Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142673.roa
File: AS142673.roa (raw, json)
Hash identifier: IJqDgaZ4ZFrPPrUIFsJS1kTee3NiGSe6ODzO8AvZ83k=
Subject key identifier: AE:2B:25:5E:62:9D:E1:10:56:11:AB:6E:63:42:27:97:85:DC:CC:51
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2C7F59DAB39C9A707F0039C6CAD242F801AAFEA6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142673.roa
Signing time: Tue 26 May 2026 03:17:09 +0000
ROA not before: Tue 26 May 2026 03:12:09 +0000
ROA not after: Tue 25 May 2027 03:17:09 +0000
asID: 142673
IP address blocks: 240a:a017::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:7f:59:da:b3:9c:9a:70:7f:00:39:c6:ca:d2:42:f8:01:aa:fe:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:09 2026 GMT
Not After : May 25 03:17:09 2027 GMT
Subject: CN=AE2B255E629DE1105611AB6E6342279785DCCC51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:c2:9b:41:40:dc:12:70:cd:d3:83:c3:46:
b1:96:a9:88:51:cb:c0:e7:35:ee:72:1b:bb:50:d2:
66:d4:f3:f8:fe:38:ca:72:06:44:55:8a:52:ce:5b:
36:74:a1:58:d6:db:56:4d:ea:20:6b:26:ae:5d:19:
0c:45:95:e6:b5:a9:50:16:55:cf:3e:0e:ff:de:5a:
51:b0:b5:f6:c0:54:1c:e8:ad:5c:d4:bc:63:0f:90:
1a:1d:5f:0f:c0:09:01:60:b6:f7:19:4d:06:83:3a:
a4:00:ee:b4:60:37:31:77:96:40:89:36:91:e1:00:
01:76:be:dc:4e:d9:ba:95:ba:96:cc:6e:98:95:fc:
f9:05:83:9b:c8:ea:b5:79:31:26:32:a2:b6:05:f4:
a3:62:c9:8a:e3:c5:18:79:93:81:09:ed:96:a9:59:
b5:87:3e:aa:ae:57:06:0a:81:8b:8b:3e:be:a6:95:
69:10:22:8a:aa:c9:16:f0:bb:3d:03:9c:e5:46:b9:
98:f8:a6:8d:ac:72:c1:82:5f:b6:61:78:a6:20:0e:
ea:1a:33:bc:14:78:5c:0a:71:2b:86:28:51:35:8c:
79:db:85:c4:e0:91:11:ba:7a:3b:f8:cd:7b:9a:1a:
f8:d4:e3:44:55:68:ae:96:e6:0d:dc:99:c3:36:78:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2B:25:5E:62:9D:E1:10:56:11:AB:6E:63:42:27:97:85:DC:CC:51
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a017::/32
Signature Algorithm: sha256WithRSAEncryption
73:d3:ef:88:47:67:26:c4:09:fb:03:84:60:7b:fb:c4:c1:42:
ca:22:b2:a0:01:df:5f:ad:ef:ac:31:f6:aa:3d:aa:ba:56:00:
09:cf:6c:8f:89:1d:28:ee:40:4c:95:83:0f:53:c6:0a:80:b1:
03:c0:49:e6:78:27:aa:6f:ab:d8:39:84:23:dd:a7:27:20:32:
63:e2:5c:cd:49:24:2a:56:ae:60:62:60:a6:a6:2e:fd:a4:9b:
08:9b:05:13:ec:9c:9b:c3:d5:a9:68:67:a7:d2:3c:6b:d0:3f:
6e:57:5c:06:e4:6d:02:26:ac:fa:d5:ef:25:ca:35:55:2d:9e:
71:ce:80:47:ad:82:d9:2a:e4:2a:e3:7c:e3:27:0e:63:b5:88:
28:c4:9c:0d:30:44:12:74:47:f9:50:df:7e:0d:a9:1a:f4:ed:
76:34:80:cd:14:e7:2b:b4:67:01:0e:0e:a6:96:08:23:21:2a:
07:a6:41:a7:34:df:81:a7:c2:77:c4:de:dd:0e:e7:1c:78:87:
21:22:e5:b0:5d:0a:29:0f:a6:66:90:30:41:36:ae:5d:c3:a4:
ab:20:f9:69:6a:e3:a4:69:ac:83:8f:6f:e2:d4:1b:a7:57:83:
92:2b:89:4d:80:71:4a:ce:b2:06:ee:10:b1:5a:6d:08:32:e0:
b6:1a:47:83
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULH9Z2rOcmnB/ADnGytJC+AGq/qYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMDlaFw0yNzA1MjUwMzE3MDlaMDMxMTAvBgNV
BAMTKEFFMkIyNTVFNjI5REUxMTA1NjExQUI2RTYzNDIyNzk3ODVEQ0NDNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5TsKbQUDcEnDN04PDRrGWqYhR
y8DnNe5yG7tQ0mbU8/j+OMpyBkRVilLOWzZ0oVjW21ZN6iBrJq5dGQxFlea1qVAW
Vc8+Dv/eWlGwtfbAVBzorVzUvGMPkBodXw/ACQFgtvcZTQaDOqQA7rRgNzF3lkCJ
NpHhAAF2vtxO2bqVupbMbpiV/PkFg5vI6rV5MSYyorYF9KNiyYrjxRh5k4EJ7Zap
WbWHPqquVwYKgYuLPr6mlWkQIoqqyRbwuz0DnOVGuZj4po2scsGCX7ZheKYgDuoa
M7wUeFwKcSuGKFE1jHnbhcTgkRG6ejv4zXuaGvjU40RVaK6W5g3cmcM2eDL1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUrislXmKd4RBWEatuY0Inl4XczFEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNjczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgFzANBgkqhkiG9w0BAQsFAAOCAQEAc9Pv
iEdnJsQJ+wOEYHv7xMFCyiKyoAHfX63vrDH2qj2qulYACc9sj4kdKO5ATJWDD1PG
CoCxA8BJ5ngnqm+r2DmEI92nJyAyY+JczUkkKlauYGJgpqYu/aSbCJsFE+ycm8PV
qWhnp9I8a9A/bldcBuRtAias+tXvJco1VS2ecc6AR62C2SrkKuN84ycOY7WIKMSc
DTBEEnRH+VDffg2pGvTtdjSAzRTnK7RnAQ4OppYIIyEqB6ZBpzTfgafCd8Te3Q7n
HHiHISLlsF0KKQ+mZpAwQTauXcOkqyD5aWrjpGmsg49v4tQbp1eDkiuJTYBxSs6y
Bu4QsVptCDLgthpHgw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:52 2026 by rpki-client