Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142823.roa
File: AS142823.roa (raw, json)
Hash identifier: CWPEEVqxEjh2i1qEYqI6jvfnBDwTdggfkwrnVJGUAWU=
Subject key identifier: A9:62:C0:C4:D7:C2:88:71:4F:F2:94:17:9C:16:74:19:D9:47:C3:23
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5FB2059EE8A696912F4A4EDC4BA8B8A69765B12E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142823.roa
Signing time: Fri 22 May 2026 06:27:34 +0000
ROA not before: Fri 22 May 2026 06:22:34 +0000
ROA not after: Fri 21 May 2027 06:27:34 +0000
asID: 142823
IP address blocks: 240a:a0ad::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b2:05:9e:e8:a6:96:91:2f:4a:4e:dc:4b:a8:b8:a6:97:65:b1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:34 2026 GMT
Not After : May 21 06:27:34 2027 GMT
Subject: CN=A962C0C4D7C288714FF294179C167419D947C323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:5e:a2:4a:42:ff:87:72:5d:a4:8e:3c:34:
94:0a:56:77:e8:a8:c0:d8:e1:e9:1f:b5:43:e9:eb:
83:92:56:ac:1b:3f:cb:bb:4a:29:66:00:0f:db:ae:
b5:7e:20:83:1c:7d:d2:89:df:ae:c2:1d:9c:b4:16:
47:3d:5d:6f:02:e0:d5:b3:d3:ce:73:cd:0b:bf:ae:
89:e9:80:1c:86:ff:c5:4d:d6:75:87:87:93:d9:ec:
b4:37:76:08:1c:27:7c:8c:d6:49:47:6f:3c:5e:1d:
41:4c:dc:dd:5a:8e:88:72:59:10:7b:9b:08:4d:8a:
b0:8e:40:eb:bb:d7:9b:9b:38:81:fe:3f:51:fc:29:
93:71:e5:f0:0c:d4:af:b0:f1:5e:61:d2:eb:06:53:
d9:ee:fb:6b:a6:d0:b7:19:dc:3a:36:00:cf:c3:7c:
08:df:ea:f8:ca:86:86:86:19:ab:38:1c:52:fd:a5:
bf:c2:9d:78:8b:43:d5:e3:4f:92:49:b4:ce:fa:c2:
90:84:e5:92:c8:7a:68:69:46:67:a2:88:c1:0f:af:
fd:49:7d:52:60:dc:be:dd:42:c0:d1:a1:96:55:64:
36:16:fb:2a:65:37:1a:9c:05:f0:e5:aa:a0:6b:fb:
d4:c4:8f:bb:24:42:f8:2b:d7:0b:11:d9:a3:b0:ac:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:62:C0:C4:D7:C2:88:71:4F:F2:94:17:9C:16:74:19:D9:47:C3:23
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142823.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0ad::/32
Signature Algorithm: sha256WithRSAEncryption
29:76:bf:29:e9:b3:9e:4e:b4:87:12:1b:26:7c:01:28:99:0b:
e1:51:f0:40:cd:32:74:73:8e:63:76:2a:25:e9:56:9b:52:41:
b4:17:52:0d:d3:ac:f6:0b:fe:5b:2f:27:2f:e1:55:a5:a0:42:
ac:25:8b:12:82:cf:1f:0c:57:87:73:1a:e4:18:05:88:30:7e:
26:4c:41:da:32:22:44:d4:23:d1:c3:a9:8f:68:b7:29:80:ce:
f8:22:1d:03:0f:5c:09:c1:98:79:73:fb:99:c0:73:de:5d:a8:
ff:7d:c2:99:29:7d:12:e7:18:1f:a5:21:05:fc:f6:30:1e:94:
94:58:80:82:94:01:8d:1e:d7:7a:90:e2:c0:82:cc:ba:e1:7d:
23:e8:4d:a3:0d:43:f1:9b:7a:a9:b7:72:86:2e:a3:56:77:56:
cd:8f:48:00:e3:99:e3:4b:d1:5e:a1:02:1c:45:9b:6d:07:96:
f1:65:53:8b:62:7d:71:b3:15:78:07:1b:bd:92:f0:0d:88:01:
ca:20:d6:7f:75:f2:26:1b:a1:1f:d4:c6:5c:3a:d4:24:f5:82:
b8:ee:24:85:1c:83:51:c9:b2:bd:bc:dd:96:4d:56:7f:41:84:
da:69:be:fa:3e:82:d5:db:34:f2:d2:e4:86:5d:5b:12:a3:83:
40:fa:65:92
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUX7IFnuimlpEvSk7cS6i4ppdlsS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyMzRaFw0yNzA1MjEwNjI3MzRaMDMxMTAvBgNV
BAMTKEE5NjJDMEM0RDdDMjg4NzE0RkYyOTQxNzlDMTY3NDE5RDk0N0MzMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVOV6iSkL/h3JdpI48NJQKVnfo
qMDY4ekftUPp64OSVqwbP8u7SilmAA/brrV+IIMcfdKJ367CHZy0Fkc9XW8C4NWz
085zzQu/ronpgByG/8VN1nWHh5PZ7LQ3dggcJ3yM1klHbzxeHUFM3N1ajohyWRB7
mwhNirCOQOu715ubOIH+P1H8KZNx5fAM1K+w8V5h0usGU9nu+2um0LcZ3Do2AM/D
fAjf6vjKhoaGGas4HFL9pb/CnXiLQ9XjT5JJtM76wpCE5ZLIemhpRmeiiMEPr/1J
fVJg3L7dQsDRoZZVZDYW+yplNxqcBfDlqqBr+9TEj7skQvgr1wsR2aOwrDP9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUqWLAxNfCiHFP8pQXnBZ0GdlHwyMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyODIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgrTANBgkqhkiG9w0BAQsFAAOCAQEAKXa/
Kemznk60hxIbJnwBKJkL4VHwQM0ydHOOY3YqJelWm1JBtBdSDdOs9gv+Wy8nL+FV
paBCrCWLEoLPHwxXh3Ma5BgFiDB+JkxB2jIiRNQj0cOpj2i3KYDO+CIdAw9cCcGY
eXP7mcBz3l2o/33CmSl9EucYH6UhBfz2MB6UlFiAgpQBjR7XepDiwILMuuF9I+hN
ow1D8Zt6qbdyhi6jVndWzY9IAOOZ40vRXqECHEWbbQeW8WVTi2J9cbMVeAcbvZLw
DYgByiDWf3XyJhuhH9TGXDrUJPWCuO4khRyDUcmyvbzdlk1Wf0GE2mm++j6C1ds0
8tLkhl1bEqODQPplkg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:56 2026 by rpki-client