Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142820.roa
File: AS142820.roa (raw, json)
Hash identifier: ibQ0OHcQ+UGfNSujdpjOntBEL9yi9a+95ZMpUv3x484=
Subject key identifier: 10:B5:DC:D2:2F:DE:2C:82:65:34:2C:4B:23:04:AB:09:0D:E3:32:48
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 736731CCBC6290ADCD3DCE3DBBF08DC3EFAD35F8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142820.roa
Signing time: Tue 26 May 2026 02:35:05 +0000
ROA not before: Tue 26 May 2026 02:30:05 +0000
ROA not after: Tue 25 May 2027 02:35:05 +0000
asID: 142820
IP address blocks: 240a:a0aa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:67:31:cc:bc:62:90:ad:cd:3d:ce:3d:bb:f0:8d:c3:ef:ad:35:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:05 2026 GMT
Not After : May 25 02:35:05 2027 GMT
Subject: CN=10B5DCD22FDE2C8265342C4B2304AB090DE33248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:38:3b:f2:dd:fd:c2:14:c6:89:3a:60:95:f5:
22:7f:8b:a6:20:48:41:b0:57:d7:09:f1:9b:05:63:
aa:81:6a:28:d4:00:28:67:6f:7e:d7:5e:4c:9c:45:
7e:a8:63:df:4e:33:17:1a:dd:82:d4:c8:1d:44:5f:
79:80:17:b4:33:87:67:fd:db:f7:b3:7e:f9:e7:c4:
71:49:2a:1a:58:0d:53:f7:47:04:20:2c:e0:eb:80:
f4:b2:39:2c:7a:1d:b5:11:50:10:37:59:2c:a4:ee:
cf:ee:19:63:39:81:f1:c8:e0:35:45:c6:a2:17:c2:
ac:d7:e8:d9:58:da:eb:70:5f:37:0b:13:aa:fc:b2:
2f:6b:4e:ed:f2:e1:93:93:3c:fd:12:29:7c:c6:7f:
f5:8a:ae:76:84:9f:9a:d7:c8:a4:56:f5:b8:88:3f:
81:e9:02:ff:63:9c:82:5d:45:3b:ba:0d:58:d9:2c:
1a:bf:2d:fe:73:02:ac:86:41:1e:2a:d6:0f:3f:2d:
e8:22:63:ad:24:3e:24:dc:f6:30:c0:f5:ee:fc:82:
ac:3a:89:39:94:23:11:e3:3b:00:c1:17:d5:e2:ac:
eb:65:4f:6b:61:7d:07:1b:ae:6f:28:52:a4:24:4f:
99:68:0f:c9:9b:91:cb:f6:b0:27:2d:0b:19:a0:dd:
d4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B5:DC:D2:2F:DE:2C:82:65:34:2C:4B:23:04:AB:09:0D:E3:32:48
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142820.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0aa::/32
Signature Algorithm: sha256WithRSAEncryption
51:ed:36:e8:67:9c:a8:5d:5d:37:8d:7a:4f:93:25:a9:85:8f:
2a:5f:56:f3:70:57:76:e4:b2:8b:23:06:68:75:f7:c1:21:25:
57:2d:72:86:e1:87:cb:58:aa:58:d4:13:d1:59:ef:dc:7a:8a:
04:a3:de:e4:35:02:7c:7f:47:5a:12:aa:30:17:c5:06:ff:2e:
12:06:e7:ce:61:f3:38:44:1d:ae:64:5c:62:84:2b:37:16:73:
b1:09:35:d3:ee:0b:07:6e:34:1d:9e:84:81:e1:14:f2:31:e4:
cb:6c:d9:39:0d:ca:2a:58:c6:69:29:f4:ab:f9:61:28:b4:97:
76:5b:6a:91:34:86:34:c3:d9:1b:33:4c:bd:70:f1:74:57:26:
e2:07:68:14:58:39:b5:8a:8f:9c:a6:4c:22:f1:af:c8:3d:f4:
47:55:2f:ff:5a:79:07:27:2f:40:f5:8e:d8:9c:a7:fb:0b:e8:
fd:a0:1c:53:0f:d6:8b:8a:da:a9:f4:e8:c2:47:15:70:1c:95:
38:b7:6f:4b:79:62:bb:35:62:f5:05:0b:a3:0b:74:5f:e0:78:
81:7a:41:0e:ac:cc:df:ae:8a:5f:0e:60:d4:7e:f9:92:80:97:
1a:97:28:a0:0a:2f:20:c5:24:fc:8d:dc:4b:bd:e2:95:2b:96:
27:51:94:81
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUc2cxzLxikK3NPc49u/CNw++tNfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMDVaFw0yNzA1MjUwMjM1MDVaMDMxMTAvBgNV
BAMTKDEwQjVEQ0QyMkZERTJDODI2NTM0MkM0QjIzMDRBQjA5MERFMzMyNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQODvy3f3CFMaJOmCV9SJ/i6Yg
SEGwV9cJ8ZsFY6qBaijUAChnb37XXkycRX6oY99OMxca3YLUyB1EX3mAF7Qzh2f9
2/ezfvnnxHFJKhpYDVP3RwQgLODrgPSyOSx6HbURUBA3WSyk7s/uGWM5gfHI4DVF
xqIXwqzX6NlY2utwXzcLE6r8si9rTu3y4ZOTPP0SKXzGf/WKrnaEn5rXyKRW9biI
P4HpAv9jnIJdRTu6DVjZLBq/Lf5zAqyGQR4q1g8/LegiY60kPiTc9jDA9e78gqw6
iTmUIxHjOwDBF9XirOtlT2thfQcbrm8oUqQkT5loD8mbkcv2sCctCxmg3dSNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUELXc0i/eLIJlNCxLIwSrCQ3jMkgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyODIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgqjANBgkqhkiG9w0BAQsFAAOCAQEAUe02
6GecqF1dN416T5MlqYWPKl9W83BXduSyiyMGaHX3wSElVy1yhuGHy1iqWNQT0Vnv
3HqKBKPe5DUCfH9HWhKqMBfFBv8uEgbnzmHzOEQdrmRcYoQrNxZzsQk10+4LB240
HZ6EgeEU8jHky2zZOQ3KKljGaSn0q/lhKLSXdltqkTSGNMPZGzNMvXDxdFcm4gdo
FFg5tYqPnKZMIvGvyD30R1Uv/1p5BycvQPWO2Jyn+wvo/aAcUw/Wi4raqfTowkcV
cByVOLdvS3liuzVi9QULowt0X+B4gXpBDqzM366KXw5g1H75koCXGpcooAovIMUk
/I3cS73ilSuWJ1GUgQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:56 2026 by rpki-client