Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142885.roa
File: AS142885.roa (raw, json)
Hash identifier: 0J7dn8LL4VdBiEtbc7DTiGb4CsMFU4qqeL1r8N8JRvU=
Subject key identifier: 8C:13:C4:42:49:78:57:2E:FD:0F:5F:F9:2B:E9:A9:33:F6:87:2C:5D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 60D1C78D3D788F020AC002928F746CAF3571F65D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142885.roa
Signing time: Mon 25 May 2026 03:19:44 +0000
ROA not before: Mon 25 May 2026 03:14:44 +0000
ROA not after: Mon 24 May 2027 03:19:44 +0000
asID: 142885
IP address blocks: 240a:a0eb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d1:c7:8d:3d:78:8f:02:0a:c0:02:92:8f:74:6c:af:35:71:f6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:44 2026 GMT
Not After : May 24 03:19:44 2027 GMT
Subject: CN=8C13C4424978572EFD0F5FF92BE9A933F6872C5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:be:28:79:ab:76:5e:fd:3e:24:5e:c3:02:
66:3e:cd:21:70:43:e8:e8:80:9d:41:f7:5b:f1:82:
61:c8:a5:2c:56:80:05:ae:ff:5d:fe:4a:31:61:33:
17:59:8a:6e:f5:f7:54:67:bc:1d:64:c5:e3:be:32:
72:0c:14:64:ef:c9:b9:2e:cf:24:a2:c5:71:08:8c:
e5:b5:95:75:17:6f:b6:64:b1:f5:05:e4:e5:e4:2e:
0d:47:6b:0d:35:33:6d:12:a5:12:68:81:6b:0d:33:
26:e5:ff:d1:d6:af:33:1a:5d:2c:b8:da:40:07:b8:
ef:8f:ee:dd:14:ac:56:0f:9b:04:f2:62:ae:79:ae:
9a:b7:5d:85:6e:72:a4:81:4c:bd:af:e7:8c:b9:e3:
6d:9a:08:ec:d7:46:ee:1a:a3:38:2d:4b:56:13:4e:
f2:e9:ee:af:6e:e7:51:a4:b8:a7:41:51:d2:3f:53:
e6:e3:c6:15:a3:41:47:3b:25:7f:dc:aa:90:02:32:
6e:a1:51:24:0d:f8:e7:c8:f3:89:83:3f:27:2b:ce:
34:b3:31:ce:a4:5d:e7:9f:a2:fd:d7:5b:0b:06:8a:
2e:b3:f1:bd:29:37:c1:ce:96:94:e3:1e:cb:a5:da:
1f:07:bb:ca:67:da:5d:ce:33:38:c8:53:36:d0:30:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:13:C4:42:49:78:57:2E:FD:0F:5F:F9:2B:E9:A9:33:F6:87:2C:5D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0eb::/32
Signature Algorithm: sha256WithRSAEncryption
7b:f8:ce:cd:ce:e1:e5:db:a5:9c:92:3a:2f:74:ac:f5:69:8c:
6a:7c:9f:dc:69:e9:73:22:76:7b:95:27:75:74:0a:10:c2:6f:
51:50:63:9a:6e:bf:1b:73:aa:c8:03:58:30:63:81:1b:b6:a3:
a0:bd:e8:9b:29:2c:bf:7c:18:0d:32:b1:d7:15:cd:f3:ad:a1:
cd:4f:9e:f4:30:18:8a:b4:74:5d:0c:3c:8f:5c:56:b2:a0:77:
10:9f:04:75:81:68:63:25:a2:83:d3:c4:fd:4c:f6:36:e6:ab:
71:68:98:45:69:8f:22:69:4a:02:a4:0b:32:d6:87:a6:0f:24:
dd:cb:89:4c:cc:46:e4:94:8a:6e:6d:53:02:58:0c:18:e5:f1:
5f:2a:f3:18:e5:5f:62:4a:1e:3b:d9:28:9f:f1:29:99:9a:17:
38:70:84:3b:31:c8:e1:6e:68:ae:0d:3c:f4:aa:0b:fe:3f:0a:
29:89:c1:b1:5c:e7:c4:ae:eb:9e:20:21:9f:76:38:9d:78:4c:
6d:ae:41:c1:d4:fd:10:8f:02:d8:39:15:fd:98:80:4f:77:3f:
ef:5d:77:8d:88:13:04:7c:a2:a4:aa:0e:49:b1:dd:0f:87:0b:
b5:4a:99:92:21:20:c8:94:2f:56:9a:f0:63:a3:48:ce:97:c0:
a4:49:f5:82
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYNHHjT14jwIKwAKSj3RsrzVx9l0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0NDRaFw0yNzA1MjQwMzE5NDRaMDMxMTAvBgNV
BAMTKDhDMTNDNDQyNDk3ODU3MkVGRDBGNUZGOTJCRTlBOTMzRjY4NzJDNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzE74oeat2Xv0+JF7DAmY+zSFw
Q+jogJ1B91vxgmHIpSxWgAWu/13+SjFhMxdZim7191RnvB1kxeO+MnIMFGTvybku
zySixXEIjOW1lXUXb7ZksfUF5OXkLg1Haw01M20SpRJogWsNMybl/9HWrzMaXSy4
2kAHuO+P7t0UrFYPmwTyYq55rpq3XYVucqSBTL2v54y5422aCOzXRu4aozgtS1YT
TvLp7q9u51GkuKdBUdI/U+bjxhWjQUc7JX/cqpACMm6hUSQN+OfI84mDPycrzjSz
Mc6kXeefov3XWwsGii6z8b0pN8HOlpTjHsul2h8Hu8pn2l3OMzjIUzbQMJIBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUjBPEQkl4Vy79D1/5K+mpM/aHLF0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyODg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqg6zANBgkqhkiG9w0BAQsFAAOCAQEAe/jO
zc7h5dulnJI6L3Ss9WmManyf3GnpcyJ2e5UndXQKEMJvUVBjmm6/G3OqyANYMGOB
G7ajoL3omyksv3wYDTKx1xXN862hzU+e9DAYirR0XQw8j1xWsqB3EJ8EdYFoYyWi
g9PE/Uz2NuarcWiYRWmPImlKAqQLMtaHpg8k3cuJTMxG5JSKbm1TAlgMGOXxXyrz
GOVfYkoeO9kon/EpmZoXOHCEOzHI4W5org089KoL/j8KKYnBsVznxK7rniAhn3Y4
nXhMba5BwdT9EI8C2DkV/ZiAT3c/7113jYgTBHyipKoOSbHdD4cLtUqZkiEgyJQv
VprwY6NIzpfApEn1gg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:59 2026 by rpki-client