Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142806.roa
File: AS142806.roa (raw, json)
Hash identifier: K/sUARTxpEYLEpsZgXb2fQ3TJSiBf3c18GBlyZrpaUc=
Subject key identifier: 04:0F:32:7E:A7:4F:E0:70:A8:7E:3F:2C:6D:93:84:4B:53:2B:A3:F8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7A069515C27E84BACAF330DFC3CF87F3CA74B6B8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142806.roa
Signing time: Tue 26 May 2026 01:13:14 +0000
ROA not before: Tue 26 May 2026 01:08:14 +0000
ROA not after: Tue 25 May 2027 01:13:14 +0000
asID: 142806
IP address blocks: 240a:a09c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:06:95:15:c2:7e:84:ba:ca:f3:30:df:c3:cf:87:f3:ca:74:b6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:14 2026 GMT
Not After : May 25 01:13:14 2027 GMT
Subject: CN=040F327EA74FE070A87E3F2C6D93844B532BA3F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:8d:45:8e:59:a1:2b:83:c9:ab:c8:e3:6f:
4f:ca:ed:29:51:8a:ce:00:cc:99:5d:0e:2c:33:29:
58:26:d8:d0:3b:34:f2:9f:e0:77:a4:07:b9:6c:45:
3e:48:33:e6:9d:02:e2:9a:e5:48:06:9d:79:bd:5b:
03:4f:29:65:98:20:c4:62:17:b3:2a:a7:36:0c:c5:
38:0b:b4:5a:0c:69:a6:8e:c7:14:06:6d:de:63:70:
d1:b3:9b:be:a0:31:09:a0:d6:9e:4d:02:09:5c:d6:
35:2f:a4:ca:00:9d:1d:b0:9e:d4:c2:50:14:a6:1c:
2c:7d:81:b4:dc:6a:fa:0a:bb:aa:5b:c8:3f:60:23:
b4:a4:c2:51:63:aa:00:74:fd:bd:99:dc:86:ad:fb:
c5:91:32:57:75:68:01:41:fd:ef:0a:d0:52:95:76:
af:07:d9:af:81:58:f0:ef:9b:9f:fa:23:a3:16:cf:
97:87:0e:23:07:f6:18:d7:38:c1:4a:b3:b3:a4:66:
85:6e:c8:82:33:c4:ea:04:7c:85:cb:23:1f:31:27:
b3:8e:a5:24:85:d2:7a:ac:9a:c3:7d:bc:67:c6:00:
da:aa:7b:8a:47:bc:e8:e1:f6:74:d7:14:94:8e:c1:
72:07:33:6a:e8:52:0b:f2:34:10:8e:5c:ca:bc:ab:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0F:32:7E:A7:4F:E0:70:A8:7E:3F:2C:6D:93:84:4B:53:2B:A3:F8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142806.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a09c::/32
Signature Algorithm: sha256WithRSAEncryption
65:10:61:c3:d0:24:94:14:66:59:35:7e:c3:78:b0:2e:7b:18:
ba:f0:39:da:f7:91:d2:98:e1:9b:55:29:85:78:13:90:ea:f3:
04:1d:b2:fb:5c:2c:82:76:4e:aa:bd:25:3c:e7:4d:b3:32:5a:
6f:6c:55:ac:de:30:c9:4f:ef:16:46:d9:c1:4c:43:01:da:37:
75:d8:f8:84:33:55:ff:b0:02:64:88:40:f1:de:06:a7:e4:e6:
96:3f:09:76:bb:a5:b8:59:c2:a6:85:17:01:cf:41:e9:f2:94:
06:02:be:78:0a:02:ef:ab:32:58:d2:e8:4a:c8:c1:03:06:c3:
42:6b:90:48:0a:5d:ab:fc:b1:8d:d0:dc:55:92:2b:a6:28:82:
25:b7:8c:2b:1d:dd:77:3a:8d:28:8f:8f:6c:0a:f2:3f:33:7a:
6e:c3:2f:0b:5b:50:03:9d:5d:0f:db:fc:84:b8:7a:ea:18:a2:
28:ad:b0:b6:1b:39:87:dc:1c:c0:a2:26:a7:5c:38:85:bc:2c:
cb:3c:f3:b4:31:cd:a2:63:55:f1:e4:90:c8:50:0e:80:6e:dc:
49:6d:c4:32:3b:f3:ac:9c:e1:8c:1d:bc:ad:47:8b:9f:e5:0f:
46:3a:df:13:28:7a:d3:55:f7:b8:53:96:9f:98:b1:80:9f:da:
55:9a:0f:2f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUegaVFcJ+hLrK8zDfw8+H88p0trgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MTRaFw0yNzA1MjUwMTEzMTRaMDMxMTAvBgNV
BAMTKDA0MEYzMjdFQTc0RkUwNzBBODdFM0YyQzZEOTM4NDRCNTMyQkEzRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNbo1FjlmhK4PJq8jjb0/K7SlR
is4AzJldDiwzKVgm2NA7NPKf4HekB7lsRT5IM+adAuKa5UgGnXm9WwNPKWWYIMRi
F7MqpzYMxTgLtFoMaaaOxxQGbd5jcNGzm76gMQmg1p5NAglc1jUvpMoAnR2wntTC
UBSmHCx9gbTcavoKu6pbyD9gI7SkwlFjqgB0/b2Z3Iat+8WRMld1aAFB/e8K0FKV
dq8H2a+BWPDvm5/6I6MWz5eHDiMH9hjXOMFKs7OkZoVuyIIzxOoEfIXLIx8xJ7OO
pSSF0nqsmsN9vGfGANqqe4pHvOjh9nTXFJSOwXIHM2roUgvyNBCOXMq8q6n1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUBA8yfqdP4HCofj8sbZOES1Mro/gwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyODA2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgnDANBgkqhkiG9w0BAQsFAAOCAQEAZRBh
w9AklBRmWTV+w3iwLnsYuvA52veR0pjhm1UphXgTkOrzBB2y+1wsgnZOqr0lPOdN
szJab2xVrN4wyU/vFkbZwUxDAdo3ddj4hDNV/7ACZIhA8d4Gp+Tmlj8JdruluFnC
poUXAc9B6fKUBgK+eAoC76syWNLoSsjBAwbDQmuQSApdq/yxjdDcVZIrpiiCJbeM
Kx3ddzqNKI+PbAryPzN6bsMvC1tQA51dD9v8hLh66hiiKK2wths5h9wcwKImp1w4
hbwsyzzztDHNomNV8eSQyFAOgG7cSW3EMjvzrJzhjB28rUeLn+UPRjrfEyh601X3
uFOWn5ixgJ/aVZoPLw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:51 2026 by rpki-client