Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142969.roa
File: AS142969.roa (raw, json)
Hash identifier: KCpTdMTXMlnfA3Ba75Z/1YwZHwm53itSMa57P9Efh6Q=
Subject key identifier: F8:1F:AE:01:BB:6D:4C:AB:42:D0:7D:4C:BF:91:53:24:14:B5:41:A1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 23AD01F1906BC1A94CD4B111C77AF9B9DC2C0DA4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142969.roa
Signing time: Tue 26 May 2026 03:17:19 +0000
ROA not before: Tue 26 May 2026 03:12:19 +0000
ROA not after: Tue 25 May 2027 03:17:19 +0000
asID: 142969
IP address blocks: 240a:a13f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ad:01:f1:90:6b:c1:a9:4c:d4:b1:11:c7:7a:f9:b9:dc:2c:0d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:19 2026 GMT
Not After : May 25 03:17:19 2027 GMT
Subject: CN=F81FAE01BB6D4CAB42D07D4CBF91532414B541A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:79:fb:b4:10:1c:0d:6b:10:45:e3:2b:e0:
18:87:59:64:21:bf:6b:2e:b1:20:65:9c:f2:d1:67:
e3:5a:05:e7:9c:21:7a:2a:8b:e2:3b:d4:d3:5c:b5:
cf:3b:56:a3:94:45:c9:23:86:de:e6:13:ba:52:05:
34:fe:11:fc:82:0e:10:12:29:70:2a:3e:40:ac:2d:
86:1e:5e:bb:e0:7f:b3:4b:ff:1c:79:b7:16:6b:0e:
e1:8a:7b:cd:96:1a:40:a2:e3:c4:3b:1f:e8:ce:c4:
68:1d:33:c0:b0:41:8c:ac:60:cc:62:b4:98:79:d2:
a2:b5:4d:68:29:41:a7:fb:d2:47:c8:f6:62:43:7c:
e8:50:dc:4a:cc:8a:bc:ec:03:55:33:3a:df:68:e2:
02:08:97:ef:d2:f2:5c:7d:7e:d5:d2:4a:d2:70:99:
02:f3:b5:1f:b5:32:ac:98:36:d5:78:52:91:1a:32:
1b:63:df:2e:0f:19:9f:cf:67:1a:7b:29:e1:80:46:
09:2a:84:a9:eb:dc:92:82:1d:94:75:fc:cc:76:43:
ed:2c:8c:48:a2:4d:3e:e3:95:b2:09:a9:ca:f2:10:
15:1f:07:7b:8e:a7:67:78:22:fd:7f:cb:a3:10:50:
3e:63:4a:79:40:ad:6b:e8:f4:b2:68:28:60:0b:f4:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1F:AE:01:BB:6D:4C:AB:42:D0:7D:4C:BF:91:53:24:14:B5:41:A1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a13f::/32
Signature Algorithm: sha256WithRSAEncryption
33:a9:ff:b3:fe:5a:e2:fc:cb:52:6b:66:83:7b:a2:9b:23:f7:
35:30:78:94:fd:3b:dc:87:71:be:7f:2b:65:66:76:46:9d:34:
42:fb:5b:c8:00:17:3f:64:89:13:e4:e5:4a:ac:7b:41:e7:4d:
72:9e:0c:39:67:cc:ca:77:d4:5e:86:a8:c5:52:c9:bf:b5:df:
56:9f:f6:34:9e:82:ea:c2:37:ad:93:01:14:90:8c:57:eb:22:
9b:75:99:80:6d:eb:9a:e9:ae:11:d6:12:99:32:67:ea:a2:d1:
9d:06:80:20:68:4a:0e:2e:58:89:3d:02:d2:05:ba:ad:52:75:
c3:7c:29:e1:8a:53:41:0c:58:f2:93:98:2b:11:49:c8:25:75:
c9:b2:4e:17:be:1e:52:d0:50:39:52:87:13:bd:d5:5b:68:71:
c3:f9:ee:7d:e8:bd:90:8b:d3:36:cc:c9:28:cb:1c:66:3c:36:
2e:22:af:eb:0f:7b:ec:c4:16:b9:f6:0b:11:3f:2f:9a:f1:24:
53:d6:65:59:0d:f0:49:11:2e:72:97:70:53:23:e8:c1:68:52:
83:14:6f:52:03:bd:be:a1:a9:82:ea:b5:86:d9:28:46:25:9d:
03:e4:6f:c5:4b:ae:a7:82:9c:0f:e6:ff:69:cf:88:b9:97:f8:
7b:9f:8a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:36 2026 by rpki-client