Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142975.roa
File: AS142975.roa (raw, json)
Hash identifier: cffxaFLFDqev+yFXPuSOD9IEOf1qexd39EieMqhS+VE=
Subject key identifier: 4F:C7:70:29:AF:CC:38:F3:79:95:59:20:13:D7:C6:77:0C:6F:4C:C1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 11CA93D0DF3DA283FD26E446F0BA09C8ECC6566B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142975.roa
Signing time: Mon 25 May 2026 06:49:03 +0000
ROA not before: Mon 25 May 2026 06:44:03 +0000
ROA not after: Mon 24 May 2027 06:49:03 +0000
asID: 142975
IP address blocks: 240a:a145::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ca:93:d0:df:3d:a2:83:fd:26:e4:46:f0:ba:09:c8:ec:c6:56:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:03 2026 GMT
Not After : May 24 06:49:03 2027 GMT
Subject: CN=4FC77029AFCC38F37995592013D7C6770C6F4CC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:d8:de:06:2b:16:b9:03:bb:fa:e2:a9:11:
26:e0:4f:04:eb:02:26:bc:6c:d1:ed:56:09:a9:ea:
9b:bc:16:79:2b:66:68:6c:d2:12:49:bf:e4:a3:86:
67:0c:35:4d:e7:8d:9d:1c:8d:d6:28:25:92:98:a5:
f5:8e:64:0a:9c:08:7c:3d:e2:44:2d:ca:51:1d:18:
83:8c:5e:86:cc:d7:c4:d8:b5:90:b4:7b:b8:8e:e5:
a9:00:9c:53:4d:90:20:aa:62:3c:63:d5:b4:e4:c6:
ea:79:f4:c3:55:90:0a:21:04:61:45:5a:f5:b1:fd:
d2:99:c3:99:a7:cd:d4:7d:8c:b7:8a:ed:7f:4a:63:
1d:a7:ab:1c:57:8c:f4:9c:16:e6:3a:1c:aa:3d:ae:
ac:4d:18:9d:da:27:7d:93:47:67:fc:16:3a:11:87:
14:5f:45:36:80:f7:3c:00:43:cd:70:00:c5:1f:8b:
d9:e4:b3:be:3c:0d:7f:f7:d3:82:ea:2e:6e:09:0d:
d4:81:7d:9a:11:6f:c4:4d:e4:55:4f:df:fc:f0:61:
32:c1:ea:80:16:13:b7:b9:b7:50:f4:81:2c:d3:09:
6c:86:c9:95:3d:c2:6a:2d:46:09:d8:13:68:52:9c:
13:34:b0:0d:78:be:90:04:ef:49:17:38:81:95:a6:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C7:70:29:AF:CC:38:F3:79:95:59:20:13:D7:C6:77:0C:6F:4C:C1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142975.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a145::/32
Signature Algorithm: sha256WithRSAEncryption
58:19:63:25:0a:a6:e9:14:8e:ca:e5:40:4b:b7:03:95:ac:cd:
23:0e:d3:84:fa:6f:26:fb:77:2a:df:c1:16:99:89:7a:16:9e:
73:1c:89:94:83:5c:c1:ec:c5:54:42:eb:ae:7f:a9:57:ae:61:
c6:59:2d:8e:02:bd:c2:3d:33:d2:23:bc:3e:80:28:ee:d4:b8:
af:b7:a8:e0:7c:ba:f3:90:fe:f3:cd:71:7b:be:d6:f3:ce:09:
9b:3b:86:4d:f0:42:28:96:5d:35:a2:35:3b:15:8e:e0:d2:cb:
46:e9:ed:a5:52:8a:86:cd:73:46:59:3e:1a:b3:7a:81:79:7a:
e7:35:1e:a4:98:23:a2:db:2f:ed:c1:55:3c:d0:5f:99:b1:c8:
f4:71:e4:c2:24:8c:8f:28:a2:4c:1d:64:7f:6c:21:f3:e2:54:
28:26:45:1a:c8:c2:84:ae:f3:a7:26:49:0e:95:8e:ae:3c:b1:
2e:7f:ce:2c:c9:83:bf:4f:bc:10:58:75:b6:ea:9e:e6:e7:53:
6f:a8:2d:2f:7a:a9:82:14:f4:fc:de:13:33:be:12:d2:8f:2a:
d8:08:fa:29:32:cb:16:18:ee:bf:5c:2b:64:4b:29:63:5c:23:
fe:82:21:02:e7:d6:32:bb:2d:1a:df:5f:85:cb:13:0f:5e:29:
c4:67:6d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:50 2026 by rpki-client