Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142829.roa
File: AS142829.roa (raw, json)
Hash identifier: ttqvTK451oKPhOEc9vdEQhmo1KeLyd8f9oNvvdbkIXE=
Subject key identifier: 11:74:B2:C4:E6:38:E6:23:3E:6D:82:F2:D4:44:00:A8:04:92:57:4F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 07917D659525211BEE18290CF0E268C426DC50DC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142829.roa
Signing time: Fri 22 May 2026 07:24:24 +0000
ROA not before: Fri 22 May 2026 07:19:24 +0000
ROA not after: Fri 21 May 2027 07:24:24 +0000
asID: 142829
IP address blocks: 240a:a0b3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:91:7d:65:95:25:21:1b:ee:18:29:0c:f0:e2:68:c4:26:dc:50:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:24 2026 GMT
Not After : May 21 07:24:24 2027 GMT
Subject: CN=1174B2C4E638E6233E6D82F2D44400A80492574F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:44:f3:83:f5:48:30:56:6b:82:83:49:09:93:
25:3e:2e:0f:f1:02:0f:c5:11:39:9b:ae:d9:3b:1d:
5e:e0:db:77:58:65:51:fb:26:62:b1:4c:85:66:74:
d2:b0:d1:f6:51:ca:ee:81:fc:ea:d5:42:db:a2:fa:
64:7f:14:c9:a2:33:f8:66:0a:b4:f9:cb:75:24:ba:
f7:3f:8a:3a:6f:78:80:09:14:da:18:ef:36:38:39:
0d:fa:2b:95:78:6c:a8:58:48:41:7e:1c:f8:2c:64:
c9:82:7f:9e:75:97:12:5a:a2:33:87:c2:5c:47:8a:
f2:02:fd:c9:bd:b4:75:96:d9:af:e9:8b:a6:b0:1b:
96:94:e2:50:47:e6:2f:df:45:94:3f:91:c5:5f:23:
3f:66:a0:bf:67:c9:ef:2b:2a:14:09:c5:d7:31:7f:
45:65:1c:2a:c6:72:e3:53:c9:cd:5a:52:29:5a:d6:
d2:2a:23:4d:f8:f1:55:f4:aa:79:22:13:8c:e9:99:
37:f5:ee:5e:9a:ec:7f:6b:25:0b:5e:3d:62:e4:1c:
cd:7a:a6:74:ae:de:34:7c:dd:49:67:13:97:e9:74:
6e:8f:60:80:30:7c:95:68:9b:a5:0c:86:e6:dd:55:
5d:06:7d:c8:df:b3:39:5e:90:9e:a6:20:bb:26:87:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:74:B2:C4:E6:38:E6:23:3E:6D:82:F2:D4:44:00:A8:04:92:57:4F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0b3::/32
Signature Algorithm: sha256WithRSAEncryption
81:75:2c:35:7d:ad:52:05:77:47:7f:aa:46:68:90:db:69:1c:
d6:1b:85:c4:a4:e6:5f:81:23:c4:1b:f3:49:1a:ee:64:34:2c:
c7:5d:f5:cd:28:17:56:c4:37:6b:7d:98:c0:91:12:b6:61:42:
5a:1c:f1:4e:a7:6a:4a:5b:27:e5:59:d5:9e:2d:11:6a:9a:37:
8d:85:5d:44:9e:9f:93:fa:f7:28:3e:1e:ad:42:1f:aa:22:e2:
12:cd:c3:c8:f1:ca:e5:ba:4d:6e:f4:e6:05:65:a5:48:17:1f:
62:e0:0e:3b:cb:d8:24:0d:39:b6:1f:a3:21:4d:85:d9:f9:6d:
cc:2d:be:38:7f:c6:fe:c8:a0:de:23:57:b5:9b:40:cc:87:7f:
13:14:38:29:ed:d4:b4:28:07:3d:2e:e3:ba:a6:ed:c9:1a:44:
1e:9d:27:25:48:5c:b6:f4:24:a8:3a:d8:0e:87:a4:78:87:36:
13:df:c3:a0:7d:17:0b:ff:52:2c:16:ef:4d:41:5f:ba:1d:19:
80:93:62:ff:50:29:7b:3d:d4:67:19:38:96:15:2f:c1:c8:b5:
b3:13:d6:d8:00:07:ff:ca:45:27:f1:d8:48:3b:1f:0a:5f:52:
7b:43:e9:84:b3:69:52:69:57:87:1f:b3:a7:61:0a:35:71:46:
f9:5a:fa:9c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUB5F9ZZUlIRvuGCkM8OJoxCbcUNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5MjRaFw0yNzA1MjEwNzI0MjRaMDMxMTAvBgNV
BAMTKDExNzRCMkM0RTYzOEU2MjMzRTZEODJGMkQ0NDQwMEE4MDQ5MjU3NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNRPOD9UgwVmuCg0kJkyU+Lg/x
Ag/FETmbrtk7HV7g23dYZVH7JmKxTIVmdNKw0fZRyu6B/OrVQtui+mR/FMmiM/hm
CrT5y3Ukuvc/ijpveIAJFNoY7zY4OQ36K5V4bKhYSEF+HPgsZMmCf551lxJaojOH
wlxHivIC/cm9tHWW2a/pi6awG5aU4lBH5i/fRZQ/kcVfIz9moL9nye8rKhQJxdcx
f0VlHCrGcuNTyc1aUila1tIqI0348VX0qnkiE4zpmTf17l6a7H9rJQtePWLkHM16
pnSu3jR83UlnE5fpdG6PYIAwfJVom6UMhubdVV0GfcjfszlekJ6mILsmh5NhAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUEXSyxOY45iM+bYLy1EQAqASSV08wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyODI5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgszANBgkqhkiG9w0BAQsFAAOCAQEAgXUs
NX2tUgV3R3+qRmiQ22kc1huFxKTmX4EjxBvzSRruZDQsx131zSgXVsQ3a32YwJES
tmFCWhzxTqdqSlsn5VnVni0Rapo3jYVdRJ6fk/r3KD4erUIfqiLiEs3DyPHK5bpN
bvTmBWWlSBcfYuAOO8vYJA05th+jIU2F2fltzC2+OH/G/sig3iNXtZtAzId/ExQ4
Ke3UtCgHPS7juqbtyRpEHp0nJUhctvQkqDrYDoekeIc2E9/DoH0XC/9SLBbvTUFf
uh0ZgJNi/1Apez3UZxk4lhUvwci1sxPW2AAH/8pFJ/HYSDsfCl9Se0PphLNpUmlX
hx+zp2EKNXFG+Vr6nA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:01 2026 by rpki-client