:40:D7:C6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2572651F572A02D692A6AF0219C17C4EDB7955B5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142902.roa
Signing time: Fri 22 May 2026 07:32:32 +0000
ROA not before: Fri 22 May 2026 07:27:32 +0000
ROA not after: Fri 21 May 2027 07:32:32 +0000
asID: 142902
IP address blocks: 240a:a0fc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:72:65:1f:57:2a:02:d6:92:a6:af:02:19:c1:7c:4e:db:79:55:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:32 2026 GMT
Not After : May 21 07:32:32 2027 GMT
Subject: CN=4DBC3F6D838B83B0DBF5F8D66217FD6F0740D7C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c2:49:24:6b:b1:eb:ec:28:b7:b8:85:c5:be:
43:79:07:ee:61:3a:8a:ab:c0:ec:48:17:ef:9f:7b:
b0:7a:92:3f:3b:26:39:aa:64:34:1c:ff:0a:98:98:
82:69:d6:99:92:10:1c:26:17:9a:d6:5d:8d:41:af:
4a:ba:ec:d0:9d:6f:4e:28:3f:77:2a:03:4c:e9:0a:
db:34:34:d4:6a:03:96:62:97:ad:e8:ee:3c:a8:85:
4d:17:6e:61:f4:2f:e1:b8:0c:b1:dc:39:67:6b:f6:
ca:3e:8e:7c:02:ff:6f:8e:db:42:b0:45:aa:7d:70:
e5:dd:6d:48:c4:00:ad:a9:79:a2:46:d5:a2:ff:a8:
43:cd:cf:24:9b:b0:15:a7:3e:3e:4d:c5:e3:cd:f9:
79:12:93:27:c8:1e:18:0c:bb:3d:7f:32:c0:b8:ee:
6d:cd:ba:a7:ff:09:90:91:ca:16:84:08:88:09:fa:
d8:44:a5:c8:fc:2f:e7:b0:ba:40:c8:8a:a8:73:76:
1b:71:2a:d1:2e:86:68:10:85:2b:0d:4f:9a:5e:3f:
32:8b:c4:30:61:e6:e3:ae:42:d3:0c:6b:66:6c:1b:
6a:81:44:f8:ce:3e:ed:83:e9:4f:16:b1:8a:f2:83:
c4:60:06:14:98:9e:29:8b:05:f0:34:53:e5:c5:8a:
9b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BC:3F:6D:83:8B:83:B0:DB:F5:F8:D6:62:17:FD:6F:07:40:D7:C6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142902.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0fc::/32
Signature Algorithm: sha256WithRSAEncryption
bc:81:ac:7f:35:e4:ec:6b:a8:87:43:be:cd:cc:bb:ab:b1:58:
e0:2f:66:06:67:77:7c:55:a4:ad:3f:a6:61:2f:f2:ea:2b:13:
3e:d7:47:c8:2d:1c:8c:64:2c:8d:46:4f:21:f9:2a:e0:08:d2:
44:47:31:36:59:97:70:9e:8b:27:aa:27:c4:3e:01:b1:9b:e4:
d5:0c:93:55:39:3c:c9:ea:6e:e6:94:ea:5d:33:9e:c9:89:60:
82:5b:00:b4:84:3a:35:91:26:5d:4e:ed:23:c8:f2:44:cc:8c:
b1:11:8e:c5:fd:89:72:4c:87:f7:0f:c4:5f:60:ba:a0:46:86:
0d:42:06:ff:46:aa:d6:07:a0:af:8a:2a:e1:f0:95:c6:0c:7f:
55:b5:c0:92:fa:ea:11:ca:5e:1f:10:cf:b5:00:77:6d:6b:18:
9f:e1:f9:68:90:e6:c7:2c:93:b9:7c:c3:4f:3f:49:29:f9:61:
8c:c9:42:01:3d:ce:63:78:ab:2e:27:a6:f9:f6:f3:87:fb:b3:
6e:b5:e1:7f:74:49:a2:41:ba:3a:64:c8:3c:dd:54:f4:12:91:
fc:7e:79:e5:09:1f:c1:0e:3c:7d:b2:ec:f3:ee:b3:95:45:0c:
56:39:d5:b2:93:a2:45:b6:a2:d1:6a:4a:cc:a4:59:e0:79:d0:
54:e8:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:45 2026 by rpki-client