Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142899.roa
File: AS142899.roa (raw, json)
Hash identifier: BPYZjCQ0E2ELORr+xZTeaVcohXtUBAtLGREiQqMo6/U=
Subject key identifier: A8:95:FC:7B:62:8A:EC:02:69:8A:AE:71:44:68:D3:4A:CC:9D:BD:C0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 101ABB0E53A3E323BC8BABFB7D6DE5502101B0F7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142899.roa
Signing time: Fri 22 May 2026 07:32:19 +0000
ROA not before: Fri 22 May 2026 07:27:19 +0000
ROA not after: Fri 21 May 2027 07:32:19 +0000
asID: 142899
IP address blocks: 240a:a0f9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:1a:bb:0e:53:a3:e3:23:bc:8b:ab:fb:7d:6d:e5:50:21:01:b0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:19 2026 GMT
Not After : May 21 07:32:19 2027 GMT
Subject: CN=A895FC7B628AEC02698AAE714468D34ACC9DBDC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:e4:10:78:6f:03:bc:81:31:c7:a7:97:b9:
72:16:7d:b7:d3:4b:a2:7a:e8:c3:bd:20:04:d3:43:
7f:47:f0:16:31:a5:62:1c:74:24:a7:65:90:a5:1e:
84:82:0d:a9:b1:49:5c:79:03:31:40:d6:03:2c:99:
4a:b1:01:d2:94:d3:ee:a7:e6:de:83:d7:22:7b:d4:
db:25:04:91:4d:9a:7f:b6:9b:43:40:a6:45:ab:1e:
e7:53:46:ef:2f:4a:4e:d2:87:85:95:28:b9:73:37:
c7:85:19:93:1c:66:18:c2:af:cc:dd:1f:6f:3a:9b:
b2:55:0a:99:be:e0:d9:1c:73:29:09:3a:08:25:72:
24:da:05:c6:bd:65:6b:fb:c0:f3:d5:39:a0:f2:04:
50:d5:a0:92:34:a0:45:8d:85:71:52:5b:16:c0:25:
1b:4d:cf:80:52:c4:d7:fc:a0:bd:60:3a:75:1c:65:
10:ba:f4:d7:42:7f:ec:8b:ec:67:90:77:e3:ee:19:
c3:4b:b0:80:44:54:f1:b8:b2:a5:33:0e:b5:d6:8b:
db:31:f1:60:8c:58:09:72:cd:3c:2c:f1:ab:03:9c:
cd:4e:08:8f:fd:0e:b7:8d:14:7f:e7:c6:f4:36:47:
39:1f:7c:d7:9a:b2:6d:05:e2:64:7c:7a:5f:37:2f:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:95:FC:7B:62:8A:EC:02:69:8A:AE:71:44:68:D3:4A:CC:9D:BD:C0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0f9::/32
Signature Algorithm: sha256WithRSAEncryption
97:3e:c7:44:9c:a8:18:e3:67:d9:ca:8d:ce:ba:11:ac:69:e6:
ec:07:f8:12:91:65:76:a4:18:29:c2:f3:63:b0:d0:31:e7:ea:
45:90:e6:08:3d:5c:29:94:50:b2:ac:fd:e7:f8:29:46:ea:e6:
95:64:e1:34:e8:21:55:dc:38:46:56:03:e8:0b:98:63:40:72:
8c:cc:f3:17:dd:f8:53:50:9a:35:3f:fd:cd:f5:90:37:10:0f:
bb:ec:64:86:40:b5:c4:54:bb:9c:bb:27:5a:5d:b1:51:e3:cf:
7e:4c:57:05:90:f8:9c:92:2e:a8:8e:35:10:eb:0c:13:ff:95:
60:a6:7d:92:8b:b7:4a:3f:7f:d0:34:43:f4:ad:03:d3:c5:b0:
7d:49:46:cf:5e:b3:1e:ec:41:58:1d:22:5c:96:e6:5f:d2:3e:
ae:78:eb:d4:cf:b7:92:e2:52:80:39:7e:f4:c0:90:e0:cc:d1:
d7:10:42:54:b4:a8:0b:c7:23:23:34:20:1b:a3:b7:9e:35:a9:
12:f8:90:3a:fd:9e:1c:10:5e:84:b1:95:39:fa:81:f1:26:5e:
72:82:b1:b4:e7:b4:0d:37:39:ed:e3:a5:03:d3:f9:32:68:42:
c6:00:e1:35:66:d7:42:0f:e6:a1:4d:49:70:08:95:db:f0:49:
1a:28:51:15
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUEBq7DlOj4yO8i6v7fW3lUCEBsPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MTlaFw0yNzA1MjEwNzMyMTlaMDMxMTAvBgNV
BAMTKEE4OTVGQzdCNjI4QUVDMDI2OThBQUU3MTQ0NjhEMzRBQ0M5REJEQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaeQQeG8DvIExx6eXuXIWfbfT
S6J66MO9IATTQ39H8BYxpWIcdCSnZZClHoSCDamxSVx5AzFA1gMsmUqxAdKU0+6n
5t6D1yJ71NslBJFNmn+2m0NApkWrHudTRu8vSk7Sh4WVKLlzN8eFGZMcZhjCr8zd
H286m7JVCpm+4NkccykJOgglciTaBca9ZWv7wPPVOaDyBFDVoJI0oEWNhXFSWxbA
JRtNz4BSxNf8oL1gOnUcZRC69NdCf+yL7GeQd+PuGcNLsIBEVPG4sqUzDrXWi9sx
8WCMWAlyzTws8asDnM1OCI/9DreNFH/nxvQ2RzkffNeasm0F4mR8el83LwwzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUqJX8e2KK7AJpiq5xRGjTSsydvcAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyODk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqg+TANBgkqhkiG9w0BAQsFAAOCAQEAlz7H
RJyoGONn2cqNzroRrGnm7Af4EpFldqQYKcLzY7DQMefqRZDmCD1cKZRQsqz95/gp
RurmlWThNOghVdw4RlYD6AuYY0ByjMzzF934U1CaNT/9zfWQNxAPu+xkhkC1xFS7
nLsnWl2xUePPfkxXBZD4nJIuqI41EOsME/+VYKZ9kou3Sj9/0DRD9K0D08WwfUlG
z16zHuxBWB0iXJbmX9I+rnjr1M+3kuJSgDl+9MCQ4MzR1xBCVLSoC8cjIzQgG6O3
njWpEviQOv2eHBBehLGVOfqB8SZecoKxtOe0DTc57eOlA9P5MmhCxgDhNWbXQg/m
oU1JcAiV2/BJGihRFQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:01 2026 by rpki-client