Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142840.roa
File: AS142840.roa (raw, json)
Hash identifier: C7cxvt2fGq6nY9OKW8XJTmHoNImZXOJVlVUQgThJKyk=
Subject key identifier: D7:60:30:2E:1F:11:B3:F4:08:8A:54:C9:D0:6B:B3:6C:51:94:41:60
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 320D871899B10C50F626FFED432F2BAB7941003D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142840.roa
Signing time: Fri 22 May 2026 06:27:44 +0000
ROA not before: Fri 22 May 2026 06:22:44 +0000
ROA not after: Fri 21 May 2027 06:27:44 +0000
asID: 142840
IP address blocks: 240a:a0be::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:0d:87:18:99:b1:0c:50:f6:26:ff:ed:43:2f:2b:ab:79:41:00:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:44 2026 GMT
Not After : May 21 06:27:44 2027 GMT
Subject: CN=D760302E1F11B3F4088A54C9D06BB36C51944160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:04:e8:d0:fd:6e:7c:92:ef:a6:9a:fb:db:
41:c9:0c:3e:58:66:da:66:0f:c2:b9:fc:5c:af:fc:
a0:23:94:c9:9f:78:43:67:b4:77:61:68:6b:11:87:
64:85:de:1f:14:fe:d9:7d:a7:fd:02:3a:49:76:ac:
55:5b:22:ed:f9:f9:7d:f5:27:3f:05:0d:bd:c0:6b:
e9:9c:8a:be:46:7a:b9:37:3e:5f:3d:46:67:cf:da:
aa:d3:02:91:db:3d:6e:f5:10:d0:a6:9c:65:58:d6:
48:52:bd:e7:4f:01:a0:4a:f8:8b:66:51:31:8b:05:
e3:5c:6f:ac:78:8b:fd:ce:ca:89:a1:f5:7b:6a:b3:
41:15:28:c1:eb:6b:a9:72:35:8f:97:25:af:4d:df:
d1:ca:2f:58:23:8d:55:74:4f:46:74:97:17:76:6a:
b5:03:22:14:c7:2d:cd:73:7b:35:bc:92:2e:c2:6b:
ae:e3:d1:8c:a4:44:eb:d0:e1:ee:d8:04:05:d9:73:
8a:0d:80:8c:f7:ea:1d:17:d8:d7:5b:aa:36:a8:4a:
c2:43:a9:c1:67:ef:f9:f4:9b:a5:4e:a1:c9:92:1c:
fb:66:c3:3d:31:bc:c4:45:c6:bc:77:81:40:fe:b9:
29:94:af:17:a7:81:25:0e:c9:00:c1:92:ab:32:a7:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:60:30:2E:1F:11:B3:F4:08:8A:54:C9:D0:6B:B3:6C:51:94:41:60
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0be::/32
Signature Algorithm: sha256WithRSAEncryption
54:a8:5d:ec:50:39:92:b9:f9:26:56:bb:7f:ca:9a:59:0e:f0:
53:cd:94:5e:3a:98:f3:ba:c0:61:55:9d:a7:a0:38:39:5f:67:
50:6a:47:d3:69:9b:72:15:09:84:54:a6:30:38:1f:03:1a:8e:
40:58:2e:05:d3:33:b3:a1:bc:76:ea:6d:c2:0a:4e:6a:2a:1d:
2f:af:01:d1:be:65:c6:a3:38:7f:70:1b:6a:06:27:89:b4:90:
16:4f:e8:23:db:25:e8:f6:de:f0:38:9b:da:e1:78:00:02:25:
af:06:02:12:2b:67:79:0f:ba:db:48:4b:11:a4:cf:f5:5d:ea:
be:77:cd:64:e6:c3:32:ee:3a:cf:88:47:b8:65:d2:62:49:d2:
15:58:f2:6f:d0:57:ec:78:54:c8:67:df:43:2e:75:26:a3:4d:
be:db:47:42:4b:3e:ad:01:d3:06:bc:21:5a:f6:2b:e8:87:c5:
f2:56:f8:d4:2d:d4:82:23:a4:02:6a:47:b2:a0:9c:91:8d:9a:
92:2c:98:8c:f4:fd:2b:c9:58:67:cd:73:5d:26:c5:25:c9:91:
02:84:d6:66:77:ba:c7:28:8f:1a:48:f7:88:bd:07:3f:3a:6a:
46:99:6a:14:24:1b:7d:db:bc:4b:3b:14:e4:6b:29:c2:57:f4:
d3:78:a0:e2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMg2HGJmxDFD2Jv/tQy8rq3lBAD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNDRaFw0yNzA1MjEwNjI3NDRaMDMxMTAvBgNV
BAMTKEQ3NjAzMDJFMUYxMUIzRjQwODhBNTRDOUQwNkJCMzZDNTE5NDQxNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqcQTo0P1ufJLvppr720HJDD5Y
ZtpmD8K5/Fyv/KAjlMmfeENntHdhaGsRh2SF3h8U/tl9p/0COkl2rFVbIu35+X31
Jz8FDb3Aa+mcir5Gerk3Pl89RmfP2qrTApHbPW71ENCmnGVY1khSvedPAaBK+Itm
UTGLBeNcb6x4i/3Oyomh9Xtqs0EVKMHra6lyNY+XJa9N39HKL1gjjVV0T0Z0lxd2
arUDIhTHLc1zezW8ki7Ca67j0YykROvQ4e7YBAXZc4oNgIz36h0X2NdbqjaoSsJD
qcFn7/n0m6VOocmSHPtmwz0xvMRFxrx3gUD+uSmUrxengSUOyQDBkqsyp1tdAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU12AwLh8Rs/QIilTJ0GuzbFGUQWAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyODQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqgvjANBgkqhkiG9w0BAQsFAAOCAQEAVKhd
7FA5krn5Jla7f8qaWQ7wU82UXjqY87rAYVWdp6A4OV9nUGpH02mbchUJhFSmMDgf
AxqOQFguBdMzs6G8duptwgpOaiodL68B0b5lxqM4f3AbagYnibSQFk/oI9sl6Pbe
8Dib2uF4AAIlrwYCEitneQ+620hLEaTP9V3qvnfNZObDMu46z4hHuGXSYknSFVjy
b9BX7HhUyGffQy51JqNNvttHQks+rQHTBrwhWvYr6IfF8lb41C3UgiOkAmpHsqCc
kY2akiyYjPT9K8lYZ81zXSbFJcmRAoTWZne6xyiPGkj3iL0HPzpqRplqFCQbfdu8
SzsU5Gspwlf003ig4g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:53 2026 by rpki-client