Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142828.roa
File: AS142828.roa (raw, json)
Hash identifier: J/761OpzQhk7dyV9B1Ri6iVPpAsTetIGn5bGneBVVCQ=
Subject key identifier: 6D:BC:F5:83:1B:4F:B8:36:8F:2A:4D:53:D8:E5:FB:68:52:B4:93:36
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 48940BC89DB60A12309EF23DE4344FF9B35E4C3F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142828.roa
Signing time: Tue 26 May 2026 02:35:08 +0000
ROA not before: Tue 26 May 2026 02:30:08 +0000
ROA not after: Tue 25 May 2027 02:35:08 +0000
asID: 142828
IP address blocks: 240a:a0b2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:94:0b:c8:9d:b6:0a:12:30:9e:f2:3d:e4:34:4f:f9:b3:5e:4c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:08 2026 GMT
Not After : May 25 02:35:08 2027 GMT
Subject: CN=6DBCF5831B4FB8368F2A4D53D8E5FB6852B49336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:d9:47:32:47:1a:81:6e:b3:e1:8f:c0:19:
58:d6:ba:0d:5e:3c:33:c1:25:19:05:4b:5a:db:7e:
25:2d:4a:12:6b:02:4a:da:a9:42:a3:47:9c:c6:7a:
a9:6e:d3:c9:2f:2d:94:25:c2:15:ff:9e:e9:47:93:
50:dc:a0:c3:d2:9f:ca:78:9f:a3:f1:69:17:54:96:
1b:4d:f2:5d:84:53:06:19:b8:a7:50:05:17:1b:d4:
71:14:c1:65:36:e7:ef:9b:a2:ec:17:a8:ab:f2:48:
86:e5:44:84:2f:6f:03:39:7c:ed:3c:85:b5:d5:d9:
d8:28:44:53:4f:5d:e3:0d:d6:2f:09:79:9b:1e:22:
97:52:3e:4c:a0:b3:52:1b:91:9e:a7:83:73:53:de:
67:91:78:a6:b3:b8:da:fd:bb:fd:df:f3:4a:c6:19:
15:59:55:97:8c:27:d0:c1:12:be:28:0a:49:d8:2f:
7e:31:66:d7:6c:45:c8:bc:56:8b:11:73:5d:69:83:
40:47:85:d6:ae:e0:6c:44:7d:7d:8a:2e:54:51:02:
d2:88:67:84:bc:e5:0d:20:08:3b:1a:29:bc:3b:2d:
11:bb:db:05:85:97:3d:4d:39:ae:8b:ed:eb:0c:42:
4b:f3:2a:ca:7e:20:08:c9:d1:83:d1:f4:02:da:d2:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BC:F5:83:1B:4F:B8:36:8F:2A:4D:53:D8:E5:FB:68:52:B4:93:36
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142828.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0b2::/32
Signature Algorithm: sha256WithRSAEncryption
28:54:79:76:e5:7c:61:94:af:01:d4:f8:da:f2:ab:64:e7:dd:
cf:54:20:ab:fb:0e:24:05:ae:76:eb:59:d4:86:77:84:56:64:
1d:ae:72:5f:f6:5f:9b:35:8d:36:9c:68:3b:c1:a9:8d:25:e5:
5e:90:1e:da:ad:e2:d4:ec:8c:e7:f9:7f:ef:32:42:b8:86:9e:
06:94:27:a5:9e:42:aa:ac:9e:00:18:b6:07:2d:46:aa:c9:72:
6f:f9:95:36:86:18:81:44:07:e9:66:c7:43:9e:57:45:34:e9:
59:44:c8:29:37:74:4e:f2:a0:7d:ad:9c:1f:c5:8d:ff:e1:52:
3a:d0:d3:ad:49:93:6e:a3:b5:ea:df:05:68:53:c6:d2:47:91:
0f:55:8a:e8:fc:34:a9:2a:53:b2:f9:ef:77:fa:d9:5c:c5:22:
01:39:10:0d:e4:c6:aa:be:b5:7d:45:a8:08:5f:0b:d2:77:9e:
c3:f8:18:ee:fc:25:ab:df:12:16:70:37:6e:2a:d4:3b:87:82:
bd:07:96:86:9d:21:36:e8:6b:78:a0:3a:12:cb:b3:48:ba:23:
bd:7c:42:0d:9e:e9:11:50:23:67:71:ba:84:99:f9:99:41:a6:
b3:2e:9f:02:69:8f:cc:8b:27:6d:f0:ee:68:2d:89:8e:7d:48:
44:c3:27:10
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSJQLyJ22ChIwnvI95DRP+bNeTD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMDhaFw0yNzA1MjUwMjM1MDhaMDMxMTAvBgNV
BAMTKDZEQkNGNTgzMUI0RkI4MzY4RjJBNEQ1M0Q4RTVGQjY4NTJCNDkzMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GdlHMkcagW6z4Y/AGVjWug1e
PDPBJRkFS1rbfiUtShJrAkraqUKjR5zGeqlu08kvLZQlwhX/nulHk1DcoMPSn8p4
n6PxaRdUlhtN8l2EUwYZuKdQBRcb1HEUwWU25++bouwXqKvySIblRIQvbwM5fO08
hbXV2dgoRFNPXeMN1i8JeZseIpdSPkygs1IbkZ6ng3NT3meReKazuNr9u/3f80rG
GRVZVZeMJ9DBEr4oCknYL34xZtdsRci8VosRc11pg0BHhdau4GxEfX2KLlRRAtKI
Z4S85Q0gCDsaKbw7LRG72wWFlz1NOa6L7esMQkvzKsp+IAjJ0YPR9ALa0r0hAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbbz1gxtPuDaPKk1T2OX7aFK0kzYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyODI4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgsjANBgkqhkiG9w0BAQsFAAOCAQEAKFR5
duV8YZSvAdT42vKrZOfdz1Qgq/sOJAWudutZ1IZ3hFZkHa5yX/ZfmzWNNpxoO8Gp
jSXlXpAe2q3i1OyM5/l/7zJCuIaeBpQnpZ5CqqyeABi2By1Gqslyb/mVNoYYgUQH
6WbHQ55XRTTpWUTIKTd0TvKgfa2cH8WN/+FSOtDTrUmTbqO16t8FaFPG0keRD1WK
6Pw0qSpTsvnvd/rZXMUiATkQDeTGqr61fUWoCF8L0neew/gY7vwlq98SFnA3birU
O4eCvQeWhp0hNuhreKA6EsuzSLojvXxCDZ7pEVAjZ3G6hJn5mUGmsy6fAmmPzIsn
bfDuaC2Jjn1IRMMnEA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:56 2026 by rpki-client