Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142799.roa
File: AS142799.roa (raw, json)
Hash identifier: k2GAyIuvUWyrA7WyJkUNwZCmX8dDttU4PzX5JZgKDTo=
Subject key identifier: 5B:C1:8F:7A:8B:CA:33:F9:BB:41:1D:51:3F:F4:58:3D:78:D0:91:3F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3ED3BB56B9BD3842BE2F3259B99653C04B02769E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142799.roa
Signing time: Tue 26 May 2026 06:12:44 +0000
ROA not before: Tue 26 May 2026 06:07:44 +0000
ROA not after: Tue 25 May 2027 06:12:44 +0000
asID: 142799
IP address blocks: 240a:a095::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d3:bb:56:b9:bd:38:42:be:2f:32:59:b9:96:53:c0:4b:02:76:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:44 2026 GMT
Not After : May 25 06:12:44 2027 GMT
Subject: CN=5BC18F7A8BCA33F9BB411D513FF4583D78D0913F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:92:27:f9:9a:6f:36:ac:07:f2:17:63:68:
d0:e7:87:a6:78:61:ce:72:ae:b0:77:52:97:c7:7b:
a2:ab:8a:dc:65:5c:e1:8a:5a:b1:4b:f3:04:bb:17:
eb:8d:1f:18:67:b9:ed:de:fc:df:d2:1b:d7:a2:ec:
c1:cc:7e:3c:6c:88:1f:45:e1:a8:03:67:9d:f9:fe:
6e:4b:8d:72:41:21:3c:dd:ca:ca:34:fd:cc:1f:0f:
35:f8:c7:18:0a:57:90:b9:66:2a:93:66:1a:10:69:
bf:eb:c9:0b:8f:be:66:ba:a4:3c:ef:aa:4e:90:c5:
26:3a:f1:57:e5:01:8f:75:48:4c:5a:ee:f6:dd:f0:
72:33:38:47:4d:e7:c8:47:78:0e:cd:83:6b:0d:80:
da:9e:8b:ab:d4:79:44:62:63:85:ce:6f:55:e2:df:
e1:c9:75:21:95:db:0c:43:3f:57:11:bb:cb:13:7e:
9c:23:05:4c:42:4b:b5:cf:64:75:79:f4:02:db:ca:
f1:54:af:df:f6:c6:e7:15:d1:28:8e:65:2a:1c:fa:
cf:62:5f:7e:a2:f1:94:86:b1:11:db:5e:31:78:aa:
14:6c:4d:41:bf:3d:75:ea:b0:17:9b:49:c1:b8:9d:
38:dd:13:b2:cb:2b:80:7e:5a:1b:98:ca:db:80:49:
66:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C1:8F:7A:8B:CA:33:F9:BB:41:1D:51:3F:F4:58:3D:78:D0:91:3F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a095::/32
Signature Algorithm: sha256WithRSAEncryption
06:e2:96:ae:d0:3b:ee:3f:7a:a8:ef:ac:8b:4a:6e:1e:29:0c:
6d:ad:a5:14:51:e5:76:21:d7:d6:a5:b8:f6:10:ca:4d:e1:08:
73:66:c4:0b:0e:ad:7c:8e:8a:9a:4e:04:09:16:1e:49:3e:7f:
58:c9:79:52:6a:5d:53:e5:2b:d9:36:fb:01:ee:d9:c1:bb:6c:
00:8f:aa:99:60:7e:8b:59:8b:c9:2b:9f:9f:97:ad:ea:dc:12:
54:2c:9a:db:5c:25:09:20:c4:f7:75:f4:83:57:28:13:92:cb:
c6:8e:f1:56:f4:99:1b:09:dd:b1:eb:7d:07:a3:19:89:10:64:
28:83:15:8c:db:48:58:75:e1:df:6b:3a:63:dc:c6:92:4f:d1:
6b:4e:f5:c8:79:0a:03:e0:37:24:bb:4c:d6:ea:6a:4d:f2:bb:
25:4d:a1:a8:ce:a9:1c:c5:ac:c0:07:fd:50:11:cc:db:b9:d3:
17:66:7f:cb:62:69:30:bd:71:ba:3e:fc:1f:ca:12:89:65:39:
16:d4:2b:95:5e:58:75:56:8c:3f:5c:aa:fc:d0:60:41:d9:be:
48:65:89:28:e0:19:bf:98:97:de:6a:ec:62:f3:f3:e0:51:19:
80:8b:68:ee:18:4b:49:fc:3d:99:6d:1e:ca:6f:1e:f1:b5:98:
9d:b1:5d:08
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPtO7Vrm9OEK+LzJZuZZTwEsCdp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3NDRaFw0yNzA1MjUwNjEyNDRaMDMxMTAvBgNV
BAMTKDVCQzE4RjdBOEJDQTMzRjlCQjQxMUQ1MTNGRjQ1ODNENzhEMDkxM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBL5In+ZpvNqwH8hdjaNDnh6Z4
Yc5yrrB3UpfHe6KritxlXOGKWrFL8wS7F+uNHxhnue3e/N/SG9ei7MHMfjxsiB9F
4agDZ535/m5LjXJBITzdyso0/cwfDzX4xxgKV5C5ZiqTZhoQab/ryQuPvma6pDzv
qk6QxSY68VflAY91SExa7vbd8HIzOEdN58hHeA7Ng2sNgNqei6vUeURiY4XOb1Xi
3+HJdSGV2wxDP1cRu8sTfpwjBUxCS7XPZHV59ALbyvFUr9/2xucV0SiOZSoc+s9i
X36i8ZSGsRHbXjF4qhRsTUG/PXXqsBebScG4nTjdE7LLK4B+WhuYytuASWZnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUW8GPeovKM/m7QR1RP/RYPXjQkT8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyNzk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqglTANBgkqhkiG9w0BAQsFAAOCAQEABuKW
rtA77j96qO+si0puHikMba2lFFHldiHX1qW49hDKTeEIc2bECw6tfI6Kmk4ECRYe
ST5/WMl5UmpdU+Ur2Tb7Ae7ZwbtsAI+qmWB+i1mLySufn5et6twSVCya21wlCSDE
93X0g1coE5LLxo7xVvSZGwndset9B6MZiRBkKIMVjNtIWHXh32s6Y9zGkk/Ra071
yHkKA+A3JLtM1upqTfK7JU2hqM6pHMWswAf9UBHM27nTF2Z/y2JpML1xuj78H8oS
iWU5FtQrlV5YdVaMP1yq/NBgQdm+SGWJKOAZv5iX3mrsYvPz4FEZgIto7hhLSfw9
mW0eym8e8bWYnbFdCA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:58 2026 by rpki-client