Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142954.roa
File: AS142954.roa (raw, json)
Hash identifier: BkmhRtoN6k9Dyer96Vj5RbRRtJMI7Mz7uiaX0RwPeZY=
Subject key identifier: 67:A0:95:E5:6B:82:D4:0C:EB:4C:6D:AF:05:0B:8C:85:EB:EA:6A:A5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6F05F1F59D13E2FD841117557D913AD75FC032B5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142954.roa
Signing time: Tue 26 May 2026 01:13:33 +0000
ROA not before: Tue 26 May 2026 01:08:33 +0000
ROA not after: Tue 25 May 2027 01:13:33 +0000
asID: 142954
IP address blocks: 240a:a130::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:05:f1:f5:9d:13:e2:fd:84:11:17:55:7d:91:3a:d7:5f:c0:32:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:33 2026 GMT
Not After : May 25 01:13:33 2027 GMT
Subject: CN=67A095E56B82D40CEB4C6DAF050B8C85EBEA6AA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:54:c1:78:f4:29:c9:df:33:93:6a:93:1a:12:
67:3c:f8:d4:95:0c:5c:59:72:42:ad:e3:32:81:9f:
ab:b4:14:6c:b2:69:5c:62:eb:01:e1:08:3d:32:7a:
a6:81:51:91:a4:1f:5a:10:48:2c:e1:a6:b3:f8:53:
04:3c:2d:bf:2a:f4:2a:de:7d:9b:26:e6:6b:7c:c2:
29:fd:3a:2c:21:1c:79:75:0f:8d:ab:3e:37:ca:df:
27:f0:79:9d:48:83:b0:fb:93:15:24:81:2e:df:26:
aa:7f:8b:a5:aa:b2:93:4a:b9:38:4b:2e:d5:53:20:
8e:d3:0f:43:ac:ab:24:68:f4:5b:26:a2:99:7c:78:
30:9b:d9:fa:8c:3c:e9:51:e7:4d:57:71:8f:66:92:
20:d2:8b:89:12:74:e7:d8:55:b1:43:8f:8b:d6:a3:
d8:a3:64:0f:e3:4c:80:2b:63:dc:59:a1:39:c8:50:
58:ea:e7:4c:7d:d3:7e:f9:ed:ca:c9:f2:e1:67:61:
a6:a7:a2:5e:af:c6:ab:7a:01:33:01:22:47:6d:6b:
c0:a0:77:28:a5:c0:32:9c:d7:59:8a:4c:78:a7:5c:
b1:81:9d:d1:6c:15:af:05:6e:cc:4b:80:43:ef:1f:
69:b4:2e:53:a0:09:51:3d:c6:73:f4:74:02:05:41:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A0:95:E5:6B:82:D4:0C:EB:4C:6D:AF:05:0B:8C:85:EB:EA:6A:A5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142954.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a130::/32
Signature Algorithm: sha256WithRSAEncryption
ae:9c:f2:83:ce:6b:15:bf:93:13:21:70:7d:a4:eb:14:2c:5f:
e9:da:54:d3:5c:ee:43:e5:27:fe:04:85:68:6c:a1:10:92:9b:
31:60:37:2e:f2:e3:58:92:cd:ea:24:01:1e:55:7e:66:03:e4:
af:f5:6b:be:0e:85:19:21:b0:90:b1:9a:ad:d9:25:fa:17:77:
78:b3:bf:b6:25:f0:11:b8:7d:06:e9:71:73:c4:2e:e3:eb:f0:
90:d7:92:c8:d6:29:5a:03:87:87:33:37:c1:f7:46:79:48:da:
62:4c:44:17:3a:51:4f:9e:67:5d:8a:2f:3c:f8:b7:e5:95:3d:
04:e3:b2:87:1d:f1:4a:0d:35:3f:d1:87:80:7e:4d:98:53:80:
b5:0f:b9:9c:8e:69:27:0c:3b:45:8b:92:18:17:36:36:f0:e4:
e7:80:62:81:d1:65:e7:23:0f:f4:a8:4d:62:e4:00:ae:30:6a:
1a:df:7a:e3:1c:0d:6a:3d:68:df:5b:3c:c7:ef:af:96:1e:26:
3d:34:06:32:dc:2c:e1:9c:01:b7:c8:d2:7a:d1:c9:37:af:03:
6f:03:06:82:0b:a0:cc:a0:47:6b:6d:bc:f8:d1:72:7b:6e:ba:
d3:92:a6:39:8c:4d:fc:04:fe:d0:f4:d4:84:78:4b:80:09:a0:
ed:7b:4b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:35 2026 by rpki-client