Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142988.roa
File: AS142988.roa (raw, json)
Hash identifier: hMX6EHY0F1LZYEBNpnbVWZAe5cpXcEyzzmWDc5PGhfE=
Subject key identifier: 53:0C:6E:4C:AE:B9:AF:72:E6:4D:68:B8:CA:D4:36:CC:EA:71:A4:B6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 13F195C9EAFFA1C89ACFE9F41B92FEFC157EFF9E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142988.roa
Signing time: Tue 26 May 2026 08:52:49 +0000
ROA not before: Tue 26 May 2026 08:47:49 +0000
ROA not after: Tue 25 May 2027 08:52:49 +0000
asID: 142988
IP address blocks: 240a:a152::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f1:95:c9:ea:ff:a1:c8:9a:cf:e9:f4:1b:92:fe:fc:15:7e:ff:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:49 2026 GMT
Not After : May 25 08:52:49 2027 GMT
Subject: CN=530C6E4CAEB9AF72E64D68B8CAD436CCEA71A4B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:c7:1d:63:c1:b6:fb:5d:1f:79:df:f9:0e:
5b:a2:d8:43:47:02:9f:d3:b1:ea:76:05:17:44:fa:
4d:ac:c6:05:fb:c5:7a:70:ec:aa:d8:e5:64:0d:61:
b5:6a:65:70:ff:6b:97:4a:b5:94:d3:d2:0a:a9:06:
8d:9b:01:cb:6b:07:67:64:60:22:5a:27:46:0d:6c:
f3:84:37:1e:e1:0b:0c:23:83:82:80:c1:9f:62:82:
2d:e9:ac:87:ac:af:db:e5:47:03:ff:b0:34:3e:08:
cf:17:3d:13:1a:f9:06:4e:c8:b1:e0:0e:7e:c9:78:
de:e2:b3:e0:e4:28:ee:00:30:f6:0b:75:73:98:12:
8c:df:03:c0:e5:3d:cb:49:44:9f:26:da:10:94:b1:
7f:bf:a0:7f:51:87:2b:8f:be:4b:99:89:c9:36:a4:
a2:9f:e1:42:e1:ef:3c:3a:05:2e:9d:7d:c8:04:67:
30:34:2b:d2:45:ba:3b:56:8e:0a:58:88:d7:78:9a:
09:b6:91:74:fb:e6:b2:88:e0:ef:35:9d:18:af:53:
9e:c7:97:6c:cf:6c:5e:76:60:32:5b:b3:ba:06:fa:
9c:4e:75:ab:a0:cd:0b:09:c9:1c:fd:7b:a9:26:cc:
42:e2:18:f0:30:10:0a:c6:33:22:f9:a0:7a:ee:e0:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0C:6E:4C:AE:B9:AF:72:E6:4D:68:B8:CA:D4:36:CC:EA:71:A4:B6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142988.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a152::/32
Signature Algorithm: sha256WithRSAEncryption
66:8c:89:9b:d1:bd:14:89:07:5c:77:ff:1a:89:31:d5:70:f7:
27:aa:c4:93:60:fd:86:36:ee:b7:7f:43:2c:31:02:51:29:6b:
12:ad:ea:e0:c2:ff:a8:db:ba:73:32:9f:ec:2e:2e:e9:50:20:
86:69:b7:5a:bc:08:25:21:1d:e1:68:2e:c1:d5:0c:4e:70:b1:
20:a5:25:60:09:1e:a2:51:5b:52:29:be:c9:2f:d1:9f:d9:6c:
39:23:91:2a:3a:d6:64:53:08:d8:34:97:45:f5:2c:c3:65:29:
01:cf:51:29:2d:dd:e6:e4:70:9e:ff:68:39:6f:b0:e2:72:2c:
24:ab:6e:55:96:b0:96:93:22:16:4d:9c:31:f1:cf:c3:87:df:
ed:b4:a1:69:77:4a:a0:b1:ad:7a:fb:5b:99:a4:5f:11:74:37:
f9:6c:27:0b:45:12:38:6f:5d:43:f3:37:37:1a:04:bd:9b:df:
56:f8:7e:00:0c:98:bf:8e:ea:40:99:9b:4e:2b:fa:dc:0e:df:
6c:e5:bf:66:6d:85:d3:d5:d8:d1:a4:9c:08:4b:f3:76:06:fc:
74:54:7b:ac:01:61:16:33:94:22:ab:85:37:21:c0:f8:5d:0f:
0a:74:10:8e:ed:8e:1e:96:e3:95:26:16:37:a5:5a:f6:c7:f3:
c4:50:70:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:05 2026 by rpki-client