Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142982.roa
File: AS142982.roa (raw, json)
Hash identifier: 9useSAjnqNcFhN98iEAekiO7DSrKwU9o/7Jid4tDNx8=
Subject key identifier: 44:30:A0:C3:09:B0:5F:4C:BF:93:CB:8A:F0:1A:5B:3A:99:99:83:FA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78961AE4580F4510B3361E9CA3EBDC774CF865FC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142982.roa
Signing time: Fri 22 May 2026 07:41:18 +0000
ROA not before: Fri 22 May 2026 07:36:18 +0000
ROA not after: Fri 21 May 2027 07:41:18 +0000
asID: 142982
IP address blocks: 240a:a14c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:96:1a:e4:58:0f:45:10:b3:36:1e:9c:a3:eb:dc:77:4c:f8:65:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:18 2026 GMT
Not After : May 21 07:41:18 2027 GMT
Subject: CN=4430A0C309B05F4CBF93CB8AF01A5B3A999983FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:57:20:6e:e7:75:1a:68:67:66:6d:ad:ba:b5:
5c:46:dc:ac:c1:d8:9e:75:7a:3e:07:94:87:4d:23:
b2:63:be:e6:7c:8b:7d:4c:68:b8:fe:49:ed:ae:cf:
ea:e7:f3:d1:a6:b7:50:a5:62:b8:f5:c7:09:fa:e6:
14:ab:31:e8:70:3f:d2:f5:ca:77:07:70:68:d9:a7:
3d:b3:5e:97:93:3f:d4:ce:18:ff:ca:de:b9:ea:6c:
05:9f:f6:05:8b:c1:c9:23:28:f2:80:71:06:7c:7c:
e3:7e:91:85:51:9b:87:1a:81:63:4d:50:dd:95:17:
4a:b1:88:7b:73:8a:c9:39:4b:ce:b2:e1:81:ec:d1:
47:0c:4e:c6:91:7d:8c:31:7f:e4:4b:dd:72:61:78:
e2:91:e4:ac:02:b5:16:3d:cb:63:37:11:fa:ab:5c:
51:c0:96:e6:da:8b:fa:ba:03:7c:52:21:08:12:bf:
e0:48:e5:c1:23:32:a2:d1:3b:ea:d5:e0:a9:2b:f3:
b9:61:5c:3c:a8:f6:7d:22:b5:7a:de:38:7b:91:43:
9d:a5:39:25:8b:75:af:cf:75:6f:55:da:29:7f:a2:
61:0b:ea:27:1a:8d:30:c5:62:62:d6:77:ef:38:7a:
fa:a3:48:5f:fc:e5:00:1e:ec:ae:cd:25:63:59:f2:
68:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:30:A0:C3:09:B0:5F:4C:BF:93:CB:8A:F0:1A:5B:3A:99:99:83:FA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a14c::/32
Signature Algorithm: sha256WithRSAEncryption
5d:62:3c:e7:b5:3b:78:da:f9:b4:f2:38:ca:48:2d:7b:e6:dd:
cd:cd:3e:84:8f:fe:26:64:1a:00:69:72:ba:a2:2c:11:c8:37:
6e:7e:92:2b:2b:be:cd:10:af:a6:c0:58:eb:2f:f2:5e:dc:d2:
0d:69:2a:48:42:0e:74:89:b8:43:31:21:41:28:6b:1e:c4:99:
23:20:9a:5f:7e:9c:a4:09:ac:8c:e7:2e:07:22:fe:02:ba:74:
b5:3e:c6:a6:fc:ac:12:17:96:7f:7a:85:74:9a:33:1b:d1:55:
5d:fe:79:32:66:12:f0:90:d9:81:83:2a:bd:58:e3:82:4c:b7:
d1:53:dc:33:6f:03:ee:2f:ea:2e:3f:e8:46:12:8c:1b:fb:cb:
f3:e4:25:e5:ec:27:ab:9b:18:82:6b:a4:62:d1:c4:b0:9f:d1:
d1:ce:16:4c:5a:09:76:c7:d5:6c:85:04:10:54:de:cd:e2:11:
9f:33:5c:bc:ed:b7:66:5e:1d:8e:0f:23:22:43:cb:36:22:e8:
bc:5e:1d:9a:60:3a:19:3a:31:64:b1:13:ce:dd:f8:7c:10:4e:
2c:f7:d0:f3:27:54:f8:3b:48:d3:26:83:cf:fd:23:e7:eb:f1:
e1:29:79:40:08:cc:36:9f:10:2a:3e:04:c2:97:e4:fa:16:14:
c6:c1:ee:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:36 2026 by rpki-client