Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142943.roa
File: AS142943.roa (raw, json)
Hash identifier: JsSeoe7m5bCFTmkiZaO2z+AzvR6J8eRZiUu5TnaYoe8=
Subject key identifier: AC:0C:C4:B2:A1:D1:DE:56:D8:81:EE:0C:B7:7A:CC:5A:81:CF:9E:46
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 28114EE1B4E104F4283C7D6F9F3034ED79F7C0FC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142943.roa
Signing time: Tue 26 May 2026 06:30:58 +0000
ROA not before: Tue 26 May 2026 06:25:58 +0000
ROA not after: Tue 25 May 2027 06:30:58 +0000
asID: 142943
IP address blocks: 240a:a125::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:11:4e:e1:b4:e1:04:f4:28:3c:7d:6f:9f:30:34:ed:79:f7:c0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:58 2026 GMT
Not After : May 25 06:30:58 2027 GMT
Subject: CN=AC0CC4B2A1D1DE56D881EE0CB77ACC5A81CF9E46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:7d:f0:b0:db:9e:be:ca:13:c7:fa:cd:4b:
94:fe:88:52:06:9c:60:dd:3f:4d:fb:24:d3:35:13:
8f:7e:64:51:b9:e9:9c:a1:56:c7:cf:77:f9:86:64:
a6:63:d5:b5:dc:c7:3b:44:97:92:ae:cf:08:bb:e1:
e2:12:52:11:43:da:70:b5:4d:03:29:d9:e1:95:8d:
29:6b:1a:d5:01:52:d8:2c:c7:64:7c:e4:14:7e:d5:
77:bb:b1:d5:b2:33:eb:46:63:18:d7:3f:51:64:df:
3a:7b:09:1f:b5:58:2c:eb:9b:fe:bd:90:ac:0b:84:
fe:1e:06:41:20:13:34:3e:fc:b7:f6:4a:92:bb:13:
5d:c7:a1:2d:66:c0:09:40:00:a5:ef:6f:af:d3:cc:
8f:ba:de:ab:66:00:6f:ea:b6:49:6a:4e:25:dd:f9:
ef:68:11:ee:3b:b4:e8:6f:b2:c4:66:6e:4d:a1:0f:
3c:cc:d5:6f:5c:1a:75:7f:2e:e4:99:b1:3b:2e:1c:
cb:c3:e2:f1:60:e7:c6:ea:0d:28:92:de:05:ef:20:
28:67:8b:ed:87:af:b9:46:d4:05:60:71:ff:0a:23:
bb:fe:e6:ee:72:75:8a:71:74:b4:c3:76:b3:b0:15:
c7:4e:22:27:d2:23:6d:d0:ef:20:73:49:0b:44:13:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0C:C4:B2:A1:D1:DE:56:D8:81:EE:0C:B7:7A:CC:5A:81:CF:9E:46
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142943.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a125::/32
Signature Algorithm: sha256WithRSAEncryption
72:60:e9:78:23:04:47:0b:70:a7:39:5e:40:57:17:0a:2c:da:
4e:ff:f3:30:b7:d0:b8:4d:58:06:4d:3b:93:0a:6e:ef:39:2d:
b2:ff:c5:08:5d:ff:b1:75:45:8a:2f:bc:bb:35:60:f7:2c:87:
90:d0:06:dc:22:35:8c:3b:ee:89:d1:4f:76:64:8c:15:d4:0e:
8d:f5:3f:25:79:dd:8b:c8:f3:78:12:87:33:85:cf:10:da:69:
f8:6c:8e:6c:7b:c9:19:15:1b:80:d8:33:67:39:ad:e4:03:4d:
bc:e2:5e:fd:30:ed:70:46:88:c3:9b:ce:0b:d0:dd:65:b8:35:
1b:d5:8c:a6:8a:cc:95:65:08:3d:91:8a:94:73:7d:7a:2e:a0:
d9:1f:78:22:55:3b:d2:8f:e3:39:aa:07:3e:ad:cc:d5:75:dd:
d9:1b:d7:4a:f3:b9:2f:ce:ce:ab:6d:09:50:24:ae:f0:00:f9:
dc:8f:ed:fc:49:80:d7:ac:65:39:3e:49:37:cf:eb:93:5d:4e:
71:f7:a1:6b:8b:8f:51:84:89:e4:ba:f0:ef:25:b0:5e:ce:2a:
c3:7f:70:01:48:06:08:a9:03:96:ca:25:c1:36:56:bf:73:66:
74:27:45:ec:29:82:4d:29:d9:67:3b:72:c6:be:2d:9f:de:03:
6c:97:4c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:54 2026 by rpki-client