Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142957.roa
File: AS142957.roa (raw, json)
Hash identifier: k43Ce5XoIjIIsotX2VrLLx+pac3fXSujFTnF7svU5m8=
Subject key identifier: 90:9A:A1:39:B7:F6:5B:31:7D:C9:C6:B4:3E:08:3D:1C:AE:ED:9F:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2E1669A63C474A5266087A6867F325F3F7D1CE8F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142957.roa
Signing time: Mon 25 May 2026 03:19:48 +0000
ROA not before: Mon 25 May 2026 03:14:48 +0000
ROA not after: Mon 24 May 2027 03:19:48 +0000
asID: 142957
IP address blocks: 240a:a133::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:16:69:a6:3c:47:4a:52:66:08:7a:68:67:f3:25:f3:f7:d1:ce:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:48 2026 GMT
Not After : May 24 03:19:48 2027 GMT
Subject: CN=909AA139B7F65B317DC9C6B43E083D1CAEED9F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:28:c0:fe:85:d5:cb:30:28:18:f7:f2:84:94:
fb:2e:03:27:cf:b8:4c:62:ee:68:b7:10:45:f4:d6:
74:85:9b:d5:46:9e:bc:b7:6e:b5:db:8b:1c:09:64:
89:de:6c:07:f7:5a:4c:91:b3:6f:ea:8e:27:03:ce:
01:bb:ad:c3:84:bf:e7:9b:e5:e0:9a:38:4f:5f:3e:
09:2b:70:22:40:ab:9e:05:54:91:21:87:b2:61:55:
de:93:f9:56:39:61:cb:de:61:45:01:73:22:de:09:
f7:dd:33:a6:1e:bc:e4:fb:44:d7:17:f2:37:29:53:
e3:f1:a8:43:b1:82:d0:a7:a7:f1:12:61:a6:8b:e7:
bd:62:a6:56:93:f1:8e:ba:7f:d0:35:53:8b:c5:32:
f3:58:49:5b:fe:7c:fb:8a:b4:58:74:8a:ef:fe:32:
a1:1f:95:62:e4:d0:f3:00:80:72:59:7e:3d:e3:b4:
6f:1e:07:fb:e6:3f:eb:5f:8f:d8:47:c8:0b:64:df:
82:50:31:60:f5:20:64:58:5e:b7:73:64:a2:c0:4f:
5b:c1:17:05:6b:05:55:47:c2:b3:94:1f:55:78:09:
59:b7:fb:42:5b:86:9b:66:88:6a:d1:d6:46:70:ba:
2b:66:c2:4b:a7:73:f6:fe:77:12:4f:7f:29:59:28:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9A:A1:39:B7:F6:5B:31:7D:C9:C6:B4:3E:08:3D:1C:AE:ED:9F:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142957.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a133::/32
Signature Algorithm: sha256WithRSAEncryption
52:3e:b5:0e:d4:33:dd:ed:b7:4b:0a:c8:eb:c1:e2:d6:e2:dc:
3d:93:64:36:5f:be:44:b7:43:eb:5e:58:10:16:b5:7a:1f:96:
40:9a:0c:19:b1:2e:bb:46:65:2e:bd:0d:7d:2a:df:0d:b0:24:
20:9f:09:0b:ee:0d:6b:1a:b6:8a:44:92:be:4b:11:2f:46:ff:
bd:09:ae:f9:f3:04:05:be:47:12:a7:95:c6:fd:dd:90:0d:01:
7b:e2:12:a6:56:fa:7e:a4:14:10:ce:f5:3a:c7:8d:74:14:bf:
11:1a:db:82:66:8e:d2:31:0d:ef:f5:59:b7:4d:c4:18:9b:aa:
74:69:c9:e7:44:0c:87:a3:d1:df:39:19:90:8e:f6:23:e0:b6:
70:d0:ff:35:84:4c:d2:7a:1b:ed:3f:b1:34:98:c1:3a:fc:ed:
6f:56:b8:f4:06:3b:34:e3:c3:4d:20:32:a3:58:f5:b8:cb:fc:
28:f9:22:ba:f7:d2:ab:cd:d8:11:1d:fe:d0:8f:ee:3c:07:be:
12:24:c9:5e:f2:ef:62:b6:ea:37:c5:65:e6:44:6a:9d:b1:a0:
9b:64:96:fe:65:68:1d:c9:38:ed:0c:83:eb:3a:6b:57:ab:0a:
6d:39:d3:61:4f:03:4a:ee:f8:df:cd:bb:11:c1:34:3b:b4:f1:
20:dc:ef:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:23 2026 by rpki-client