Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142901.roa
File: AS142901.roa (raw, json)
Hash identifier: fPqMmoMSoooVG6LSqDNVeZCr2gHQLhvU1Rd6vy0EMIo=
Subject key identifier: BB:7D:9E:55:9E:F7:AE:C5:EE:3B:F6:37:69:B4:3B:A4:08:F1:90:76
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6D91FC9548A125D74CA0761199077865B6DA7351
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142901.roa
Signing time: Tue 26 May 2026 06:30:26 +0000
ROA not before: Tue 26 May 2026 06:25:26 +0000
ROA not after: Tue 25 May 2027 06:30:26 +0000
asID: 142901
IP address blocks: 240a:a0fb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:91:fc:95:48:a1:25:d7:4c:a0:76:11:99:07:78:65:b6:da:73:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:26 2026 GMT
Not After : May 25 06:30:26 2027 GMT
Subject: CN=BB7D9E559EF7AEC5EE3BF63769B43BA408F19076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:ea:e8:83:a0:01:c5:46:19:12:cf:9d:2d:
6d:c0:a2:49:4c:cd:71:4d:0a:18:71:49:8c:16:8a:
8d:56:8e:5f:7c:51:f3:30:f1:6c:b5:cf:72:85:8d:
e3:c3:38:5f:1c:d9:68:04:ed:d9:83:4b:7f:58:ca:
d6:b6:69:29:a9:42:cb:af:97:8d:4f:30:31:08:c2:
40:62:5c:48:c8:f4:c5:f0:2d:dd:b0:08:46:73:78:
3e:7c:5d:9f:93:3d:3e:34:26:d8:72:2c:07:61:16:
99:fc:a7:94:0b:df:6b:61:4d:74:53:75:a6:92:a0:
13:f2:9a:0d:09:4f:df:f8:0c:df:61:ff:0c:90:b7:
7e:7f:70:eb:61:c2:ce:3a:3c:a4:7b:d4:75:51:d1:
a8:0a:1e:bf:cc:d7:a5:ce:0d:3f:a7:a0:a2:f0:77:
77:1c:6f:5d:d0:bf:b6:a6:40:d4:91:a1:26:11:e6:
bb:39:4c:c5:30:57:11:ef:3d:8a:5f:0f:87:c5:3f:
e6:ff:18:7e:ca:c3:b3:9e:4a:e9:07:7b:2c:ab:19:
15:76:b2:68:83:8b:88:2a:f9:92:a9:77:19:67:48:
d6:b6:7d:16:08:ed:33:ea:f2:0b:82:94:ea:d4:3d:
43:97:b0:a3:c6:e7:ce:af:db:87:34:3b:f4:be:e0:
ed:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7D:9E:55:9E:F7:AE:C5:EE:3B:F6:37:69:B4:3B:A4:08:F1:90:76
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142901.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0fb::/32
Signature Algorithm: sha256WithRSAEncryption
34:dd:e8:9a:6b:c7:53:ff:3c:8e:88:ba:ec:d7:2d:ad:4a:fa:
5b:dc:6a:9a:4a:a2:c0:26:9a:a1:5d:c6:ca:c7:30:16:d1:94:
89:ab:5f:50:ae:b5:4b:5f:c0:8a:33:bf:68:5d:cb:0d:5a:bd:
37:f1:da:ed:e7:56:36:33:9b:c3:c8:5e:55:2d:80:98:84:0d:
dc:d3:94:cf:43:3b:a8:cb:71:f3:9e:1a:3b:fc:de:5d:45:fc:
70:52:d0:ab:35:60:7c:0c:07:66:91:15:5d:11:d1:bb:82:c5:
a0:af:e0:34:64:6c:81:ef:58:f0:cc:d9:3b:9b:e6:a0:be:24:
e3:44:9d:bf:01:24:bd:07:57:76:b0:ca:e3:5a:55:38:0a:8d:
90:c8:52:8c:36:0f:b7:45:ae:99:d8:48:bf:00:28:43:45:7b:
ed:67:5f:83:05:e6:03:fd:a8:81:cf:4c:38:13:6f:ea:9c:ce:
ed:0e:e2:6b:a9:ce:6c:43:b8:38:79:38:d2:96:66:85:00:fc:
50:3f:ec:9f:b5:c8:5f:3f:76:08:64:b2:eb:4e:4a:69:47:51:
4a:c1:5b:64:4b:00:3b:7d:d9:d4:c5:b2:4a:50:39:ed:a8:c7:
00:f7:69:f1:5c:25:52:69:fc:8e:36:78:d6:c8:b8:43:f7:0a:
21:34:f8:93
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUbZH8lUihJddMoHYRmQd4Zbbac1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1MjZaFw0yNzA1MjUwNjMwMjZaMDMxMTAvBgNV
BAMTKEJCN0Q5RTU1OUVGN0FFQzVFRTNCRjYzNzY5QjQzQkE0MDhGMTkwNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPAerog6ABxUYZEs+dLW3AoklM
zXFNChhxSYwWio1Wjl98UfMw8Wy1z3KFjePDOF8c2WgE7dmDS39Yyta2aSmpQsuv
l41PMDEIwkBiXEjI9MXwLd2wCEZzeD58XZ+TPT40JthyLAdhFpn8p5QL32thTXRT
daaSoBPymg0JT9/4DN9h/wyQt35/cOthws46PKR71HVR0agKHr/M16XODT+noKLw
d3ccb13Qv7amQNSRoSYR5rs5TMUwVxHvPYpfD4fFP+b/GH7Kw7OeSukHeyyrGRV2
smiDi4gq+ZKpdxlnSNa2fRYI7TPq8guClOrUPUOXsKPG586v24c0O/S+4O2BAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUu32eVZ73rsXuO/Y3abQ7pAjxkHYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqg+zANBgkqhkiG9w0BAQsFAAOCAQEANN3o
mmvHU/88joi67NctrUr6W9xqmkqiwCaaoV3GyscwFtGUiatfUK61S1/AijO/aF3L
DVq9N/Ha7edWNjObw8heVS2AmIQN3NOUz0M7qMtx854aO/zeXUX8cFLQqzVgfAwH
ZpEVXRHRu4LFoK/gNGRsge9Y8MzZO5vmoL4k40SdvwEkvQdXdrDK41pVOAqNkMhS
jDYPt0WumdhIvwAoQ0V77WdfgwXmA/2ogc9MOBNv6pzO7Q7ia6nObEO4OHk40pZm
hQD8UD/sn7XIXz92CGSy605KaUdRSsFbZEsAO33Z1MWySlA57ajHAPdp8VwlUmn8
jjZ41si4Q/cKITT4kw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:56 2026 by rpki-client