Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142930.roa
File: AS142930.roa (raw, json)
Hash identifier: EBFA6cbrikyBYPoife0rO0IfUHqjh+mGtXwSiKhn24c=
Subject key identifier: 2A:33:61:39:97:24:9F:D7:8B:F6:F3:BD:92:CF:00:3C:5E:4C:F2:FE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7DF1CF85B86CC11E4F0D6289524F300DE172B515
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142930.roa
Signing time: Mon 25 May 2026 06:28:47 +0000
ROA not before: Mon 25 May 2026 06:23:47 +0000
ROA not after: Mon 24 May 2027 06:28:47 +0000
asID: 142930
IP address blocks: 240a:a118::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:f1:cf:85:b8:6c:c1:1e:4f:0d:62:89:52:4f:30:0d:e1:72:b5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:47 2026 GMT
Not After : May 24 06:28:47 2027 GMT
Subject: CN=2A33613997249FD78BF6F3BD92CF003C5E4CF2FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:be:b6:b5:f4:f8:97:f3:c3:8c:25:35:fe:
9b:5a:10:de:56:ad:3e:e0:2e:80:98:05:8e:36:37:
4b:d6:ea:26:ec:a1:db:86:e3:a7:5e:73:87:42:e7:
92:7a:36:9a:77:4e:78:ca:79:7e:42:50:08:f6:4c:
a5:8b:fd:70:8f:4d:30:66:8a:45:f2:74:6b:d6:4c:
5b:fb:ff:d6:c4:11:a0:31:a0:c1:1a:43:32:32:99:
22:78:52:94:78:d9:85:9c:d8:35:46:cf:e6:72:41:
c6:a7:b1:cc:fe:fc:1c:23:71:16:05:2f:f5:31:8c:
63:ea:e1:3d:02:a4:de:8f:59:9f:5a:69:ed:0b:65:
6e:9e:f5:b1:c6:c2:ec:33:40:ea:93:d5:48:e0:eb:
bb:94:24:17:9e:4a:53:45:55:07:8b:b0:42:dd:fe:
bc:6b:16:a7:65:9a:4d:68:19:e7:ad:e2:f1:d9:f4:
df:34:e3:e8:dc:fb:91:8c:5f:f9:58:ca:76:63:4e:
36:03:5d:1b:b6:0a:f7:54:71:0e:14:cc:eb:85:d2:
70:b9:49:08:ed:70:4c:c3:2a:ce:62:37:a8:b6:fb:
2b:9b:20:7a:a3:fc:66:b3:85:8c:8a:f6:88:fa:fa:
70:a6:e7:19:17:3d:d6:b6:64:5a:d7:cc:c2:b4:e6:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:33:61:39:97:24:9F:D7:8B:F6:F3:BD:92:CF:00:3C:5E:4C:F2:FE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a118::/32
Signature Algorithm: sha256WithRSAEncryption
4b:ff:3f:de:cc:37:ed:d9:84:f6:89:0b:73:f0:a6:07:81:2b:
cb:f6:0e:b8:75:1d:0f:3e:be:49:0c:33:f4:12:9a:52:1b:2b:
80:d9:3c:80:5c:f7:62:4c:5b:10:3a:7c:90:13:ae:f8:68:58:
34:80:35:0a:4b:43:7a:61:0a:10:20:18:b5:0b:4f:51:e6:e8:
7b:57:98:4f:29:44:2a:f4:1f:75:0c:04:8e:27:43:1b:d1:14:
4f:18:e0:b2:e8:45:f2:f9:13:47:49:19:2f:4a:52:60:82:98:
2b:35:02:2f:6e:cd:a9:2c:a2:c6:62:2c:2b:49:35:81:c5:aa:
5a:64:99:bb:87:8a:a6:3a:a1:d3:c8:48:a4:46:94:58:cd:e8:
3b:5e:ce:38:ff:80:06:cd:61:f6:ce:bd:64:41:7b:bc:46:78:
bc:56:f9:5d:fd:54:84:d9:98:59:2f:c6:db:0e:cf:2e:7d:83:
56:0f:94:31:2a:f4:84:b2:20:47:04:bb:18:77:03:e4:ac:da:
f2:dc:37:c0:ae:c6:2c:af:81:b4:a6:a4:22:8f:89:a6:d2:3e:
1f:7c:eb:23:2e:4c:8f:ae:95:c4:42:59:99:1c:df:75:da:34:
68:17:c3:b6:d8:1f:a5:12:39:e2:22:97:79:66:98:e2:cc:a6:
dc:19:14:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:11 2026 by rpki-client