Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142912.roa
File: AS142912.roa (raw, json)
Hash identifier: puXp0BiwfZ2/j0Dar3oHD9icXaGcLWbnyVpqlRdnqDM=
Subject key identifier: 65:74:2A:7B:D9:C2:C3:24:49:DF:5B:28:22:3C:DD:59:CC:E5:85:23
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 016AADA8F508C1D2358F5261ED78D1D49B4BD209
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142912.roa
Signing time: Tue 26 May 2026 03:16:54 +0000
ROA not before: Tue 26 May 2026 03:11:54 +0000
ROA not after: Tue 25 May 2027 03:16:54 +0000
asID: 142912
IP address blocks: 240a:a106::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:6a:ad:a8:f5:08:c1:d2:35:8f:52:61:ed:78:d1:d4:9b:4b:d2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:54 2026 GMT
Not After : May 25 03:16:54 2027 GMT
Subject: CN=65742A7BD9C2C32449DF5B28223CDD59CCE58523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:64:c3:87:db:cf:0e:14:ee:92:3c:d1:cc:
37:cd:2a:bd:c8:5a:b5:33:05:5a:42:ce:b4:4d:b3:
29:76:19:88:6c:17:96:30:82:2b:f6:13:d7:47:4a:
c5:8a:72:b1:34:4a:a9:09:a2:90:8d:42:b4:26:7b:
5d:a4:08:43:23:77:77:74:39:48:58:ad:e4:5d:c1:
55:b4:f2:98:7f:95:5c:0b:ef:e7:4c:e2:b8:a2:05:
b3:b3:03:1a:65:4f:c2:ad:fa:f5:a3:d7:16:d1:88:
dd:94:29:50:6a:66:34:fc:cc:b5:6f:83:a3:bb:fa:
23:5a:d3:d2:b4:8e:15:b4:b3:d8:41:db:fd:ce:82:
0e:4e:2f:74:f1:5f:da:5c:8f:9e:57:20:13:f6:66:
49:c1:00:55:48:5e:6b:91:fd:f0:68:4b:dc:1c:40:
fa:d9:eb:0b:c3:c4:8b:aa:c1:35:4b:37:74:34:72:
51:bb:f9:df:8b:87:b1:70:2d:78:de:e1:b6:86:d6:
d1:80:77:8e:66:40:36:bd:60:80:4d:96:90:7a:9e:
fc:40:9f:a1:2d:c7:fb:c5:f9:b2:d0:e7:07:47:db:
95:6e:ec:5d:c1:5f:c9:e8:e9:e5:4c:27:63:4d:d4:
96:e0:e8:c7:d3:fb:10:56:b9:88:b0:b5:e6:ef:94:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:74:2A:7B:D9:C2:C3:24:49:DF:5B:28:22:3C:DD:59:CC:E5:85:23
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142912.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a106::/32
Signature Algorithm: sha256WithRSAEncryption
91:9a:4d:f6:58:97:e7:8f:94:89:fd:e7:6c:eb:01:fe:7b:c7:
86:fc:0a:0d:8e:08:56:26:a2:20:44:b7:2c:4a:b2:7e:d8:1b:
98:12:9d:79:cd:cd:1e:74:e1:d1:a2:1a:45:f4:9c:37:7d:5f:
09:f8:d5:79:83:64:57:1a:c8:e1:75:6d:61:62:8b:16:3e:cc:
5e:5f:e4:1d:15:ea:6d:24:69:dd:62:65:63:f4:2c:4d:dd:f6:
cd:6d:a4:24:e7:5e:41:9b:7e:6f:95:12:81:e5:58:a6:ef:26:
55:40:08:51:e6:a2:79:4a:39:b1:8f:df:70:7a:89:93:e6:7b:
54:f6:b8:af:de:55:37:88:d4:89:4e:11:ea:6d:85:67:2a:c1:
18:80:52:eb:d5:95:a5:0a:e0:98:1e:bb:a5:33:5f:b7:df:53:
2a:8d:73:fe:0f:a7:9b:cf:a9:ac:2a:6e:42:10:00:43:0d:0e:
65:23:98:73:0e:de:9a:a0:05:2d:56:f6:78:aa:e4:eb:0e:b1:
8e:17:a0:cc:8a:1f:65:33:70:2d:25:32:b1:57:ca:cd:8e:35:
21:ee:e7:02:92:bc:c9:f0:aa:ed:2b:03:d9:4c:32:7f:e2:52:
d4:38:c9:19:11:ee:9a:f8:93:01:7b:3c:99:5b:dc:5a:e5:f6:
84:21:85:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:44 2026 by rpki-client