Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142924.roa
File: AS142924.roa (raw, json)
Hash identifier: ZOK0H0AZAtEC9MdGijYQNuivNWY3LJrAUbXjEmACKHc=
Subject key identifier: 06:54:F4:98:53:3D:2A:03:32:82:37:1F:D0:AC:0B:79:DD:4A:A5:AF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1E06318B487C717DB65F2E718AD38F523841F9E9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142924.roa
Signing time: Tue 26 May 2026 06:12:46 +0000
ROA not before: Tue 26 May 2026 06:07:46 +0000
ROA not after: Tue 25 May 2027 06:12:46 +0000
asID: 142924
IP address blocks: 240a:a112::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:06:31:8b:48:7c:71:7d:b6:5f:2e:71:8a:d3:8f:52:38:41:f9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:46 2026 GMT
Not After : May 25 06:12:46 2027 GMT
Subject: CN=0654F498533D2A033282371FD0AC0B79DD4AA5AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f2:ae:9f:2d:8c:6c:af:76:13:c9:a1:d2:90:
ba:7c:51:7e:cf:5c:0f:70:cf:64:88:39:80:b9:b8:
26:62:43:1c:57:f6:6a:86:b0:c6:5c:c7:f7:61:43:
41:de:d3:d7:0f:16:7a:73:73:21:74:37:c0:36:b5:
9b:f5:22:28:db:8b:33:22:eb:40:a0:2b:e7:ff:42:
82:b3:d3:4f:ee:39:1e:5f:65:d1:01:65:cf:23:c5:
16:41:e4:e5:d8:7f:83:4a:0b:3e:ab:3c:cc:1f:2e:
e7:e5:05:99:52:2a:5b:6c:c5:64:bb:6c:43:bc:ec:
b7:94:e0:07:70:10:3c:ea:6e:7b:fb:f9:a3:5b:1b:
0d:7a:27:15:eb:d9:84:ee:1b:0a:82:96:26:78:ce:
e5:ac:0e:f6:0e:5f:90:fc:39:c3:b7:c0:e7:20:b5:
ee:1c:43:80:c8:cc:06:a5:8c:56:32:6b:09:10:39:
47:31:2c:3b:08:88:82:e1:43:fe:3f:56:14:93:75:
b6:29:30:22:51:3b:48:63:42:e7:a4:5f:1c:46:5f:
85:39:56:9b:7d:a5:d0:ce:25:2c:f6:47:22:93:b6:
8e:0b:bb:c2:2b:8a:20:ea:61:80:7b:b2:4f:f0:56:
15:62:d4:c4:46:c0:25:71:6c:39:4b:70:8c:48:80:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:54:F4:98:53:3D:2A:03:32:82:37:1F:D0:AC:0B:79:DD:4A:A5:AF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142924.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a112::/32
Signature Algorithm: sha256WithRSAEncryption
48:eb:b2:25:3c:86:71:fe:9f:79:f4:6a:f4:9c:79:45:bb:f1:
67:33:48:91:90:95:24:6d:65:6c:9f:8c:59:13:f3:30:7a:ec:
3f:de:1c:1a:59:33:c3:cd:82:81:c9:3f:36:6b:3b:7c:ef:48:
de:0b:ae:85:9a:f6:88:ef:85:79:2b:7a:64:a5:ce:90:ce:b9:
45:10:a0:3d:6d:70:b6:35:35:09:95:92:c1:19:7a:f1:0d:59:
39:87:f8:88:27:61:b0:70:28:c2:61:ed:f6:15:5d:7f:16:70:
7a:0a:aa:ac:10:11:b4:f9:66:be:d1:60:6d:f0:c2:7c:52:2e:
af:15:73:20:6a:af:2b:12:1c:4e:65:40:af:32:19:56:4f:84:
ed:ee:f9:47:d2:72:31:3f:5d:40:e8:69:fb:42:34:27:36:35:
80:40:97:57:10:1f:e7:89:e0:d2:88:27:b7:bd:39:f5:f8:10:
dc:13:6d:8c:d4:f1:ca:0b:23:cd:f5:50:6b:f8:bf:21:a5:2d:
d8:5f:a2:b5:00:0b:45:95:f3:5f:ba:7a:52:a5:68:42:0a:87:
69:f3:f7:e4:c6:27:8e:73:f4:54:49:49:77:87:eb:b3:9c:a3:
cd:04:4d:89:7f:7a:f8:c7:ae:73:47:ed:e0:2d:6b:d9:81:99:
ea:05:2b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:05 2026 by rpki-client