Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142976.roa
File: AS142976.roa (raw, json)
Hash identifier: 17N1mpB8KxeIp1GgTkI6+DWwa6yQW6k7kayKbFwiDmU=
Subject key identifier: 38:2C:27:F4:80:6F:61:22:E1:1C:E4:B2:48:F7:55:64:AE:F5:E1:5B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6907577C64696DCC4500F191DE20120BFF11B40A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142976.roa
Signing time: Tue 26 May 2026 02:35:25 +0000
ROA not before: Tue 26 May 2026 02:30:25 +0000
ROA not after: Tue 25 May 2027 02:35:25 +0000
asID: 142976
IP address blocks: 240a:a146::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:07:57:7c:64:69:6d:cc:45:00:f1:91:de:20:12:0b:ff:11:b4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:25 2026 GMT
Not After : May 25 02:35:25 2027 GMT
Subject: CN=382C27F4806F6122E11CE4B248F75564AEF5E15B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:93:02:ee:9f:a4:25:5e:6a:74:3e:1d:cd:
a7:56:c0:f3:50:98:cf:b6:c1:14:ee:18:2f:e6:86:
fd:4f:41:59:a7:ec:5e:92:f6:0f:3a:7b:ce:a3:92:
0b:ca:9e:d8:d1:eb:bd:e1:6f:f1:8e:eb:24:4f:3f:
d7:eb:51:79:2c:0c:4b:b5:9b:11:f5:3a:59:00:ed:
e8:c4:fe:ac:37:ac:62:64:aa:92:fa:55:13:ae:31:
b6:b2:96:bf:38:7f:af:12:8e:c4:60:11:1c:94:12:
ba:82:04:23:56:84:4d:86:f3:99:a7:42:df:88:45:
f3:0c:98:79:87:ca:c1:9f:a9:21:e1:46:cd:5d:a2:
50:33:85:bc:e7:40:8d:20:6f:6a:40:02:0c:4d:1e:
c9:50:94:11:4a:eb:ba:5f:b0:3f:92:65:0c:2f:69:
5b:b6:ec:2e:5b:f7:f5:75:4b:50:63:7d:f5:15:fe:
36:e3:0c:a2:8f:6b:45:74:4d:6d:e6:3a:9b:02:15:
2d:ef:ec:35:06:44:a9:e2:67:7d:b3:09:f8:5a:57:
14:1d:66:e7:7b:36:04:d6:fb:74:2b:23:b2:c7:99:
62:4e:df:a2:e1:40:40:31:54:ca:4d:e9:09:64:da:
d5:c7:3d:0e:b6:ea:d0:4c:b2:65:53:92:e5:a2:38:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2C:27:F4:80:6F:61:22:E1:1C:E4:B2:48:F7:55:64:AE:F5:E1:5B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142976.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a146::/32
Signature Algorithm: sha256WithRSAEncryption
36:d1:cd:ee:51:79:ff:cc:a8:6a:c2:e5:e2:09:0f:68:99:03:
e3:12:d8:8d:b5:36:03:4f:61:49:cf:c4:dc:5e:9b:6e:86:16:
cf:9e:bd:37:70:3e:3d:52:0f:24:09:06:9a:06:d5:62:5b:9a:
03:5a:fa:65:a2:e3:b5:67:ef:55:c1:8f:d9:2b:9b:4a:5e:02:
85:c5:97:c2:9f:0a:35:d8:ad:ff:f0:bd:85:a7:40:7a:4d:df:
50:05:74:45:a6:cc:76:b4:de:27:e7:5d:d0:bb:ad:de:08:c2:
18:11:3a:53:17:ca:9e:51:9c:12:cd:e7:38:e1:7d:ed:08:7a:
e1:03:6f:79:0f:b9:26:aa:ea:a2:9c:02:fc:f6:11:2f:48:ab:
d0:a6:68:ab:2c:5e:93:00:c1:50:5c:fc:3d:1f:9e:b5:d9:1f:
6b:10:03:50:00:18:5f:13:79:54:64:5f:b0:c5:ef:39:6f:12:
f4:74:fd:9d:76:98:70:ec:a9:8d:d8:2c:57:07:fe:b6:2f:9d:
82:d3:3c:88:12:a8:76:e7:dd:98:9a:2d:04:dc:d7:78:4f:b9:
b9:98:a8:7a:48:75:57:26:8a:05:b4:74:de:6a:b5:88:f0:8c:
3e:fa:04:af:dc:f3:8a:3a:37:bb:b6:3e:d9:f7:5a:20:35:d4:
b8:4f:99:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:12 2026 by rpki-client