Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142738.roa
File: AS142738.roa (raw, json)
Hash identifier: ccIes+QcTtcLoB4mGj32h+x7Bhht0efVYvjG/d1IXHI=
Subject key identifier: 3C:5C:EE:CE:08:14:E6:F4:2C:FA:EC:29:31:2A:B5:CA:D6:CE:0B:A3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D9A762D3BCE6AD60EA8E7828CBCB9CDD1C12E3B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142738.roa
Signing time: Mon 25 May 2026 01:20:16 +0000
ROA not before: Mon 25 May 2026 01:15:16 +0000
ROA not after: Mon 24 May 2027 01:20:16 +0000
asID: 142738
IP address blocks: 240a:a058::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:9a:76:2d:3b:ce:6a:d6:0e:a8:e7:82:8c:bc:b9:cd:d1:c1:2e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:16 2026 GMT
Not After : May 24 01:20:16 2027 GMT
Subject: CN=3C5CEECE0814E6F42CFAEC29312AB5CAD6CE0BA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:3f:4c:54:87:13:f9:d9:2a:11:6e:c7:76:
b7:3f:61:1e:53:5b:93:b1:aa:70:9a:56:63:d3:9f:
91:6f:dd:06:6a:a1:31:09:1d:3b:e3:e7:6a:df:05:
be:c0:66:91:7c:f9:4d:c9:b8:cf:bb:a7:90:bd:16:
62:c6:e6:32:f8:34:2e:4d:da:c7:43:02:f3:db:2d:
01:a1:f1:db:b3:bd:a8:07:dd:77:22:19:78:61:aa:
8f:23:69:ff:20:59:2c:f6:ce:47:39:7e:93:8e:2a:
0a:60:a0:67:7d:ab:71:7e:85:ce:d5:33:8b:04:c2:
35:9c:68:26:c7:74:eb:b8:56:f0:0e:52:89:e1:bd:
10:0d:f0:7d:c9:0b:c9:29:21:43:15:17:9e:ba:a7:
72:9f:91:ff:1a:61:6d:b1:77:69:32:64:bf:98:9b:
68:25:d7:96:99:c0:78:01:61:71:11:03:73:b5:d2:
cc:db:b0:af:17:9f:69:81:fc:40:ae:91:76:b3:f6:
6d:eb:36:f5:12:51:fd:e4:29:aa:74:ae:af:9f:bd:
c0:c6:8a:1c:6f:80:3b:c5:59:2e:24:00:ae:3e:68:
38:ec:5b:93:26:9f:dd:b0:db:5d:55:69:dd:f5:f9:
14:32:f7:17:94:ce:69:43:c3:48:f6:2d:8f:79:6b:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5C:EE:CE:08:14:E6:F4:2C:FA:EC:29:31:2A:B5:CA:D6:CE:0B:A3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a058::/32
Signature Algorithm: sha256WithRSAEncryption
2a:e6:d9:f1:42:ce:04:93:00:4b:22:32:9d:a5:11:d9:80:ee:
4d:6c:62:f3:c0:88:6f:49:ea:2f:8d:f0:04:ec:36:02:b6:29:
aa:fa:ad:9f:35:3f:df:5b:d8:05:17:00:79:1a:a7:e2:4a:fe:
06:9a:ac:d1:b3:b9:60:31:7d:52:84:2a:20:4a:dc:50:be:28:
ce:18:31:6f:6f:65:d7:70:25:20:56:5d:3d:51:8a:a9:dd:68:
b9:67:fc:1d:8e:b5:72:06:34:1a:2c:ca:09:23:6c:6d:d2:c3:
2d:08:1e:0a:f1:2b:99:74:6b:a8:ca:b7:7f:24:01:34:79:71:
fd:d0:77:68:70:ff:fc:76:d3:af:3e:81:d2:93:76:76:d8:b8:
2f:bf:4f:d1:c4:06:66:40:76:17:32:f2:95:95:a9:37:af:cc:
62:41:2a:5a:30:63:fb:eb:85:cc:c6:8a:f4:20:ea:92:2c:ae:
3a:6c:07:55:57:3e:68:18:fb:aa:3c:82:3c:4e:fd:a6:27:4e:
ea:78:c8:03:a9:0c:b3:ee:34:2f:b6:b7:d6:ac:79:be:62:cd:
7c:e2:62:c9:aa:6f:b4:c6:ac:ef:53:57:42:01:17:02:95:19:
d7:e8:81:95:60:f9:8c:22:6f:15:ab:c3:1b:6b:78:97:c6:58:
fe:f2:76:a2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTZp2LTvOatYOqOeCjLy5zdHBLjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MTZaFw0yNzA1MjQwMTIwMTZaMDMxMTAvBgNV
BAMTKDNDNUNFRUNFMDgxNEU2RjQyQ0ZBRUMyOTMxMkFCNUNBRDZDRTBCQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfz9MVIcT+dkqEW7Hdrc/YR5T
W5OxqnCaVmPTn5Fv3QZqoTEJHTvj52rfBb7AZpF8+U3JuM+7p5C9FmLG5jL4NC5N
2sdDAvPbLQGh8duzvagH3XciGXhhqo8jaf8gWSz2zkc5fpOOKgpgoGd9q3F+hc7V
M4sEwjWcaCbHdOu4VvAOUonhvRAN8H3JC8kpIUMVF566p3Kfkf8aYW2xd2kyZL+Y
m2gl15aZwHgBYXERA3O10szbsK8Xn2mB/ECukXaz9m3rNvUSUf3kKap0rq+fvcDG
ihxvgDvFWS4kAK4+aDjsW5Mmn92w211Vad31+RQy9xeUzmlDw0j2LY95a6uRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUPFzuzggU5vQs+uwpMSq1ytbOC6MwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgWDANBgkqhkiG9w0BAQsFAAOCAQEAKubZ
8ULOBJMASyIynaUR2YDuTWxi88CIb0nqL43wBOw2ArYpqvqtnzU/31vYBRcAeRqn
4kr+Bpqs0bO5YDF9UoQqIErcUL4ozhgxb29l13AlIFZdPVGKqd1ouWf8HY61cgY0
GizKCSNsbdLDLQgeCvErmXRrqMq3fyQBNHlx/dB3aHD//HbTrz6B0pN2dti4L79P
0cQGZkB2FzLylZWpN6/MYkEqWjBj++uFzMaK9CDqkiyuOmwHVVc+aBj7qjyCPE79
pidO6njIA6kMs+40L7a31qx5vmLNfOJiyapvtMas71NXQgEXApUZ1+iBlWD5jCJv
FavDG2t4l8ZY/vJ2og==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:50 2026 by rpki-client