Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142656.roa
File: AS142656.roa (raw, json)
Hash identifier: pOMvazarVfLkOL0PYXQhMrKV9Xjwwz/Lu8iUoAcX9Sc=
Subject key identifier: F2:D7:5F:70:E1:CD:61:9E:05:02:87:34:6C:4A:D5:A8:9A:A3:3F:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 56C597FD1BEE428E8E92F029E2B32BBAD34AC5C8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142656.roa
Signing time: Tue 26 May 2026 02:34:50 +0000
ROA not before: Tue 26 May 2026 02:29:50 +0000
ROA not after: Tue 25 May 2027 02:34:50 +0000
asID: 142656
IP address blocks: 240a:a006::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c5:97:fd:1b:ee:42:8e:8e:92:f0:29:e2:b3:2b:ba:d3:4a:c5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:50 2026 GMT
Not After : May 25 02:34:50 2027 GMT
Subject: CN=F2D75F70E1CD619E050287346C4AD5A89AA33F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:a1:81:fb:64:d5:b1:0d:bb:43:99:7b:c5:
c5:3c:d7:a3:2b:1f:d6:48:27:d7:38:4b:29:bc:79:
80:31:b7:56:40:2d:ed:97:90:47:cd:a4:e7:b7:70:
40:b8:72:de:93:40:fc:b5:bc:99:c2:8f:ef:7e:1c:
27:a0:52:d1:6a:c5:cd:27:c7:d5:3f:31:ba:fc:2f:
20:82:1c:a9:3d:33:ce:70:87:fe:62:ba:be:98:fc:
14:15:af:55:ae:aa:81:bc:07:02:ee:85:62:a3:9d:
83:15:33:24:5d:7b:7e:f3:08:b6:05:c8:35:85:d1:
d5:fb:26:70:2b:c3:7a:19:76:ad:ed:03:1f:ac:1a:
a3:0b:86:c5:95:21:9f:d4:47:45:27:a0:95:3c:74:
f1:e2:83:95:21:f4:47:82:83:73:ea:1e:61:bf:a6:
d6:8b:d6:87:84:a8:c4:00:47:45:ba:7f:0a:f6:3e:
5d:91:e5:d1:07:35:11:02:5b:c1:6b:46:9c:3a:16:
c3:74:30:76:4c:9e:85:ee:c9:32:90:f0:f7:47:f0:
19:61:c1:6b:66:31:e6:26:b9:34:56:68:86:0a:7f:
b5:61:52:a2:0e:31:a0:4d:e1:a8:f4:97:5d:22:81:
43:da:7e:4a:fa:34:63:0c:db:4a:e5:b3:e4:49:97:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D7:5F:70:E1:CD:61:9E:05:02:87:34:6C:4A:D5:A8:9A:A3:3F:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142656.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a006::/32
Signature Algorithm: sha256WithRSAEncryption
4d:32:20:5d:80:61:be:1f:e7:82:49:e9:a7:30:3c:03:5f:3c:
5f:ed:06:ac:e0:fe:1b:aa:67:4b:84:d6:b1:0e:48:26:3f:68:
6d:97:88:1e:99:f8:3d:85:ea:64:b2:91:e0:b9:28:53:df:58:
03:71:4c:20:0c:1d:bb:fa:83:6c:f7:51:ee:de:e2:47:8a:2c:
78:ef:91:3b:ba:0c:3f:19:08:0a:5a:61:bb:29:44:5a:46:4a:
51:28:25:1a:b0:2e:52:c3:48:fc:70:1d:8a:c3:47:17:3c:2a:
95:b1:7e:a4:60:dd:03:fe:88:83:2c:09:11:d1:48:a7:c0:6c:
c1:f9:f7:d9:4b:d7:a9:6e:28:47:da:8c:e1:0d:2f:db:0e:b3:
c3:d3:1b:21:55:96:78:c0:76:f2:83:12:d3:c8:32:6d:d9:76:
ef:26:49:1d:48:7d:a8:e0:44:ae:f2:df:3e:6d:50:a4:53:75:
e3:89:76:7e:e8:ff:26:8a:3b:84:53:07:37:66:ac:32:07:50:
2e:e6:8a:1f:d7:f1:95:5e:a9:71:3c:ae:d2:2b:89:4b:26:d9:
fb:fc:9a:50:e6:21:43:2e:a8:0c:57:35:67:72:1b:e1:58:51:
74:96:0b:66:2b:e3:b8:23:6a:13:b8:ab:2f:7f:5b:9e:db:ab:
cb:9e:04:fc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVsWX/RvuQo6OkvAp4rMrutNKxcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjI5NTBaFw0yNzA1MjUwMjM0NTBaMDMxMTAvBgNV
BAMTKEYyRDc1RjcwRTFDRDYxOUUwNTAyODczNDZDNEFENUE4OUFBMzNGMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdGaGB+2TVsQ27Q5l7xcU816Mr
H9ZIJ9c4Sym8eYAxt1ZALe2XkEfNpOe3cEC4ct6TQPy1vJnCj+9+HCegUtFqxc0n
x9U/Mbr8LyCCHKk9M85wh/5iur6Y/BQVr1WuqoG8BwLuhWKjnYMVMyRde37zCLYF
yDWF0dX7JnArw3oZdq3tAx+sGqMLhsWVIZ/UR0UnoJU8dPHig5Uh9EeCg3PqHmG/
ptaL1oeEqMQAR0W6fwr2Pl2R5dEHNRECW8FrRpw6FsN0MHZMnoXuyTKQ8PdH8Blh
wWtmMeYmuTRWaIYKf7VhUqIOMaBN4aj0l10igUPafkr6NGMM20rls+RJl3oDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU8tdfcOHNYZ4FAoc0bErVqJqjPxcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNjU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgBjANBgkqhkiG9w0BAQsFAAOCAQEATTIg
XYBhvh/ngknppzA8A188X+0GrOD+G6pnS4TWsQ5IJj9obZeIHpn4PYXqZLKR4Lko
U99YA3FMIAwdu/qDbPdR7t7iR4oseO+RO7oMPxkIClphuylEWkZKUSglGrAuUsNI
/HAdisNHFzwqlbF+pGDdA/6IgywJEdFIp8Bswfn32UvXqW4oR9qM4Q0v2w6zw9Mb
IVWWeMB28oMS08gybdl27yZJHUh9qOBErvLfPm1QpFN144l2fuj/Joo7hFMHN2as
MgdQLuaKH9fxlV6pcTyu0iuJSybZ+/yaUOYhQy6oDFc1Z3Ib4VhRdJYLZivjuCNq
E7irL39bntury54E/A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:16 2026 by rpki-client