Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142866.roa
File: AS142866.roa (raw, json)
Hash identifier: g+E9WXe0GZI8OVrult3Tjtn4948GW7JbT8dSpeqco8k=
Subject key identifier: 30:1F:9C:6E:2D:BF:25:B3:17:41:DC:10:12:A3:4A:07:6D:7E:9E:5E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7B5B7D3A3B53DDBC901256B760B27E4393903F77
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142866.roa
Signing time: Mon 25 May 2026 01:38:37 +0000
ROA not before: Mon 25 May 2026 01:33:37 +0000
ROA not after: Mon 24 May 2027 01:38:37 +0000
asID: 142866
IP address blocks: 240a:a0d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5b:7d:3a:3b:53:dd:bc:90:12:56:b7:60:b2:7e:43:93:90:3f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:37 2026 GMT
Not After : May 24 01:38:37 2027 GMT
Subject: CN=301F9C6E2DBF25B31741DC1012A34A076D7E9E5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:ae:3f:05:b3:c6:e3:00:ed:5b:8d:f9:82:
28:6b:12:ff:14:ff:47:72:6f:38:5c:3b:cf:a5:e0:
90:ed:3d:54:75:1d:03:b0:50:07:64:66:63:8a:52:
50:0c:82:5d:19:dd:2e:d5:93:9f:ff:4b:1b:43:e1:
b5:fa:69:d0:2c:3c:41:45:62:8a:eb:c9:81:62:19:
b8:6a:0d:25:e8:82:12:35:93:b9:25:5e:47:06:41:
75:0e:6d:7d:a7:4e:6a:c0:f5:f8:60:d7:90:b8:27:
8d:17:93:6c:56:8e:89:7e:38:83:8d:75:bb:47:7d:
15:f6:3e:db:8f:ac:29:c4:c8:6f:73:37:c7:8a:a0:
8c:34:bc:9f:1b:5e:74:d8:0d:04:7a:90:83:7a:77:
65:ad:c5:20:0e:bd:b3:f2:e8:83:c2:4b:5c:80:51:
cd:15:79:6a:5e:90:b7:85:94:03:80:cf:fa:80:a7:
82:b1:f1:eb:92:e2:5c:7e:5c:0e:72:df:37:34:67:
f7:88:65:34:89:91:c7:00:6a:85:f3:21:60:22:f4:
e7:ca:65:6f:69:84:3e:1c:cf:65:e0:36:ff:36:d1:
06:b2:dd:79:6f:8c:c0:60:3d:e2:8b:d8:6c:92:8e:
83:5d:eb:03:03:6a:a6:1d:33:bd:fa:1b:98:17:2d:
75:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1F:9C:6E:2D:BF:25:B3:17:41:DC:10:12:A3:4A:07:6D:7E:9E:5E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0d8::/32
Signature Algorithm: sha256WithRSAEncryption
72:af:a3:4d:b6:d3:a6:b7:ad:d6:88:ed:f9:eb:13:b7:b3:79:
83:7c:29:8e:2a:70:b0:2d:0d:d5:b2:86:56:ee:dc:fb:00:d0:
27:d0:50:e1:57:db:1c:1f:ee:f5:f8:1d:b0:03:74:ab:d4:46:
e1:db:33:6c:de:a6:c1:3e:88:ee:db:bd:c3:b2:34:9f:5e:4a:
c6:46:81:dc:27:9a:14:4e:e6:6b:05:d2:d9:48:e2:29:b9:33:
c8:26:40:36:cb:d6:09:4b:47:d4:06:c4:b7:c1:90:be:b1:03:
5f:6d:8c:85:d1:53:21:94:06:a8:08:ca:9b:cc:a3:eb:3e:5d:
56:3d:2f:5e:ba:ec:ae:c0:c3:ee:ec:09:fc:05:48:12:4c:e2:
2e:ba:f5:7a:75:da:e3:cd:e0:40:40:4a:5e:44:ad:00:4a:c1:
ae:58:bf:fa:06:54:c7:30:13:6c:b8:2b:5d:76:a1:4c:1c:e9:
30:86:08:ba:67:d4:9e:d8:97:9d:63:b4:ec:0e:5e:ba:6f:57:
c9:d4:8c:c7:50:ef:f8:0d:df:23:47:d4:48:d1:80:31:05:c6:
97:37:10:71:f3:e5:50:f3:91:53:9a:e6:73:3a:69:8b:7b:8f:
bd:97:84:ca:40:5b:d6:e8:67:b6:3c:fc:16:f7:ce:f3:e9:89:
2d:e8:1a:e0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUe1t9OjtT3byQEla3YLJ+Q5OQP3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMzdaFw0yNzA1MjQwMTM4MzdaMDMxMTAvBgNV
BAMTKDMwMUY5QzZFMkRCRjI1QjMxNzQxREMxMDEyQTM0QTA3NkQ3RTlFNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi7a4/BbPG4wDtW435gihrEv8U
/0dybzhcO8+l4JDtPVR1HQOwUAdkZmOKUlAMgl0Z3S7Vk5//SxtD4bX6adAsPEFF
YorryYFiGbhqDSXoghI1k7klXkcGQXUObX2nTmrA9fhg15C4J40Xk2xWjol+OION
dbtHfRX2PtuPrCnEyG9zN8eKoIw0vJ8bXnTYDQR6kIN6d2WtxSAOvbPy6IPCS1yA
Uc0VeWpekLeFlAOAz/qAp4Kx8euS4lx+XA5y3zc0Z/eIZTSJkccAaoXzIWAi9OfK
ZW9phD4cz2XgNv820Qay3XlvjMBgPeKL2GySjoNd6wMDaqYdM736G5gXLXUrAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUMB+cbi2/JbMXQdwQEqNKB21+nl4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyODY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqg2DANBgkqhkiG9w0BAQsFAAOCAQEAcq+j
TbbTpret1ojt+esTt7N5g3wpjipwsC0N1bKGVu7c+wDQJ9BQ4VfbHB/u9fgdsAN0
q9RG4dszbN6mwT6I7tu9w7I0n15KxkaB3CeaFE7mawXS2UjiKbkzyCZANsvWCUtH
1AbEt8GQvrEDX22MhdFTIZQGqAjKm8yj6z5dVj0vXrrsrsDD7uwJ/AVIEkziLrr1
enXa483gQEBKXkStAErBrli/+gZUxzATbLgrXXahTBzpMIYIumfUntiXnWO07A5e
um9XydSMx1Dv+A3fI0fUSNGAMQXGlzcQcfPlUPORU5rmczppi3uPvZeEykBb1uhn
tjz8FvfO8+mJLega4A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:43 2026 by rpki-client