Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142685.roa
File: AS142685.roa (raw, json)
Hash identifier: EQGyRPiMzblC3QsvJbWDQzDlN8xOyRjytNWwv8Ui3uM=
Subject key identifier: 68:09:10:F2:35:07:BB:F0:1F:18:B5:A1:6A:FF:7E:6B:04:58:F2:50
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 387A7086255DB999F29E8DDD19EDEF1CC5718616
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142685.roa
Signing time: Mon 25 May 2026 06:28:36 +0000
ROA not before: Mon 25 May 2026 06:23:36 +0000
ROA not after: Mon 24 May 2027 06:28:36 +0000
asID: 142685
IP address blocks: 240a:a023::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:7a:70:86:25:5d:b9:99:f2:9e:8d:dd:19:ed:ef:1c:c5:71:86:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:36 2026 GMT
Not After : May 24 06:28:36 2027 GMT
Subject: CN=680910F23507BBF01F18B5A16AFF7E6B0458F250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:6a:5c:5d:ce:a6:ee:67:00:b1:ef:fc:0d:
29:ef:6f:cf:7d:56:f1:c4:c5:4f:e9:8d:48:19:d7:
b8:af:f7:d3:23:01:a9:9d:f5:42:b8:da:1e:d6:e0:
72:fb:46:9d:c0:3a:aa:1b:bd:31:ca:14:ed:59:66:
ee:38:ba:88:10:53:b8:b4:53:20:6f:01:8d:53:ae:
b9:55:d4:02:3e:5f:89:89:13:5e:1f:b9:1f:59:8e:
26:89:92:ab:c8:41:7d:e5:23:91:8e:b1:72:61:e9:
6b:c9:f4:5c:6b:87:0a:71:96:2c:5b:11:8e:e3:cb:
63:99:40:00:f6:77:7c:0b:7d:ea:b1:0f:5a:ed:32:
80:4b:82:24:c1:09:4e:88:83:6c:96:d1:ec:95:e6:
b6:83:b0:96:91:e1:2f:e0:61:76:2f:ac:8c:a8:b5:
45:fe:2c:7f:93:4e:59:f5:dd:44:10:44:49:cf:72:
dd:c2:fe:51:10:f4:95:44:ff:0d:15:c4:a0:0d:72:
d6:d6:90:01:38:1d:34:a4:bd:93:98:bd:e6:a5:68:
01:53:78:d5:c0:fd:7e:56:2d:d8:3c:6d:01:c1:e7:
a4:b7:e8:9b:72:49:ac:44:d6:fd:1c:ae:09:ca:a0:
53:f1:77:89:26:2d:a0:e6:c0:67:ef:a8:8d:79:ca:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:09:10:F2:35:07:BB:F0:1F:18:B5:A1:6A:FF:7E:6B:04:58:F2:50
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142685.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a023::/32
Signature Algorithm: sha256WithRSAEncryption
11:5a:79:bc:05:62:c0:bb:12:d0:4d:d2:44:48:a1:40:33:85:
14:d5:d2:8d:d5:83:e6:d0:67:14:59:b4:20:65:71:ba:fb:52:
67:3b:8f:22:ed:18:4e:c2:c5:bc:ab:a0:a2:f7:78:ec:54:23:
79:88:16:d8:8b:5c:76:06:ab:3c:e8:4b:64:ab:61:e2:53:7e:
5c:53:e1:7e:17:bb:f1:be:1d:f7:fe:5e:49:67:8a:63:4e:78:
f4:2f:e9:7c:9e:65:02:7a:5e:dd:15:2b:bf:b0:fd:3f:0d:21:
ff:d3:02:9e:25:8e:8c:28:ec:d6:fd:64:75:d5:f6:4f:c9:1b:
41:de:84:f8:01:a3:ac:d5:ea:2e:70:53:5d:96:46:38:cf:6c:
cb:33:d9:5e:81:82:ec:21:fd:9d:8e:84:eb:4a:a8:d2:8c:de:
63:47:8a:b4:e6:87:c6:5d:ff:a3:86:38:b8:72:6b:70:e1:20:
1f:ce:f6:2d:e0:1f:35:b9:e6:d3:6e:6e:c6:31:29:0f:a6:6c:
0c:e7:f9:86:87:c6:93:d0:e2:e1:a8:8a:5d:fc:ab:1f:ed:22:
5c:d6:f7:43:4c:52:d9:95:fb:2e:a6:2a:59:79:90:bf:8a:a1:
ed:16:cf:94:8a:c4:1d:b4:9d:46:66:71:d5:14:50:f8:13:ed:
cf:84:10:96
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOHpwhiVduZnyno3dGe3vHMVxhhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMzZaFw0yNzA1MjQwNjI4MzZaMDMxMTAvBgNV
BAMTKDY4MDkxMEYyMzUwN0JCRjAxRjE4QjVBMTZBRkY3RTZCMDQ1OEYyNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPMWpcXc6m7mcAse/8DSnvb899
VvHExU/pjUgZ17iv99MjAamd9UK42h7W4HL7Rp3AOqobvTHKFO1ZZu44uogQU7i0
UyBvAY1TrrlV1AI+X4mJE14fuR9ZjiaJkqvIQX3lI5GOsXJh6WvJ9Fxrhwpxlixb
EY7jy2OZQAD2d3wLfeqxD1rtMoBLgiTBCU6Ig2yW0eyV5raDsJaR4S/gYXYvrIyo
tUX+LH+TTln13UQQREnPct3C/lEQ9JVE/w0VxKANctbWkAE4HTSkvZOYvealaAFT
eNXA/X5WLdg8bQHB56S36JtySaxE1v0crgnKoFPxd4kmLaDmwGfvqI15ysVRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUaAkQ8jUHu/AfGLWhav9+awRY8lAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNjg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgIzANBgkqhkiG9w0BAQsFAAOCAQEAEVp5
vAViwLsS0E3SREihQDOFFNXSjdWD5tBnFFm0IGVxuvtSZzuPIu0YTsLFvKugovd4
7FQjeYgW2ItcdgarPOhLZKth4lN+XFPhfhe78b4d9/5eSWeKY0549C/pfJ5lAnpe
3RUrv7D9Pw0h/9MCniWOjCjs1v1kddX2T8kbQd6E+AGjrNXqLnBTXZZGOM9syzPZ
XoGC7CH9nY6E60qo0ozeY0eKtOaHxl3/o4Y4uHJrcOEgH872LeAfNbnm025uxjEp
D6ZsDOf5hofGk9Di4aiKXfyrH+0iXNb3Q0xS2ZX7LqYqWXmQv4qh7RbPlIrEHbSd
RmZx1RRQ+BPtz4QQlg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:04 2026 by rpki-client