Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142911.roa
File: AS142911.roa (raw, json)
Hash identifier: gF9OQYki9nh8aR2jivR4MvdLCBHuRGd74ucHyd73GrQ=
Subject key identifier: 96:F5:DB:8F:85:C9:A9:A3:9C:C8:1F:14:A8:9E:EA:81:6D:89:F9:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 51831488F116614818BAD398FD94AB5B87D71CDC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142911.roa
Signing time: Fri 22 May 2026 07:41:22 +0000
ROA not before: Fri 22 May 2026 07:36:22 +0000
ROA not after: Fri 21 May 2027 07:41:22 +0000
asID: 142911
IP address blocks: 240a:a105::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:83:14:88:f1:16:61:48:18:ba:d3:98:fd:94:ab:5b:87:d7:1c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:22 2026 GMT
Not After : May 21 07:41:22 2027 GMT
Subject: CN=96F5DB8F85C9A9A39CC81F14A89EEA816D89F970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:07:a7:76:e5:8e:99:07:1f:cf:23:05:a9:
83:d5:2a:f0:36:ba:cc:55:b1:25:e0:f7:50:9b:5c:
41:7f:c2:ef:ec:65:b1:f7:dd:c7:01:ed:b3:e3:cf:
49:40:2b:71:f1:4b:bd:09:a0:9c:d8:94:bd:af:50:
13:e2:3c:59:35:cf:49:f9:91:0e:9d:5d:b8:ce:b3:
7b:b4:82:00:04:3d:29:3b:e9:db:f6:21:c6:6e:81:
3c:0e:69:14:eb:2b:a0:8e:64:1b:4c:b0:74:e8:22:
74:da:3f:36:33:9d:80:aa:37:f8:39:4e:e3:f6:e6:
03:0e:ba:79:5a:26:4a:d3:db:a9:66:a7:f6:7b:72:
e5:61:6d:e8:2b:18:aa:02:e7:75:24:98:aa:c3:db:
a6:a0:78:4a:3e:f1:ba:99:73:e7:a0:84:f6:a5:32:
48:de:90:6c:d9:c7:76:97:a9:09:bf:90:bc:fa:60:
f0:83:75:29:0d:ad:8d:69:0d:56:a1:f8:f6:84:34:
68:0f:cd:07:12:90:f2:41:50:25:c3:f9:ce:4e:b3:
5b:de:a9:95:07:0a:d4:e5:4d:25:9c:5e:76:26:05:
6c:93:0a:81:70:81:0f:f7:79:f8:41:76:2f:46:0e:
79:16:57:4c:3f:31:73:ca:0c:4d:62:e0:fd:81:fc:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F5:DB:8F:85:C9:A9:A3:9C:C8:1F:14:A8:9E:EA:81:6D:89:F9:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a105::/32
Signature Algorithm: sha256WithRSAEncryption
13:03:44:91:be:15:c0:d5:72:4f:f5:0e:7b:2b:82:50:2f:6a:
8c:e5:0f:57:e3:60:06:cf:df:67:9e:89:e2:98:53:51:0f:78:
90:14:cd:ae:c0:48:1b:95:dc:48:92:d9:60:17:2e:2b:b0:84:
10:c4:19:d0:d1:f1:23:da:f0:bb:c1:67:0a:20:f9:43:c4:fd:
02:8d:53:bf:5e:14:89:b1:6d:cd:de:ca:c9:85:aa:5b:18:51:
ca:e2:79:83:a0:3e:dc:dc:04:06:19:bd:21:f0:73:93:fb:1b:
c0:b9:f0:8c:d0:81:a9:bc:ef:e0:47:f0:b3:37:0f:17:d3:d1:
b7:8f:eb:f4:4b:01:53:fd:5d:0d:f1:12:7a:96:2a:65:98:94:
da:e6:b2:4d:1c:60:9e:7c:36:93:88:6e:41:81:9e:f4:ea:1d:
54:0b:d8:14:f8:b2:62:5d:a8:b7:50:f1:5d:fc:56:63:b5:47:
ec:02:9c:04:3d:d2:ed:10:dd:26:0f:06:ab:d6:15:60:b4:66:
ca:0e:e6:2c:89:cb:1e:06:f1:ab:65:74:b3:b3:81:99:e7:d8:
95:30:7b:08:30:2a:8e:f5:eb:eb:60:24:e4:ce:89:91:04:3b:
6b:92:bc:0f:b2:06:3f:e0:a6:78:26:e7:05:7c:d7:45:03:61:
06:84:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:02 2026 by rpki-client