Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142683.roa
File: AS142683.roa (raw, json)
Hash identifier: BkGIoqwvig0pM/ZDAM2vSjq0fMyPf9uzFjz8T20elqE=
Subject key identifier: D2:CD:75:9E:29:D3:66:8B:C8:47:9B:8F:A4:2D:57:8C:54:53:D4:BD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 68CC2ACF4EE049A89E74CFDF12B761B25D0B8D64
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142683.roa
Signing time: Tue 26 May 2026 02:35:27 +0000
ROA not before: Tue 26 May 2026 02:30:27 +0000
ROA not after: Tue 25 May 2027 02:35:27 +0000
asID: 142683
IP address blocks: 240a:a021::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:cc:2a:cf:4e:e0:49:a8:9e:74:cf:df:12:b7:61:b2:5d:0b:8d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:27 2026 GMT
Not After : May 25 02:35:27 2027 GMT
Subject: CN=D2CD759E29D3668BC8479B8FA42D578C5453D4BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:2c:2f:41:7e:95:d0:ad:9b:61:d6:36:55:
5a:48:17:ed:64:2e:c5:08:49:8f:d1:13:62:a2:95:
6a:21:59:76:42:0c:df:55:af:44:f6:0f:2d:7c:c7:
77:9e:c6:26:46:31:37:5a:1a:66:6a:1a:d8:97:4b:
a7:fe:98:ab:91:95:d8:38:72:f8:a5:d7:d1:8a:7a:
db:d9:f4:ee:3d:35:27:d4:16:1d:b9:5f:c4:11:7c:
a5:3a:cc:e7:c5:35:b5:89:95:74:a5:64:84:63:82:
9c:de:64:b4:3c:65:39:50:7b:64:60:2c:67:14:b0:
ee:14:22:8d:c5:f7:8c:1f:95:9b:73:2e:56:23:80:
9b:0d:63:5d:3f:17:20:e2:ef:45:60:27:10:4f:70:
1d:86:d9:04:9d:28:3d:09:85:e9:22:23:a7:fd:7e:
f8:40:43:07:b9:e6:85:85:5b:d2:7c:88:ee:20:bd:
1e:a3:cf:8b:b5:e8:48:be:d8:b5:ff:bd:39:d7:a0:
e4:45:92:bc:fe:d5:25:4e:0b:e2:7c:de:15:b5:6e:
0f:84:49:06:cd:24:bb:ce:5c:f1:03:4e:ec:31:d9:
d9:b9:17:fe:1b:91:26:f9:c8:7e:8b:7c:2e:77:8b:
a3:08:29:c3:71:f4:35:0d:53:98:66:ab:59:37:d5:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CD:75:9E:29:D3:66:8B:C8:47:9B:8F:A4:2D:57:8C:54:53:D4:BD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a021::/32
Signature Algorithm: sha256WithRSAEncryption
a2:16:a9:5e:4b:57:e2:9c:5e:34:0f:bb:e6:47:28:7d:5f:d7:
dc:5e:0f:c2:42:8e:eb:61:57:a0:66:6f:27:3d:99:85:c6:98:
4e:a4:b0:79:7d:81:3a:f8:67:4e:e4:cd:69:e8:0f:32:6f:99:
d1:82:b4:d0:2d:21:95:11:f3:4a:d4:c6:f6:96:05:cc:aa:04:
9f:ef:f2:63:15:97:1f:04:e2:2f:1c:2e:c0:97:66:a5:4b:7c:
30:71:38:d7:cd:47:71:22:04:63:62:4c:f7:90:4f:40:e7:ce:
c3:92:51:e4:a6:99:db:fc:fc:e0:9f:ac:74:3b:37:f5:62:a3:
81:fc:e4:bf:7d:a6:ac:8b:78:02:82:ed:4a:95:52:91:41:f3:
c2:ce:36:2f:28:f6:fe:ef:99:54:c0:d8:33:eb:95:dd:48:0e:
5e:51:80:da:12:2e:f3:f3:2a:c6:fb:85:f5:ad:e5:c1:e2:f0:
22:4f:d8:be:b0:a3:fa:77:65:d8:3b:c5:68:f6:c3:76:d6:f8:
8b:15:4f:85:b9:7d:ca:32:cc:b4:51:5f:e7:44:91:c9:04:13:
13:e0:6a:37:82:77:63:9f:c2:42:88:43:00:a3:0d:74:6a:8e:
3d:98:bb:96:28:ef:61:88:f9:70:4d:f4:33:b2:1f:76:ee:7e:
87:6b:1a:65
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUaMwqz07gSaiedM/fErdhsl0LjWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMjdaFw0yNzA1MjUwMjM1MjdaMDMxMTAvBgNV
BAMTKEQyQ0Q3NTlFMjlEMzY2OEJDODQ3OUI4RkE0MkQ1NzhDNTQ1M0Q0QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy8SwvQX6V0K2bYdY2VVpIF+1k
LsUISY/RE2KilWohWXZCDN9Vr0T2Dy18x3eexiZGMTdaGmZqGtiXS6f+mKuRldg4
cvil19GKetvZ9O49NSfUFh25X8QRfKU6zOfFNbWJlXSlZIRjgpzeZLQ8ZTlQe2Rg
LGcUsO4UIo3F94wflZtzLlYjgJsNY10/FyDi70VgJxBPcB2G2QSdKD0JhekiI6f9
fvhAQwe55oWFW9J8iO4gvR6jz4u16Ei+2LX/vTnXoORFkrz+1SVOC+J83hW1bg+E
SQbNJLvOXPEDTuwx2dm5F/4bkSb5yH6LfC53i6MIKcNx9DUNU5hmq1k31fjZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU0s11ninTZovIR5uPpC1XjFRT1L0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNjgzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgITANBgkqhkiG9w0BAQsFAAOCAQEAohap
XktX4pxeNA+75kcofV/X3F4PwkKO62FXoGZvJz2ZhcaYTqSweX2BOvhnTuTNaegP
Mm+Z0YK00C0hlRHzStTG9pYFzKoEn+/yYxWXHwTiLxwuwJdmpUt8MHE4181HcSIE
Y2JM95BPQOfOw5JR5KaZ2/z84J+sdDs39WKjgfzkv32mrIt4AoLtSpVSkUHzws42
Lyj2/u+ZVMDYM+uV3UgOXlGA2hIu8/MqxvuF9a3lweLwIk/YvrCj+ndl2DvFaPbD
dtb4ixVPhbl9yjLMtFFf50SRyQQTE+BqN4J3Y5/CQohDAKMNdGqOPZi7lijvYYj5
cE30M7Ifdu5+h2saZQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:13 2026 by rpki-client