Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142668.roa
File: AS142668.roa (raw, json)
Hash identifier: Y7nMq2v1hfMCohXi8EtDhwy+p+c6pTG2Y2NSjOyusM0=
Subject key identifier: 3A:D6:7B:15:73:A9:74:A0:2C:1A:E2:BB:99:CA:0E:80:B5:BC:BB:C8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1561C554282A55712E35545D3A40F08251D04EF5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142668.roa
Signing time: Fri 22 May 2026 06:58:37 +0000
ROA not before: Fri 22 May 2026 06:53:37 +0000
ROA not after: Fri 21 May 2027 06:58:37 +0000
asID: 142668
IP address blocks: 240a:a012::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:61:c5:54:28:2a:55:71:2e:35:54:5d:3a:40:f0:82:51:d0:4e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:37 2026 GMT
Not After : May 21 06:58:37 2027 GMT
Subject: CN=3AD67B1573A974A02C1AE2BB99CA0E80B5BCBBC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:11:6e:fd:66:13:df:8c:18:18:63:b2:96:
10:44:5d:e9:62:f8:5a:8e:34:8f:28:92:78:1d:8d:
ca:fa:9c:50:2e:cc:23:7a:12:d2:cd:a7:91:c0:9f:
7e:c8:f0:5b:6d:ef:9d:5f:24:06:0c:ad:a5:3e:9e:
69:2c:e8:b9:1d:8c:44:ed:9a:e0:0a:d0:2f:dc:53:
81:82:98:af:e3:e8:1b:5e:5f:00:03:8d:dd:07:e6:
3b:aa:8e:b4:11:17:bf:4f:19:a3:01:a5:72:18:6f:
36:c6:d6:2c:a5:1d:98:f1:11:a6:af:c1:e3:23:d5:
ed:0b:bc:31:e1:60:29:d8:ba:74:be:57:52:7a:1b:
46:b7:58:53:a7:4b:9c:bb:75:a5:49:c6:30:06:26:
8f:59:25:88:3f:dc:2e:d9:9f:61:e1:de:0b:20:bc:
c1:af:af:b5:51:a2:2f:7d:dc:aa:33:0f:a2:04:16:
82:13:88:bb:dc:32:1f:98:f3:60:28:8e:49:be:5f:
9c:be:13:9f:2f:72:49:da:18:4a:16:a7:b7:74:c0:
95:f0:7a:37:af:1f:c7:2f:05:f7:6d:21:19:c3:f0:
8b:5f:24:02:c0:c1:aa:d9:d0:32:89:31:ea:0c:9f:
6a:68:1d:a9:28:a8:d6:56:ae:fd:06:11:90:b0:ad:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D6:7B:15:73:A9:74:A0:2C:1A:E2:BB:99:CA:0E:80:B5:BC:BB:C8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142668.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a012::/32
Signature Algorithm: sha256WithRSAEncryption
44:ee:e0:79:61:74:6f:e5:7c:e7:d8:1e:5c:d7:0e:09:a1:2d:
83:fc:84:f3:99:e0:45:c2:8d:54:f8:4e:53:ad:0a:d4:bf:b8:
c3:c6:0f:b2:30:19:9e:e7:88:8c:c6:fb:0f:f7:bc:f0:11:65:
ce:9f:da:0f:ba:8c:b2:9a:6c:68:9f:61:21:fd:93:79:28:6b:
83:d6:c0:3c:87:7d:38:43:07:d2:01:5e:f4:5f:b4:a2:7a:7c:
18:f0:f5:05:2a:81:b0:15:c4:a3:16:8b:c0:a0:bb:86:3a:fe:
8e:44:06:45:44:70:80:fc:89:37:a3:b0:7d:24:11:0f:e8:a3:
df:77:60:2e:d6:64:1f:84:34:2a:b6:17:39:59:2e:1a:21:50:
17:04:3b:43:13:8e:44:fa:c9:94:a3:37:33:38:aa:24:f6:da:
6a:0b:e4:c1:e6:cb:bc:c8:e5:1d:5a:6b:9d:97:89:a3:4f:e5:
ae:b4:f0:6c:34:fe:3a:a4:fb:9f:5f:6c:16:ba:79:56:d3:e1:
44:bd:fd:65:86:08:a0:e8:79:c7:ad:1d:6b:7e:34:c4:9c:c4:
70:ac:24:4e:c7:f9:d5:2f:db:b4:a1:9c:25:ae:19:3f:f8:ad:
8c:2f:98:ee:ea:8a:04:fe:e1:23:96:97:7d:b7:fd:08:b5:05:
91:df:15:a1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFWHFVCgqVXEuNVRdOkDwglHQTvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzMzdaFw0yNzA1MjEwNjU4MzdaMDMxMTAvBgNV
BAMTKDNBRDY3QjE1NzNBOTc0QTAyQzFBRTJCQjk5Q0EwRTgwQjVCQ0JCQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RxFu/WYT34wYGGOylhBEXeli
+FqONI8okngdjcr6nFAuzCN6EtLNp5HAn37I8Ftt751fJAYMraU+nmks6LkdjETt
muAK0C/cU4GCmK/j6BteXwADjd0H5juqjrQRF79PGaMBpXIYbzbG1iylHZjxEaav
weMj1e0LvDHhYCnYunS+V1J6G0a3WFOnS5y7daVJxjAGJo9ZJYg/3C7Zn2Hh3gsg
vMGvr7VRoi993KozD6IEFoITiLvcMh+Y82Aojkm+X5y+E58vcknaGEoWp7d0wJXw
ejevH8cvBfdtIRnD8ItfJALAwarZ0DKJMeoMn2poHakoqNZWrv0GEZCwrV4vAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOtZ7FXOpdKAsGuK7mcoOgLW8u8gwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNjY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgEjANBgkqhkiG9w0BAQsFAAOCAQEARO7g
eWF0b+V859geXNcOCaEtg/yE85ngRcKNVPhOU60K1L+4w8YPsjAZnueIjMb7D/e8
8BFlzp/aD7qMsppsaJ9hIf2TeShrg9bAPId9OEMH0gFe9F+0onp8GPD1BSqBsBXE
oxaLwKC7hjr+jkQGRURwgPyJN6OwfSQRD+ij33dgLtZkH4Q0KrYXOVkuGiFQFwQ7
QxOORPrJlKM3MziqJPbaagvkwebLvMjlHVprnZeJo0/lrrTwbDT+OqT7n19sFrp5
VtPhRL39ZYYIoOh5x60da340xJzEcKwkTsf51S/btKGcJa4ZP/itjC+Y7uqKBP7h
I5aXfbf9CLUFkd8VoQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:41 2026 by rpki-client