Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142759.roa
File: AS142759.roa (raw, json)
Hash identifier: i9NFIBGkLiZUnc/0ZOKkYT1Res2XOEIiPc6tqRz/s6w=
Subject key identifier: 03:C0:F1:DD:B6:AF:01:93:E8:DC:E1:F2:B8:75:E3:9A:05:18:67:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 070AB93F390D80BD49FCDCE88C282265E8D556C1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142759.roa
Signing time: Mon 25 May 2026 02:22:22 +0000
ROA not before: Mon 25 May 2026 02:17:22 +0000
ROA not after: Mon 24 May 2027 02:22:22 +0000
asID: 142759
IP address blocks: 240a:a06d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0a:b9:3f:39:0d:80:bd:49:fc:dc:e8:8c:28:22:65:e8:d5:56:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:22 2026 GMT
Not After : May 24 02:22:22 2027 GMT
Subject: CN=03C0F1DDB6AF0193E8DCE1F2B875E39A0518678B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:2d:ac:14:b7:47:e2:1c:7b:df:10:bf:ee:
84:ae:42:e9:9a:2d:1d:0f:e2:ee:5c:33:fe:06:50:
e3:dc:71:3f:ca:ad:69:13:f3:af:f8:5b:7a:cf:08:
14:76:cd:74:df:c8:89:14:38:9a:d4:72:32:7d:99:
b7:eb:25:80:36:38:a8:28:f8:64:d3:c0:79:59:ca:
f0:78:e9:e6:e5:ed:99:86:6c:19:4b:87:2b:05:0c:
85:ce:86:60:cb:b0:31:65:01:07:63:f7:ed:96:9c:
e5:4d:a1:07:85:da:a4:b3:2e:15:c3:23:09:1f:7d:
6c:ab:6f:54:68:d8:86:89:f2:13:37:b9:f9:0d:34:
61:8d:45:2e:87:cd:4f:6a:66:28:3b:4a:25:b9:85:
78:5f:f4:8b:75:e3:83:3e:c8:ed:c7:f3:7f:bd:89:
d5:a8:e6:1c:f3:0f:21:fe:64:6e:f9:d6:6c:88:a7:
a3:9e:5e:fc:f7:53:c7:e9:53:c3:d1:3d:64:7c:13:
09:ac:dd:04:f6:1b:5d:6c:3b:7e:83:e9:67:e0:2c:
6f:66:16:fa:7b:96:62:b4:03:15:9f:42:f8:29:63:
59:f8:0b:1c:af:a6:b7:a7:e8:0b:9e:39:26:48:99:
72:3d:01:9c:f3:69:e2:0c:d7:9d:3a:50:c2:43:d9:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C0:F1:DD:B6:AF:01:93:E8:DC:E1:F2:B8:75:E3:9A:05:18:67:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142759.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a06d::/32
Signature Algorithm: sha256WithRSAEncryption
1a:28:2e:ea:20:ff:f4:2e:b8:c3:d1:c0:3c:ac:21:3e:fe:0c:
34:67:f7:c7:f2:81:40:55:9c:42:61:bc:38:8d:43:5a:4b:37:
59:f4:7d:b4:6e:1a:25:5a:d0:d9:c7:ec:a1:ac:2e:9e:d9:1f:
07:de:40:6a:77:62:5a:4d:d2:c6:37:dd:25:a1:79:ef:98:12:
4c:4d:b8:be:90:54:f3:04:39:82:16:bb:27:21:bc:ef:3c:e9:
3a:25:eb:b8:a6:cb:87:b6:b8:c3:e6:ad:19:6e:7f:21:d0:65:
0a:4a:0f:f3:6f:c3:39:12:a6:f4:e9:81:82:9f:84:8b:12:37:
93:88:6f:2c:7c:22:d2:12:c1:9c:d5:ff:ec:c0:c2:b0:30:60:
9a:92:0a:39:ab:f5:91:6b:89:22:55:bd:80:5d:71:3e:b4:e5:
b9:ef:41:e9:f5:da:45:3b:55:50:b2:e2:4b:bf:ce:f5:fc:76:
ed:06:26:71:d8:43:3f:fe:1b:ed:e6:2d:80:83:ad:a7:36:ec:
37:f6:b7:1e:4c:86:58:6a:e8:a0:15:54:28:4d:66:02:bb:a2:
92:2c:8c:31:6d:fe:2f:3e:fe:9b:fb:f1:82:ce:ba:0f:44:6d:
f0:d1:18:f6:e3:52:9f:19:a0:4a:c0:c0:4c:c7:3a:e2:e1:18:
33:b6:7f:bc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBwq5PzkNgL1J/NzojCgiZejVVsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MjJaFw0yNzA1MjQwMjIyMjJaMDMxMTAvBgNV
BAMTKDAzQzBGMUREQjZBRjAxOTNFOERDRTFGMkI4NzVFMzlBMDUxODY3OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGi2sFLdH4hx73xC/7oSuQuma
LR0P4u5cM/4GUOPccT/KrWkT86/4W3rPCBR2zXTfyIkUOJrUcjJ9mbfrJYA2OKgo
+GTTwHlZyvB46ebl7ZmGbBlLhysFDIXOhmDLsDFlAQdj9+2WnOVNoQeF2qSzLhXD
IwkffWyrb1Ro2IaJ8hM3ufkNNGGNRS6HzU9qZig7SiW5hXhf9It144M+yO3H83+9
idWo5hzzDyH+ZG751myIp6OeXvz3U8fpU8PRPWR8Ewms3QT2G11sO36D6WfgLG9m
Fvp7lmK0AxWfQvgpY1n4Cxyvpren6AueOSZImXI9AZzzaeIM1506UMJD2W0NAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUA8Dx3bavAZPo3OHyuHXjmgUYZ4swHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNzU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgbTANBgkqhkiG9w0BAQsFAAOCAQEAGigu
6iD/9C64w9HAPKwhPv4MNGf3x/KBQFWcQmG8OI1DWks3WfR9tG4aJVrQ2cfsoawu
ntkfB95AandiWk3SxjfdJaF575gSTE24vpBU8wQ5gha7JyG87zzpOiXruKbLh7a4
w+atGW5/IdBlCkoP82/DORKm9OmBgp+EixI3k4hvLHwi0hLBnNX/7MDCsDBgmpIK
Oav1kWuJIlW9gF1xPrTlue9B6fXaRTtVULLiS7/O9fx27QYmcdhDP/4b7eYtgIOt
pzbsN/a3HkyGWGrooBVUKE1mAruikiyMMW3+Lz7+m/vxgs66D0Rt8NEY9uNSnxmg
SsDATMc64uEYM7Z/vA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:22 2026 by rpki-client