Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142781.roa
File: AS142781.roa (raw, json)
Hash identifier: U5Owo/1O6codTM/ZUa5z+u+BCMhpB5aPkk9s8iD8bWo=
Subject key identifier: D6:47:12:74:20:13:95:9D:5D:04:77:23:81:B3:2E:95:B3:34:35:1A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 70BCF1E546F753635661CF24B2EC5EBD73245893
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142781.roa
Signing time: Tue 26 May 2026 03:16:40 +0000
ROA not before: Tue 26 May 2026 03:11:40 +0000
ROA not after: Tue 25 May 2027 03:16:40 +0000
asID: 142781
IP address blocks: 240a:a083::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:bc:f1:e5:46:f7:53:63:56:61:cf:24:b2:ec:5e:bd:73:24:58:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:40 2026 GMT
Not After : May 25 03:16:40 2027 GMT
Subject: CN=D64712742013959D5D04772381B32E95B334351A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:cf:cf:b4:30:bc:d9:8d:f9:de:9d:ed:00:
12:3f:05:df:b5:50:6f:93:61:be:af:6b:34:ba:4e:
e6:0b:92:ec:66:30:c4:e6:9e:0d:db:ec:b2:63:cd:
5d:75:36:fc:3a:5e:8b:62:d6:2d:58:af:c3:9f:cb:
54:ae:32:bc:c4:eb:cb:3a:cd:ca:2e:18:89:e1:67:
25:0d:b5:dd:af:ec:79:8f:08:06:2c:31:4a:63:8f:
66:5b:8f:c8:69:10:8b:9a:5a:06:39:de:2d:9b:90:
fd:cd:0b:41:46:6c:bd:3b:51:83:a2:45:bb:d0:e3:
52:f2:ad:37:d4:7e:5a:e8:cd:01:94:3c:c5:cc:85:
c7:f9:ed:3b:c5:60:ee:16:7b:c8:9c:34:e1:9b:f2:
49:c0:7d:bf:13:f9:f8:03:08:64:88:38:49:16:82:
aa:1a:04:1e:88:fe:4e:09:c5:68:ab:b4:bc:7b:2b:
c5:be:80:ca:46:4a:5c:52:9c:53:60:5a:ff:45:46:
4b:5b:ff:82:fa:02:fc:5f:b7:8a:52:8c:74:f6:de:
ec:03:90:bf:56:49:45:e3:2d:9d:3b:cf:2d:99:4a:
98:ae:23:e9:02:7e:c0:3d:f2:9d:5f:3e:20:82:51:
13:62:e7:c4:2c:f8:9b:74:ef:5f:08:20:33:a1:1b:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:47:12:74:20:13:95:9D:5D:04:77:23:81:B3:2E:95:B3:34:35:1A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a083::/32
Signature Algorithm: sha256WithRSAEncryption
9c:9e:d0:02:14:d7:bc:1c:98:3c:28:52:1d:6f:0c:71:ea:f5:
b3:36:fb:a9:51:d1:09:ba:12:b1:da:db:3a:56:e0:77:34:9f:
ce:16:24:60:dd:8b:f3:ff:21:8b:25:da:41:9e:e2:93:2d:41:
7e:86:c3:dd:66:35:39:e6:9d:a8:b0:86:9a:1b:bf:e5:c5:f6:
e7:9e:90:4e:08:f3:cb:48:9f:f0:6c:f1:7f:ca:e3:ec:58:06:
2b:c9:b4:5b:cb:40:fb:e2:d8:75:f5:8f:ca:4a:f6:a8:eb:6d:
30:a0:11:48:3a:41:b9:a7:a7:3a:ed:2d:c5:f8:62:3d:09:35:
c0:e4:f2:bd:2a:bb:14:27:39:bb:09:0d:ca:1c:01:50:04:5b:
bc:5a:d3:1a:54:80:ff:a9:54:e3:59:51:29:97:91:d6:42:5c:
fe:6d:00:a0:6e:4d:02:c5:7e:64:55:38:f1:94:d0:6c:ed:20:
b7:e6:ef:19:2c:6c:6e:b6:0f:f2:a5:df:98:2f:32:54:4e:1f:
7f:8a:d6:31:c4:c0:a3:6c:99:48:b5:4a:86:d8:39:2d:eb:7d:
2b:b7:3c:4a:77:2d:61:8e:e2:51:8f:37:ba:4a:74:17:db:19:
96:0b:66:d7:fd:24:0e:96:67:df:29:2f:8c:1b:0b:cd:75:7f:
d4:ee:d0:56
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcLzx5Ub3U2NWYc8ksuxevXMkWJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNDBaFw0yNzA1MjUwMzE2NDBaMDMxMTAvBgNV
BAMTKEQ2NDcxMjc0MjAxMzk1OUQ1RDA0NzcyMzgxQjMyRTk1QjMzNDM1MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ/c/PtDC82Y353p3tABI/Bd+1
UG+TYb6vazS6TuYLkuxmMMTmng3b7LJjzV11Nvw6Xoti1i1Yr8Ofy1SuMrzE68s6
zcouGInhZyUNtd2v7HmPCAYsMUpjj2Zbj8hpEIuaWgY53i2bkP3NC0FGbL07UYOi
RbvQ41LyrTfUflrozQGUPMXMhcf57TvFYO4We8icNOGb8knAfb8T+fgDCGSIOEkW
gqoaBB6I/k4JxWirtLx7K8W+gMpGSlxSnFNgWv9FRktb/4L6Avxft4pSjHT23uwD
kL9WSUXjLZ07zy2ZSpiuI+kCfsA98p1fPiCCURNi58Qs+Jt0718IIDOhGznzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU1kcSdCATlZ1dBHcjgbMulbM0NRowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNzgxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqggzANBgkqhkiG9w0BAQsFAAOCAQEAnJ7Q
AhTXvByYPChSHW8Mcer1szb7qVHRCboSsdrbOlbgdzSfzhYkYN2L8/8hiyXaQZ7i
ky1BfobD3WY1OeadqLCGmhu/5cX2556QTgjzy0if8Gzxf8rj7FgGK8m0W8tA++LY
dfWPykr2qOttMKARSDpBuaenOu0txfhiPQk1wOTyvSq7FCc5uwkNyhwBUARbvFrT
GlSA/6lU41lRKZeR1kJc/m0AoG5NAsV+ZFU48ZTQbO0gt+bvGSxsbrYP8qXfmC8y
VE4ff4rWMcTAo2yZSLVKhtg5Let9K7c8SnctYY7iUY83ukp0F9sZlgtm1/0kDpZn
3ykvjBsLzXV/1O7QVg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:58 2026 by rpki-client