Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142971.roa
File: AS142971.roa (raw, json)
Hash identifier: 2Zc55Es68XwY2azqiW0WIjfNvsTvaEDwCBqnRjKI7M4=
Subject key identifier: A5:63:5D:17:C7:B9:FA:81:34:7C:09:D7:FD:AA:23:A2:9E:12:4F:6F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 58532AF7C4A05CEDCEFB6B8A6AF1E99EDD1B1E63
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142971.roa
Signing time: Fri 22 May 2026 04:07:55 +0000
ROA not before: Fri 22 May 2026 04:02:55 +0000
ROA not after: Fri 21 May 2027 04:07:55 +0000
asID: 142971
IP address blocks: 240a:a141::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:53:2a:f7:c4:a0:5c:ed:ce:fb:6b:8a:6a:f1:e9:9e:dd:1b:1e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:55 2026 GMT
Not After : May 21 04:07:55 2027 GMT
Subject: CN=A5635D17C7B9FA81347C09D7FDAA23A29E124F6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:26:09:3a:85:34:b7:86:26:07:0b:5e:bd:
80:08:80:2a:e7:f8:b2:ed:23:a7:bf:a0:5d:81:6e:
55:c8:a6:51:b4:2b:62:b6:15:cb:43:c9:88:d4:e5:
e7:fb:1d:14:c9:8f:ea:35:b2:0c:22:74:22:50:ce:
de:c3:68:f4:6d:3b:e7:ae:01:17:23:c0:ae:7f:38:
43:0a:19:7c:75:7c:51:64:0e:eb:bd:f5:86:63:b1:
01:7c:a1:11:2f:19:3f:a1:f3:48:b0:c1:5c:9e:54:
d9:4e:48:56:57:00:82:11:e9:dd:4c:6e:15:92:5e:
29:49:04:e2:99:a1:9f:73:6c:c8:e4:56:0c:8a:74:
b3:25:d3:8f:75:dc:6b:cb:28:a8:e3:0b:91:09:d5:
a9:1b:c3:31:c4:70:ac:59:3a:2f:67:56:12:99:b0:
b2:0a:f9:f9:92:85:c3:8b:72:60:9d:13:ee:e1:3f:
8e:80:57:8f:b2:7e:6b:d7:66:62:54:a0:26:17:2d:
ed:be:0e:ab:c8:1d:96:3c:2b:75:e1:90:59:7d:c8:
4d:22:c4:7c:5b:df:88:ad:14:d3:ec:64:3e:72:1c:
3f:aa:08:ba:ad:6b:ac:73:68:f9:b8:19:06:e8:68:
f7:45:9b:47:bf:48:39:ed:20:79:0c:54:7f:99:98:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:63:5D:17:C7:B9:FA:81:34:7C:09:D7:FD:AA:23:A2:9E:12:4F:6F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142971.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a141::/32
Signature Algorithm: sha256WithRSAEncryption
8b:8f:32:60:d7:7a:bc:77:de:e6:29:ff:f9:75:ff:a0:44:7f:
ea:f2:40:4c:7f:e1:b8:97:a6:ae:47:7f:80:9b:e0:82:7e:ed:
9f:e7:0a:d4:9a:a8:10:d2:4b:3d:89:76:37:c5:4a:9b:77:50:
b2:ce:59:8b:23:04:fb:2a:cc:32:c3:55:08:7b:41:63:63:a2:
25:78:0a:b2:08:7f:36:1a:39:53:7c:28:ce:c8:71:cb:6b:87:
b2:50:42:3d:07:04:14:62:1e:76:af:34:e5:93:a0:62:5e:15:
39:bc:bd:00:6f:f0:35:26:68:fe:5d:4e:fd:d3:76:62:f9:91:
89:a0:69:ae:a2:a7:b8:ec:48:41:76:bd:16:4b:1b:7c:bf:3e:
5a:5d:19:40:ec:71:63:7e:e3:96:11:f4:e7:20:be:c1:02:22:
7e:1b:f8:70:62:db:86:ef:02:50:18:5a:6b:d8:d4:c4:24:44:
51:f7:23:bf:be:33:79:b8:34:2e:0a:21:05:ef:1f:7e:18:79:
24:4b:8b:a1:95:6e:e4:47:41:b2:7a:a6:ea:54:dd:6c:3c:aa:
e3:38:4b:1b:b9:d4:f6:24:32:72:2a:8c:7a:1d:ad:2e:e6:1b:
20:f9:47:9e:8f:45:91:f0:32:4f:3c:d0:f9:0d:c0:e6:ec:5a:
af:df:c1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:28 2026 by rpki-client