Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142906.roa
File: AS142906.roa (raw, json)
Hash identifier: 2q5Q8zXHRQyqB/RDTXxujhJTYzUQU+IO5pIj/5lIGjY=
Subject key identifier: 04:03:B8:35:BA:29:E6:F3:64:66:5C:5B:9E:27:12:A2:AE:51:71:7A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4436ED50B165FE36D4F4D895C9D4614EBAEE3727
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142906.roa
Signing time: Fri 22 May 2026 06:27:54 +0000
ROA not before: Fri 22 May 2026 06:22:54 +0000
ROA not after: Fri 21 May 2027 06:27:54 +0000
asID: 142906
IP address blocks: 240a:a100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:36:ed:50:b1:65:fe:36:d4:f4:d8:95:c9:d4:61:4e:ba:ee:37:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:54 2026 GMT
Not After : May 21 06:27:54 2027 GMT
Subject: CN=0403B835BA29E6F364665C5B9E2712A2AE51717A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:e2:b1:93:13:e3:81:f6:7b:7c:63:a8:94:
63:e7:6f:90:07:78:56:47:8f:9c:02:57:2f:60:a0:
bc:48:70:c6:a5:25:44:36:e3:21:19:b9:5c:1b:25:
ca:93:3a:26:01:07:4f:a0:0b:ae:ef:72:78:8d:6d:
63:96:6a:f7:87:23:0a:db:7f:c9:4d:63:c2:87:90:
c6:48:5d:ca:c7:b4:47:9b:13:80:72:7f:c3:a4:9b:
a2:f1:0f:9d:d0:95:b1:fd:9c:fc:39:68:fc:84:69:
46:7f:8f:04:ba:c8:c5:ed:0e:d4:ae:74:e9:55:e2:
28:ec:64:38:b3:05:8f:3f:fe:8c:eb:59:e0:c6:f4:
31:99:80:4e:a6:20:c9:34:ad:bc:ce:ec:65:25:80:
85:62:da:27:33:f3:eb:90:08:b3:ba:93:c4:3e:5c:
d9:72:d0:12:a7:64:ad:ef:af:72:87:fb:28:84:a3:
0d:6a:ea:fe:35:2a:36:f4:ec:1b:be:f8:ca:58:63:
c1:37:11:49:2e:58:fc:21:42:75:4f:8c:05:ff:07:
04:6e:d3:1f:81:73:28:d7:86:a5:aa:6b:3d:5b:ee:
82:52:90:d0:c5:6c:97:7e:2f:47:01:04:80:71:c2:
33:30:69:6a:ae:f6:b2:aa:4c:17:50:4f:fa:e5:21:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:03:B8:35:BA:29:E6:F3:64:66:5C:5B:9E:27:12:A2:AE:51:71:7A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142906.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a100::/32
Signature Algorithm: sha256WithRSAEncryption
22:e0:4d:cb:67:fb:6a:e4:55:d0:54:c7:b5:8d:e9:2e:13:22:
32:1a:b2:5f:09:b6:7c:20:6b:77:04:0b:f2:89:6e:1d:b1:06:
8e:78:e8:7c:aa:60:65:6b:4f:e0:0a:ca:fa:37:55:72:e6:1e:
f5:33:e5:75:14:a7:31:31:06:74:06:d4:06:43:75:12:71:8c:
b3:6e:50:cf:97:02:36:a1:37:7a:0d:3c:54:b3:00:ba:8b:69:
52:70:5b:88:19:d9:9a:f4:d9:1c:e3:89:a1:6b:b0:66:2a:9d:
98:c3:ad:f6:1c:ad:f4:f6:46:41:eb:27:8d:ae:a0:07:08:b4:
f3:30:3c:cf:cb:f8:af:c0:13:cb:e9:99:cc:d7:45:5e:4a:76:
8b:5e:d2:a8:f4:b8:e9:c3:c0:ba:1c:bf:40:3d:b0:82:94:fd:
b8:89:84:bc:a6:30:3d:dc:b0:86:76:06:0d:9e:5e:83:87:09:
92:df:e7:17:b0:e4:b4:74:ce:00:af:41:ec:f2:e7:5f:27:05:
5c:76:2e:e5:b2:23:8a:71:04:24:aa:1c:9b:00:b1:dc:d2:f8:
37:99:43:95:96:a9:3f:47:f6:8d:5f:84:e6:1c:63:bf:5c:58:
ec:1e:e4:34:9c:e7:5c:0e:99:09:66:e1:6d:b3:ed:c2:5e:e9:
e0:7d:52:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:58 2026 by rpki-client