Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142650.roa
File: AS142650.roa (raw, json)
Hash identifier: SU08fC/4HugWavJ0qMncU2kfhPLG5Pf0TFKRUi48fwY=
Subject key identifier: 3D:52:4A:A0:46:1E:DE:9C:60:88:64:3C:BC:CB:33:E3:7B:BC:5E:A4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 238205AF47AE10CAFF3B34C6844D9C524690BEBE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142650.roa
Signing time: Fri 22 May 2026 04:08:12 +0000
ROA not before: Fri 22 May 2026 04:03:12 +0000
ROA not after: Fri 21 May 2027 04:08:12 +0000
asID: 142650
IP address blocks: 240a:a000::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:82:05:af:47:ae:10:ca:ff:3b:34:c6:84:4d:9c:52:46:90:be:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:12 2026 GMT
Not After : May 21 04:08:12 2027 GMT
Subject: CN=3D524AA0461EDE9C6088643CBCCB33E37BBC5EA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:45:ec:61:95:88:5a:f6:ed:f7:93:34:53:
24:3b:2c:28:89:a6:3d:5e:fa:4d:bc:2d:ac:2e:50:
41:e6:4b:90:19:55:59:d0:8e:63:4c:c5:2d:2a:e7:
1e:6a:28:a3:6e:40:c9:e3:72:c9:2b:d3:83:21:15:
d9:13:55:72:dd:45:4d:56:1d:f2:6c:27:77:6f:60:
2c:73:43:89:fc:a4:d2:89:8a:e8:d4:77:ce:39:09:
55:8c:00:47:40:97:7d:89:55:85:e6:76:18:1f:13:
70:39:6a:f0:78:e4:8b:a3:38:8c:8c:2a:0c:3d:29:
42:27:bc:a3:8c:cf:22:7d:5c:82:3a:f9:ea:7c:0b:
96:65:00:1b:4c:ed:1d:f3:cd:96:b0:4d:9f:e0:cb:
0a:33:a6:c2:5c:79:1d:d8:d3:74:89:06:19:1e:c4:
80:d7:0a:7f:f7:0d:54:b4:31:e6:af:3c:a6:c3:71:
81:10:6f:6a:b4:62:e5:9f:19:24:d2:a1:52:ab:b2:
36:2a:41:79:64:26:e7:8f:17:ac:5a:24:b5:76:ea:
0d:e6:86:b7:f8:11:95:9d:dc:86:cc:a3:68:69:0b:
8a:25:f3:42:95:69:63:62:a8:84:b0:96:5f:0d:cd:
b4:44:7f:8e:95:b8:4a:cc:6b:26:69:30:cc:24:47:
69:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:4A:A0:46:1E:DE:9C:60:88:64:3C:BC:CB:33:E3:7B:BC:5E:A4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a000::/32
Signature Algorithm: sha256WithRSAEncryption
72:fc:2d:cf:9e:c5:18:f5:02:f8:0b:1e:f8:4d:03:11:e5:f1:
77:15:98:89:89:5c:4e:59:d9:14:7c:6f:12:29:76:9e:fc:73:
92:00:53:ea:de:65:59:ae:3a:b8:54:7c:ca:be:ba:f6:a1:97:
05:8b:54:df:1e:47:d1:c3:d0:85:5a:65:e9:05:40:66:d6:ad:
91:cf:44:fd:80:c2:f4:12:06:ee:4d:6d:0c:1a:28:b2:b6:9f:
88:ed:99:18:76:c7:44:ae:0a:78:a0:be:66:05:ed:f9:88:e4:
16:f9:b3:35:99:d8:27:8b:f8:a2:1c:07:04:55:08:c1:66:fb:
04:0e:27:88:dd:37:1e:7b:52:d2:f4:dc:f7:c5:5e:69:ef:e5:
fe:86:d9:54:b3:72:4b:9c:11:14:76:c0:78:fa:0e:74:4a:28:
ff:0b:4f:64:f1:c6:fc:e9:40:06:71:d2:da:9d:8a:8d:eb:71:
9d:8c:dd:d2:37:4b:af:35:7d:91:7a:e6:f8:39:14:71:b9:37:
71:06:1c:6d:36:f1:46:8f:da:a5:cc:80:d5:4d:a1:60:05:7a:
7d:8f:c3:1a:6f:ca:5c:8c:6f:98:41:d8:f7:de:47:e9:ec:22:
66:fd:37:4c:02:23:d7:27:65:f3:bb:f6:be:2c:eb:0b:e4:88:
1e:d8:5c:34
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUI4IFr0euEMr/OzTGhE2cUkaQvr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMTJaFw0yNzA1MjEwNDA4MTJaMDMxMTAvBgNV
BAMTKDNENTI0QUEwNDYxRURFOUM2MDg4NjQzQ0JDQ0IzM0UzN0JCQzVFQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClQEXsYZWIWvbt95M0UyQ7LCiJ
pj1e+k28LawuUEHmS5AZVVnQjmNMxS0q5x5qKKNuQMnjcskr04MhFdkTVXLdRU1W
HfJsJ3dvYCxzQ4n8pNKJiujUd845CVWMAEdAl32JVYXmdhgfE3A5avB45IujOIyM
Kgw9KUInvKOMzyJ9XII6+ep8C5ZlABtM7R3zzZawTZ/gywozpsJceR3Y03SJBhke
xIDXCn/3DVS0MeavPKbDcYEQb2q0YuWfGSTSoVKrsjYqQXlkJuePF6xaJLV26g3m
hrf4EZWd3IbMo2hpC4ol80KVaWNiqISwll8NzbREf46VuErMayZpMMwkR2mZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUPVJKoEYe3pxgiGQ8vMsz43u8XqQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNjUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgADANBgkqhkiG9w0BAQsFAAOCAQEAcvwt
z57FGPUC+Ase+E0DEeXxdxWYiYlcTlnZFHxvEil2nvxzkgBT6t5lWa46uFR8yr66
9qGXBYtU3x5H0cPQhVpl6QVAZtatkc9E/YDC9BIG7k1tDBoosrafiO2ZGHbHRK4K
eKC+ZgXt+YjkFvmzNZnYJ4v4ohwHBFUIwWb7BA4niN03HntS0vTc98Veae/l/obZ
VLNyS5wRFHbAePoOdEoo/wtPZPHG/OlABnHS2p2KjetxnYzd0jdLrzV9kXrm+DkU
cbk3cQYcbTbxRo/apcyA1U2hYAV6fY/DGm/KXIxvmEHY995H6ewiZv03TAIj1ydl
87v2vizrC+SIHthcNA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:16 2026 by rpki-client