Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142862.roa
File: AS142862.roa (raw, json)
Hash identifier: RQG5ddFmSfTsVowS0WyeQ4tUb0PxdQYK6LxpHlVs4XY=
Subject key identifier: B3:86:86:E9:E6:B7:9B:14:70:23:C9:0C:E2:14:96:40:32:2E:60:4A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 34CDE1D3D7D8E05167C0A0A0F77B7E08FB070487
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142862.roa
Signing time: Fri 22 May 2026 06:05:21 +0000
ROA not before: Fri 22 May 2026 06:00:21 +0000
ROA not after: Fri 21 May 2027 06:05:21 +0000
asID: 142862
IP address blocks: 240a:a0d4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:cd:e1:d3:d7:d8:e0:51:67:c0:a0:a0:f7:7b:7e:08:fb:07:04:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:21 2026 GMT
Not After : May 21 06:05:21 2027 GMT
Subject: CN=B38686E9E6B79B147023C90CE2149640322E604A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:9b:45:71:20:0a:06:92:a7:7c:c6:b9:db:
31:3f:be:e2:82:e8:62:64:2f:7c:f9:19:b6:88:d3:
8b:82:5d:87:6b:14:11:a8:41:56:1d:a2:39:13:cd:
6a:f9:5f:60:de:7c:6c:f4:9c:bf:58:14:24:cd:42:
66:60:77:19:f5:2e:6a:96:9a:ef:26:67:d5:73:5d:
e6:10:d4:91:8a:6d:87:1b:d6:0d:ec:67:d2:fe:64:
5a:2f:79:32:60:96:77:b4:b1:43:83:11:06:1c:9b:
46:bd:31:84:79:d8:69:61:39:03:48:2d:8e:aa:56:
b5:35:29:f6:11:d2:b1:78:c4:c8:7e:c6:63:64:c9:
fb:c3:6c:2b:ef:78:b1:68:bc:e7:6b:aa:a7:4f:f9:
94:71:cb:04:7e:dc:d1:33:b9:6a:c9:01:72:8b:70:
9f:23:ef:e6:a2:fb:c0:c8:14:4d:87:1a:0d:8d:26:
4a:8b:5a:ee:e0:cb:89:2e:0a:93:e6:74:cc:75:26:
cc:59:29:90:d9:9d:6f:e5:b3:6c:30:48:c2:37:05:
2b:98:a1:30:f8:38:11:47:ce:a7:6c:95:c9:b4:be:
e9:0d:71:ae:1e:08:25:e5:a6:f5:af:d5:70:a3:2a:
8f:b3:b6:96:dd:d3:f6:30:c1:ea:2c:34:a4:cb:49:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:86:86:E9:E6:B7:9B:14:70:23:C9:0C:E2:14:96:40:32:2E:60:4A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142862.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0d4::/32
Signature Algorithm: sha256WithRSAEncryption
73:f3:6f:d8:54:6b:b4:a1:da:3d:64:5c:3e:a3:61:7b:e0:90:
02:c3:f5:6c:78:f7:fe:05:4a:55:9d:03:aa:51:9e:40:ff:3a:
33:26:33:56:5c:94:3c:db:9b:85:0e:9c:f0:5f:2d:d0:8f:e9:
61:a4:8d:e4:3a:fd:ab:c0:19:b0:d5:97:fd:84:f2:6e:80:88:
2c:d9:a0:0f:5f:b7:7c:85:51:d4:79:26:50:0a:be:87:d3:9f:
8b:a6:45:49:b7:ee:44:05:64:91:24:a2:b9:e2:4a:f8:ce:55:
11:dd:a2:e0:2f:5f:1a:e9:3c:2c:a6:67:27:85:04:0b:07:2e:
80:d8:b1:d8:57:8d:25:cf:16:9a:ac:35:af:ab:2f:3c:47:f5:
9f:ae:06:74:59:ef:df:07:d7:e0:ba:1b:e3:53:24:f3:2c:c2:
4d:44:9a:9b:f8:c5:f2:af:1c:93:1a:dc:26:7e:f7:66:d9:46:
21:dd:a7:d9:ab:b8:1c:b8:40:ad:cf:74:e1:b8:b3:48:36:55:
2b:0e:e2:96:eb:b2:e7:31:b6:ce:e3:80:29:84:d0:9f:df:10:
85:be:f8:08:84:a5:bb:df:53:b7:fd:89:d7:54:ab:bc:5d:67:
ed:e3:a4:67:c2:c6:59:61:14:3d:a0:33:39:bd:ca:5b:0f:e6:
35:f7:35:22
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUNM3h09fY4FFnwKCg93t+CPsHBIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMjFaFw0yNzA1MjEwNjA1MjFaMDMxMTAvBgNV
BAMTKEIzODY4NkU5RTZCNzlCMTQ3MDIzQzkwQ0UyMTQ5NjQwMzIyRTYwNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9JtFcSAKBpKnfMa52zE/vuKC
6GJkL3z5GbaI04uCXYdrFBGoQVYdojkTzWr5X2DefGz0nL9YFCTNQmZgdxn1LmqW
mu8mZ9VzXeYQ1JGKbYcb1g3sZ9L+ZFoveTJglne0sUODEQYcm0a9MYR52GlhOQNI
LY6qVrU1KfYR0rF4xMh+xmNkyfvDbCvveLFovOdrqqdP+ZRxywR+3NEzuWrJAXKL
cJ8j7+ai+8DIFE2HGg2NJkqLWu7gy4kuCpPmdMx1JsxZKZDZnW/ls2wwSMI3BSuY
oTD4OBFHzqdslcm0vukNca4eCCXlpvWv1XCjKo+ztpbd0/YwweosNKTLSRcpAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUs4aG6ea3mxRwI8kM4hSWQDIuYEowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyODYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqg1DANBgkqhkiG9w0BAQsFAAOCAQEAc/Nv
2FRrtKHaPWRcPqNhe+CQAsP1bHj3/gVKVZ0DqlGeQP86MyYzVlyUPNubhQ6c8F8t
0I/pYaSN5Dr9q8AZsNWX/YTyboCILNmgD1+3fIVR1HkmUAq+h9Ofi6ZFSbfuRAVk
kSSiueJK+M5VEd2i4C9fGuk8LKZnJ4UECwcugNix2FeNJc8Wmqw1r6svPEf1n64G
dFnv3wfX4Lob41Mk8yzCTUSam/jF8q8ckxrcJn73ZtlGId2n2au4HLhArc904biz
SDZVKw7iluuy5zG2zuOAKYTQn98Qhb74CISlu99Tt/2J11SrvF1n7eOkZ8LGWWEU
PaAzOb3KWw/mNfc1Ig==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:41 2026 by rpki-client