Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142657.roa
File: AS142657.roa (raw, json)
Hash identifier: YLe2E5I2DNZX8SoGmDtiHUYHujY65d4v0ibqrzuZ0Vg=
Subject key identifier: 4C:74:A5:41:86:A8:5E:70:B8:9A:80:09:90:30:51:B8:AD:1D:02:20
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A5D4502EC1C719C4E5E94D2D5E2AE3A75EF09E6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142657.roa
Signing time: Fri 22 May 2026 06:46:16 +0000
ROA not before: Fri 22 May 2026 06:41:16 +0000
ROA not after: Fri 21 May 2027 06:46:16 +0000
asID: 142657
IP address blocks: 240a:a007::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:5d:45:02:ec:1c:71:9c:4e:5e:94:d2:d5:e2:ae:3a:75:ef:09:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:16 2026 GMT
Not After : May 21 06:46:16 2027 GMT
Subject: CN=4C74A54186A85E70B89A8009903051B8AD1D0220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:5a:b9:d4:cd:98:73:7e:ea:e7:13:6e:36:
42:74:35:dd:88:18:d9:dc:65:f2:37:87:9a:8e:07:
79:15:da:7f:3c:15:8a:ad:ac:95:10:1a:f8:98:af:
17:e4:00:9d:a4:f3:ba:1e:c8:62:b0:e7:ca:89:f4:
ec:ee:8f:4e:b7:7a:74:ce:71:d7:f9:fa:20:f5:0e:
4f:39:c7:34:36:49:cc:da:3d:0b:44:0d:43:27:1a:
c3:db:cf:9d:2e:d1:a0:16:7e:43:a5:90:40:a2:7e:
42:f3:bc:38:55:cb:65:22:05:99:8f:b2:9a:ec:dd:
64:7e:2e:47:ac:d7:23:47:71:b7:f7:d8:d1:09:6b:
18:10:bf:a1:7e:46:5b:b5:29:52:9d:72:64:df:87:
49:32:11:27:88:09:3f:c4:0d:b3:33:17:6a:88:14:
1d:ae:88:75:17:6b:dc:ea:69:db:bf:76:90:85:b2:
eb:dd:14:9f:5e:17:1d:64:79:08:74:ca:0e:05:8f:
3b:e6:8d:43:13:44:5c:c8:8b:95:22:ba:ae:28:6d:
ee:e8:aa:57:82:01:25:e3:b3:bc:5e:75:5b:e6:e6:
39:c5:8c:01:05:12:15:54:ea:a0:fc:3b:6c:0c:e4:
8e:5a:14:de:16:b9:8c:58:22:e0:74:20:a8:29:98:
6b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:74:A5:41:86:A8:5E:70:B8:9A:80:09:90:30:51:B8:AD:1D:02:20
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142657.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a007::/32
Signature Algorithm: sha256WithRSAEncryption
37:fb:48:83:f1:d2:a8:37:d4:92:d6:aa:88:4e:d5:a8:9b:4c:
20:bb:23:97:72:3c:c7:5c:5f:70:5e:2c:91:b6:87:f1:df:e7:
f0:37:cb:a2:31:11:10:cb:0d:11:6b:89:86:51:57:45:28:97:
af:99:b6:44:ec:3a:15:66:31:c4:8f:e9:48:2b:4f:31:08:25:
58:62:22:85:51:f1:5d:57:41:60:99:3a:eb:3f:9d:cd:f4:12:
9a:29:c2:33:59:de:82:5c:89:36:0f:ac:c7:92:db:98:35:76:
1b:5c:84:5d:24:b4:54:9b:d9:c1:5f:b7:84:c3:39:e9:7f:38:
b8:d2:87:36:65:51:4e:c7:5f:65:43:38:8b:0b:88:b4:40:ec:
35:2f:77:81:c6:78:59:4d:29:2d:63:01:5a:5a:d0:05:74:18:
e0:f7:53:58:0a:81:dd:36:7c:80:bb:73:f6:1a:26:fa:21:c3:
63:79:56:7f:df:21:1c:8e:9d:6a:b2:68:93:67:d1:5d:af:a0:
73:75:19:8b:73:3f:b0:37:84:26:34:80:56:2c:28:e2:9f:55:
50:26:a4:64:ff:01:0e:2e:f1:81:2b:d4:67:8e:34:2b:5e:e9:
cf:c1:6e:91:8c:7d:3d:96:58:bb:44:9c:5c:81:6c:0c:00:2f:
ee:d1:6f:78
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUCl1FAuwccZxOXpTS1eKuOnXvCeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMTZaFw0yNzA1MjEwNjQ2MTZaMDMxMTAvBgNV
BAMTKDRDNzRBNTQxODZBODVFNzBCODlBODAwOTkwMzA1MUI4QUQxRDAyMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoLFq51M2Yc37q5xNuNkJ0Nd2I
GNncZfI3h5qOB3kV2n88FYqtrJUQGviYrxfkAJ2k87oeyGKw58qJ9Ozuj063enTO
cdf5+iD1Dk85xzQ2SczaPQtEDUMnGsPbz50u0aAWfkOlkECifkLzvDhVy2UiBZmP
sprs3WR+Lkes1yNHcbf32NEJaxgQv6F+Rlu1KVKdcmTfh0kyESeICT/EDbMzF2qI
FB2uiHUXa9zqadu/dpCFsuvdFJ9eFx1keQh0yg4FjzvmjUMTRFzIi5Uiuq4obe7o
qleCASXjs7xedVvm5jnFjAEFEhVU6qD8O2wM5I5aFN4WuYxYIuB0IKgpmGuzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUTHSlQYaoXnC4moAJkDBRuK0dAiAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNjU3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgBzANBgkqhkiG9w0BAQsFAAOCAQEAN/tI
g/HSqDfUktaqiE7VqJtMILsjl3I8x1xfcF4skbaH8d/n8DfLojEREMsNEWuJhlFX
RSiXr5m2ROw6FWYxxI/pSCtPMQglWGIihVHxXVdBYJk66z+dzfQSminCM1neglyJ
Ng+sx5LbmDV2G1yEXSS0VJvZwV+3hMM56X84uNKHNmVRTsdfZUM4iwuItEDsNS93
gcZ4WU0pLWMBWlrQBXQY4PdTWAqB3TZ8gLtz9hom+iHDY3lWf98hHI6darJok2fR
Xa+gc3UZi3M/sDeEJjSAViwo4p9VUCakZP8BDi7xgSvUZ440K17pz8FukYx9PZZY
u0ScXIFsDAAv7tFveA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:07 2026 by rpki-client