Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142702.roa
File: AS142702.roa (raw, json)
Hash identifier: 4ElePzhycFt2zdPVjLuVAr2KQvUySlU/lrFf/IUd5Lw=
Subject key identifier: 3A:41:31:21:06:CE:5C:95:37:8D:56:2B:0A:67:6E:71:DA:CC:D7:DD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 038078419A947947B6BFE05D8EBBD9754AAA8803
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142702.roa
Signing time: Fri 22 May 2026 06:58:30 +0000
ROA not before: Fri 22 May 2026 06:53:30 +0000
ROA not after: Fri 21 May 2027 06:58:30 +0000
asID: 142702
IP address blocks: 240a:a034::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:80:78:41:9a:94:79:47:b6:bf:e0:5d:8e:bb:d9:75:4a:aa:88:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:30 2026 GMT
Not After : May 21 06:58:30 2027 GMT
Subject: CN=3A41312106CE5C95378D562B0A676E71DACCD7DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cd:80:a4:54:a7:9c:dc:d8:c8:ba:3e:e1:44:
83:4b:81:05:64:7c:7c:ab:d3:6d:83:7b:74:e2:14:
7f:4c:b9:ae:b3:aa:b7:14:7c:07:1d:89:39:7e:ef:
67:cf:87:ce:07:31:26:f1:31:3f:9d:0b:8d:ce:36:
58:76:da:44:9b:18:d0:3e:5d:77:72:e5:16:6c:8b:
c6:70:87:18:02:1c:87:e0:0d:ad:93:a4:d7:cf:99:
a8:f1:ab:73:32:e0:99:51:00:de:ec:d9:81:de:55:
29:4c:93:73:0e:6b:03:83:e5:f5:8a:61:45:6f:6c:
e1:41:7d:f9:04:a9:df:75:ed:d3:b5:4d:03:99:1e:
5e:c4:06:fe:82:07:50:ca:0e:df:a4:97:f9:a5:b4:
ee:f9:92:2e:5b:00:8e:14:e0:8e:52:78:0c:cf:df:
bb:f1:44:d1:4d:a0:99:ed:37:ed:ea:b4:11:21:5e:
9d:aa:56:fa:1b:e0:05:d3:e4:67:32:b0:b3:1a:d1:
04:4f:5d:c6:39:ce:a8:51:30:06:0a:a1:f1:45:f5:
3c:29:a6:c6:66:7b:d6:1d:d5:d7:08:7e:a1:b6:d4:
c3:12:55:6a:58:b9:34:20:4b:f4:ef:c0:38:1d:fc:
de:99:e8:7e:7a:0b:75:b3:a2:67:94:b4:c6:47:2d:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:41:31:21:06:CE:5C:95:37:8D:56:2B:0A:67:6E:71:DA:CC:D7:DD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142702.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a034::/32
Signature Algorithm: sha256WithRSAEncryption
5d:00:f6:a6:b5:45:9e:2f:66:19:65:e5:98:f9:7c:34:2f:79:
c1:61:62:61:b5:d4:5f:f1:93:e9:c1:08:7d:00:ae:ef:a5:9a:
9e:e6:4d:a1:73:f2:2e:45:47:cf:bb:7f:96:e8:bd:fa:a6:76:
73:6b:38:f8:3c:45:b1:5b:e0:85:a3:66:90:87:3a:ce:05:4e:
51:0e:f9:01:bc:bf:3a:d3:ae:7c:27:02:6a:3a:5a:dd:94:f6:
4c:63:a1:5c:92:4a:d3:04:42:41:6d:a9:39:fe:8c:83:26:a4:
11:81:6c:c7:c8:50:4a:e7:20:71:94:c8:50:89:1c:31:92:80:
a7:6e:47:37:ef:e6:96:ed:52:08:ca:85:c2:db:b9:3b:c3:84:
65:a3:f1:b5:87:ce:64:e8:ab:f2:44:db:70:b3:d7:b3:88:77:
bf:d8:02:00:07:e2:93:07:17:ea:59:1e:2f:8f:b3:20:af:f9:
d2:e9:54:47:f6:67:b2:58:16:a7:e0:c2:5e:d3:52:83:ee:d2:
36:24:d8:dc:f5:c7:5b:a8:d9:47:f7:33:de:30:29:27:6b:c2:
cf:02:0c:e3:c3:79:07:93:3f:a7:f9:69:dd:e0:44:7b:59:23:
03:45:d9:6e:aa:b1:39:3a:a9:0a:51:47:46:ad:57:00:b5:92:
70:6c:ed:19
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUA4B4QZqUeUe2v+BdjrvZdUqqiAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzMzBaFw0yNzA1MjEwNjU4MzBaMDMxMTAvBgNV
BAMTKDNBNDEzMTIxMDZDRTVDOTUzNzhENTYyQjBBNjc2RTcxREFDQ0Q3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSzYCkVKec3NjIuj7hRINLgQVk
fHyr022De3TiFH9Mua6zqrcUfAcdiTl+72fPh84HMSbxMT+dC43ONlh22kSbGNA+
XXdy5RZsi8ZwhxgCHIfgDa2TpNfPmajxq3My4JlRAN7s2YHeVSlMk3MOawOD5fWK
YUVvbOFBffkEqd917dO1TQOZHl7EBv6CB1DKDt+kl/mltO75ki5bAI4U4I5SeAzP
37vxRNFNoJntN+3qtBEhXp2qVvob4AXT5GcysLMa0QRPXcY5zqhRMAYKofFF9Twp
psZme9Yd1dcIfqG21MMSVWpYuTQgS/TvwDgd/N6Z6H56C3WzomeUtMZHLb+fAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOkExIQbOXJU3jVYrCmducdrM190wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNzAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgNDANBgkqhkiG9w0BAQsFAAOCAQEAXQD2
prVFni9mGWXlmPl8NC95wWFiYbXUX/GT6cEIfQCu76WanuZNoXPyLkVHz7t/lui9
+qZ2c2s4+DxFsVvghaNmkIc6zgVOUQ75Aby/OtOufCcCajpa3ZT2TGOhXJJK0wRC
QW2pOf6MgyakEYFsx8hQSucgcZTIUIkcMZKAp25HN+/mlu1SCMqFwtu5O8OEZaPx
tYfOZOir8kTbcLPXs4h3v9gCAAfikwcX6lkeL4+zIK/50ulUR/ZnslgWp+DCXtNS
g+7SNiTY3PXHW6jZR/cz3jApJ2vCzwIM48N5B5M/p/lp3eBEe1kjA0XZbqqxOTqp
ClFHRq1XALWScGztGQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:30 2026 by rpki-client