Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142745.roa
File: AS142745.roa (raw, json)
Hash identifier: Uy14TpBU3U2eKFIocwryas/T7VA2E9D6sNC025GlEQY=
Subject key identifier: 28:5B:4D:5C:3A:86:99:C6:A3:23:37:D0:4F:58:AC:CB:FE:04:70:FA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7DA1117AE548FED607000D1D2F9F922FF2364DE3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142745.roa
Signing time: Mon 25 May 2026 01:51:05 +0000
ROA not before: Mon 25 May 2026 01:46:05 +0000
ROA not after: Mon 24 May 2027 01:51:05 +0000
asID: 142745
IP address blocks: 240a:a05f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a1:11:7a:e5:48:fe:d6:07:00:0d:1d:2f:9f:92:2f:f2:36:4d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:05 2026 GMT
Not After : May 24 01:51:05 2027 GMT
Subject: CN=285B4D5C3A8699C6A32337D04F58ACCBFE0470FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:22:55:cd:51:96:8f:9f:a2:4a:04:00:92:
37:3a:8f:95:96:91:62:a3:9a:3b:b8:a1:0a:d6:ac:
d0:b2:c6:9a:0f:25:53:42:a4:57:c6:8e:d3:0d:91:
76:88:1b:30:dd:d4:ec:0f:4e:49:ab:55:17:10:8a:
9c:b7:43:3f:72:b6:a0:3f:7a:37:b0:fe:78:c0:c3:
cc:d2:5e:56:a9:15:3a:31:b2:80:70:39:4b:bc:db:
a8:40:c8:fd:85:48:55:3f:b8:ae:97:49:33:ba:1d:
18:d5:1e:8a:07:bd:ad:be:30:5f:05:88:b5:b0:3c:
bc:ec:dd:cf:ab:54:0d:fe:5f:ae:75:92:55:16:29:
75:7a:cf:f5:8b:00:94:8a:58:91:14:42:36:d2:75:
81:a5:cc:15:97:5d:08:3f:ad:ff:5f:01:e2:4e:ce:
24:96:7a:3e:25:16:b9:d8:d3:11:81:b1:94:d8:be:
9b:2d:e6:b4:9f:13:33:91:9d:e6:9a:5b:d1:cd:53:
fd:5a:10:71:e1:48:9d:d9:0a:af:b8:0f:43:2c:8d:
95:f0:7b:df:7e:5b:18:15:6c:1c:cf:3a:5d:27:cb:
4b:29:87:d5:49:04:6f:0b:40:ed:e3:72:48:d0:55:
77:bd:ae:73:d3:6b:c0:92:6d:92:16:b8:19:64:06:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5B:4D:5C:3A:86:99:C6:A3:23:37:D0:4F:58:AC:CB:FE:04:70:FA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142745.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a05f::/32
Signature Algorithm: sha256WithRSAEncryption
92:97:29:8d:66:c7:6f:a5:57:f0:2d:ea:ae:ab:04:92:a7:47:
07:e6:d2:10:b0:0f:e0:78:66:30:8b:ef:d5:ac:88:ff:74:89:
1a:bd:f9:4b:bf:7e:b8:b8:19:e0:49:88:4a:3e:41:27:95:a4:
56:46:39:19:39:f3:39:f9:ba:55:1e:49:a4:56:5c:3c:fa:8b:
9e:29:75:d6:57:fb:d3:70:d0:7e:67:a5:26:0c:4c:2d:5b:49:
dd:10:ca:78:39:6f:e4:0c:33:4d:ec:bd:04:03:fd:59:42:4b:
bf:de:70:b2:8d:94:83:74:43:ba:93:bb:26:11:52:2d:4f:88:
75:79:0e:8b:f7:32:5b:a0:46:e2:7e:fc:c8:49:99:87:27:a3:
76:75:36:dd:66:b2:eb:b1:3c:d3:55:7a:92:7f:b0:c5:50:f7:
0c:1f:cf:62:e6:a7:4b:14:49:fb:78:26:ea:4a:fa:a5:3a:7f:
e1:8e:57:70:14:72:cd:bb:32:32:b8:a6:31:00:5b:40:7e:02:
4f:c8:15:12:d0:4f:09:b5:1f:31:f2:3f:45:ae:b8:da:57:c3:
2b:19:0a:e2:fe:33:e0:ac:1b:5f:4e:89:99:7c:46:0d:99:a3:
4b:9d:71:be:34:af:ad:5d:74:17:6f:5a:78:70:3e:2f:78:45:
1a:ed:ce:d0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfaEReuVI/tYHAA0dL5+SL/I2TeMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MDVaFw0yNzA1MjQwMTUxMDVaMDMxMTAvBgNV
BAMTKDI4NUI0RDVDM0E4Njk5QzZBMzIzMzdEMDRGNThBQ0NCRkUwNDcwRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwyJVzVGWj5+iSgQAkjc6j5WW
kWKjmju4oQrWrNCyxpoPJVNCpFfGjtMNkXaIGzDd1OwPTkmrVRcQipy3Qz9ytqA/
ejew/njAw8zSXlapFToxsoBwOUu826hAyP2FSFU/uK6XSTO6HRjVHooHva2+MF8F
iLWwPLzs3c+rVA3+X651klUWKXV6z/WLAJSKWJEUQjbSdYGlzBWXXQg/rf9fAeJO
ziSWej4lFrnY0xGBsZTYvpst5rSfEzORneaaW9HNU/1aEHHhSJ3ZCq+4D0MsjZXw
e99+WxgVbBzPOl0ny0sph9VJBG8LQO3jckjQVXe9rnPTa8CSbZIWuBlkBtT1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUKFtNXDqGmcajIzfQT1isy/4EcPowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNzQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgXzANBgkqhkiG9w0BAQsFAAOCAQEAkpcp
jWbHb6VX8C3qrqsEkqdHB+bSELAP4HhmMIvv1ayI/3SJGr35S79+uLgZ4EmISj5B
J5WkVkY5GTnzOfm6VR5JpFZcPPqLnil11lf703DQfmelJgxMLVtJ3RDKeDlv5Awz
Tey9BAP9WUJLv95wso2Ug3RDupO7JhFSLU+IdXkOi/cyW6BG4n78yEmZhyejdnU2
3Way67E801V6kn+wxVD3DB/PYuanSxRJ+3gm6kr6pTp/4Y5XcBRyzbsyMrimMQBb
QH4CT8gVEtBPCbUfMfI/Ra642lfDKxkK4v4z4KwbX06JmXxGDZmjS51xvjSvrV10
F29aeHA+L3hFGu3O0A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:49 2026 by rpki-client