Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142861.roa
File: AS142861.roa (raw, json)
Hash identifier: Q28TPj5TMjdkJ7fX7pSwvTqQZSB5uFSBJpHNEiPZBys=
Subject key identifier: 68:38:D8:9E:E5:90:38:75:AB:C8:4F:F5:7A:BE:15:9D:FD:BF:A8:15
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 72393FD10AC235448E13A994FFBBB484D3F2B5CA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142861.roa
Signing time: Fri 22 May 2026 02:47:34 +0000
ROA not before: Fri 22 May 2026 02:42:34 +0000
ROA not after: Fri 21 May 2027 02:47:34 +0000
asID: 142861
IP address blocks: 240a:a0d3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:39:3f:d1:0a:c2:35:44:8e:13:a9:94:ff:bb:b4:84:d3:f2:b5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:34 2026 GMT
Not After : May 21 02:47:34 2027 GMT
Subject: CN=6838D89EE5903875ABC84FF57ABE159DFDBFA815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:7e:73:ef:db:f8:c8:8f:9b:e1:7f:34:09:
8f:0e:6a:18:6c:20:f6:f6:d1:ca:d1:b5:86:8e:f1:
07:cd:27:6c:10:97:26:1c:6c:68:ff:ae:35:92:db:
f8:ca:4f:45:1f:90:e9:80:2e:b4:fb:6b:e9:54:77:
25:2a:89:b9:69:83:fb:11:89:42:94:c0:19:b7:89:
3b:0a:95:d6:0e:2e:d3:9d:75:6b:34:3e:cb:29:bb:
d8:19:07:2b:22:b6:8c:ad:bb:35:ed:f4:ac:bb:de:
ac:04:57:2a:03:cf:e4:ca:3e:77:8f:1c:7d:29:57:
e1:e3:e3:e8:bf:ab:e1:35:2c:41:88:50:1e:69:7e:
f1:db:4c:f0:04:82:fb:1d:47:56:e9:5b:5e:3e:ba:
f5:a9:81:4d:41:a7:3a:e3:da:ed:5f:d1:d7:3b:91:
66:68:04:64:85:78:ec:ce:80:71:1c:7c:e7:fb:81:
40:81:da:08:35:39:54:8f:b7:a4:5e:e8:3b:83:83:
78:0c:15:26:a7:b7:a7:14:03:f6:07:2a:8f:be:7c:
30:ed:4c:81:cd:cd:37:c1:24:9c:42:cd:fc:b5:bd:
d7:e4:77:c0:29:a9:7d:a9:c1:c0:92:6d:ce:ed:41:
18:bb:9f:70:64:46:8d:64:e3:8b:05:46:d3:3a:dd:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:38:D8:9E:E5:90:38:75:AB:C8:4F:F5:7A:BE:15:9D:FD:BF:A8:15
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142861.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0d3::/32
Signature Algorithm: sha256WithRSAEncryption
8f:bf:27:a4:27:0d:a3:04:42:de:61:b6:59:a2:bd:e5:46:25:
f2:f5:22:1b:ed:be:cb:48:8b:9c:48:cd:71:c8:ed:b3:c4:b1:
ce:96:a7:b2:68:a1:c1:29:ff:6a:91:56:04:f9:e3:2a:5a:63:
f4:a0:23:6c:9b:cc:18:e9:4d:e5:e1:23:f8:25:22:93:d3:8b:
e0:74:c3:d0:01:2c:8b:c7:d2:c2:69:2b:99:0b:3f:c8:60:5d:
fb:11:c4:9b:db:f3:c0:90:65:78:c1:72:7d:19:bd:b0:0e:c8:
40:7f:ad:51:ff:7f:24:95:8c:5e:2b:ed:20:09:31:3a:45:06:
e7:01:51:fa:5d:6c:16:0e:d8:2e:d4:6b:fb:26:74:a3:62:3a:
4a:f5:ae:d8:ab:c1:72:b4:71:fc:f3:e5:fd:32:65:7f:6b:82:
45:a1:8c:bf:b1:95:fa:a6:0b:f8:72:ee:b7:58:ba:9e:e3:68:
68:f8:9f:6e:99:86:49:e5:c4:d2:4c:44:80:06:55:bd:28:ba:
b8:48:35:cf:ff:5f:75:45:f3:4a:16:5e:f6:b4:7e:33:ac:8f:
80:d2:50:2c:77:ec:45:1a:6e:df:59:cf:1a:ae:88:17:31:66:
94:e3:89:32:12:39:f9:57:5b:22:94:9c:76:e3:ad:76:4d:d8:
67:57:61:98
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcjk/0QrCNUSOE6mU/7u0hNPytcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMzRaFw0yNzA1MjEwMjQ3MzRaMDMxMTAvBgNV
BAMTKDY4MzhEODlFRTU5MDM4NzVBQkM4NEZGNTdBQkUxNTlERkRCRkE4MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0an5z79v4yI+b4X80CY8Oahhs
IPb20crRtYaO8QfNJ2wQlyYcbGj/rjWS2/jKT0UfkOmALrT7a+lUdyUqiblpg/sR
iUKUwBm3iTsKldYOLtOddWs0Psspu9gZBysitoytuzXt9Ky73qwEVyoDz+TKPneP
HH0pV+Hj4+i/q+E1LEGIUB5pfvHbTPAEgvsdR1bpW14+uvWpgU1Bpzrj2u1f0dc7
kWZoBGSFeOzOgHEcfOf7gUCB2gg1OVSPt6Re6DuDg3gMFSant6cUA/YHKo++fDDt
TIHNzTfBJJxCzfy1vdfkd8ApqX2pwcCSbc7tQRi7n3BkRo1k44sFRtM63VFBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUaDjYnuWQOHWryE/1er4Vnf2/qBUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyODYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqg0zANBgkqhkiG9w0BAQsFAAOCAQEAj78n
pCcNowRC3mG2WaK95UYl8vUiG+2+y0iLnEjNccjts8SxzpansmihwSn/apFWBPnj
Klpj9KAjbJvMGOlN5eEj+CUik9OL4HTD0AEsi8fSwmkrmQs/yGBd+xHEm9vzwJBl
eMFyfRm9sA7IQH+tUf9/JJWMXivtIAkxOkUG5wFR+l1sFg7YLtRr+yZ0o2I6SvWu
2KvBcrRx/PPl/TJlf2uCRaGMv7GV+qYL+HLut1i6nuNoaPifbpmGSeXE0kxEgAZV
vSi6uEg1z/9fdUXzShZe9rR+M6yPgNJQLHfsRRpu31nPGq6IFzFmlOOJMhI5+Vdb
IpScduOtdk3YZ1dhmA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:11 2026 by rpki-client