Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142964.roa
File: AS142964.roa (raw, json)
Hash identifier: QNyF72oIAIIO0Ly3f3VKPsrEVQUZ5EagTcmkf5Tjo4w=
Subject key identifier: 49:97:34:33:B5:65:4D:26:A0:E2:0D:B5:BF:76:19:E0:C6:7C:E2:37
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 407759531D43E0EA04568B94C809A252579AA4F4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142964.roa
Signing time: Fri 22 May 2026 04:26:46 +0000
ROA not before: Fri 22 May 2026 04:21:46 +0000
ROA not after: Fri 21 May 2027 04:26:46 +0000
asID: 142964
IP address blocks: 240a:a13a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:77:59:53:1d:43:e0:ea:04:56:8b:94:c8:09:a2:52:57:9a:a4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:46 2026 GMT
Not After : May 21 04:26:46 2027 GMT
Subject: CN=49973433B5654D26A0E20DB5BF7619E0C67CE237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9d:87:41:e8:84:05:b0:28:9a:0d:cd:a8:d7:
75:b2:49:f3:b4:42:28:5d:8f:6f:4b:8e:00:64:50:
ba:43:43:0a:d6:c8:05:43:40:58:b6:38:8a:70:23:
9a:16:3d:ed:c5:37:e0:73:2b:78:f0:0e:80:9f:d4:
dd:e8:97:47:16:3f:f5:7f:a4:71:53:8c:de:cb:36:
44:5b:2e:8d:2b:be:dc:7b:d7:f7:fd:b8:1f:d3:c5:
f4:70:56:68:e1:2f:5b:cd:68:06:98:01:c9:8a:66:
06:6c:4c:64:16:52:13:b0:df:6d:76:04:3a:f9:e0:
b4:0e:e2:7d:40:b6:30:5d:6a:41:7b:05:7f:e1:98:
a5:7f:b7:27:d0:c5:6a:d9:84:7a:24:f2:cb:39:e1:
64:46:5e:7f:b0:93:11:e6:99:f9:7d:0e:98:5a:b9:
ce:aa:5d:49:81:33:ef:5a:99:fb:99:10:8c:f8:5b:
4d:23:6a:7a:48:eb:64:09:c4:50:90:fd:80:e8:0b:
3d:14:25:99:eb:61:56:3b:fe:7c:f0:2b:9b:3b:5d:
90:58:f9:3b:fb:bb:36:72:60:e3:0c:53:3b:69:94:
e5:c0:96:36:f4:b9:29:40:f7:93:55:3e:05:1d:39:
6b:52:6e:9f:d8:74:f4:ce:c5:56:b3:6a:44:35:49:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:97:34:33:B5:65:4D:26:A0:E2:0D:B5:BF:76:19:E0:C6:7C:E2:37
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142964.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a13a::/32
Signature Algorithm: sha256WithRSAEncryption
10:22:ba:7a:e7:3b:64:60:1f:d0:ea:92:c2:d6:63:77:52:3f:
c1:da:8b:94:5a:e1:c0:98:f2:a3:bb:4c:9b:e4:bd:8e:30:f9:
a5:7b:9c:ec:d4:72:2e:45:55:3a:f6:c4:45:e6:bb:aa:c7:4d:
7c:d4:42:ca:8f:69:d6:9c:69:53:ef:20:ee:43:8c:3a:e0:ed:
82:9e:f8:0d:f8:ea:d9:10:aa:3d:04:f8:04:aa:6e:43:4e:9c:
48:01:e9:e5:9c:44:b7:e3:0b:34:3b:a3:ac:99:2c:7b:ac:bc:
9e:6b:5d:d8:01:85:ce:76:87:cc:20:89:e1:c9:c9:eb:a3:16:
7c:a2:7e:fa:c2:5b:c4:98:f5:83:fe:34:f0:50:12:90:30:01:
8f:d0:eb:45:1f:ab:b3:d1:90:5d:16:7a:74:1f:0c:99:3f:e2:
7f:06:ec:91:31:6b:bb:de:c0:71:af:40:59:bf:fb:19:88:0d:
55:de:92:1d:b7:a2:88:a2:10:41:41:49:30:31:90:f9:55:6d:
df:4d:96:ec:86:a5:c6:d3:99:91:c1:87:6a:9d:60:7d:ba:98:
0d:da:63:ff:a9:cb:71:c6:11:34:58:7a:fb:ba:3d:72:1f:3b:
e6:3b:a0:88:06:88:9c:50:fc:90:66:ec:ca:c5:b5:c9:9f:d8:
a3:df:4c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:18 2026 by rpki-client