Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142903.roa
File: AS142903.roa (raw, json)
Hash identifier: I6povBdgwgA9XnzgIb2DYaAqIC8w16p+F5m2/r2MHLQ=
Subject key identifier: 1A:96:39:9B:CC:02:DE:10:34:23:A5:C9:09:C8:44:64:05:20:A8:3D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 22EAE02B40C2CAFE89F82BF229EE7CADE3352978
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142903.roa
Signing time: Fri 22 May 2026 07:40:52 +0000
ROA not before: Fri 22 May 2026 07:35:52 +0000
ROA not after: Fri 21 May 2027 07:40:52 +0000
asID: 142903
IP address blocks: 240a:a0fd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ea:e0:2b:40:c2:ca:fe:89:f8:2b:f2:29:ee:7c:ad:e3:35:29:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:52 2026 GMT
Not After : May 21 07:40:52 2027 GMT
Subject: CN=1A96399BCC02DE103423A5C909C844640520A83D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:c4:b2:1e:40:17:55:5a:94:40:da:c1:17:
56:49:00:05:ee:7c:71:5e:d1:24:92:33:c9:fc:a0:
e7:7f:aa:ad:5c:03:84:f4:38:8a:58:96:4b:89:7c:
36:c6:83:a4:4a:c0:fd:07:05:b7:30:39:5e:02:b5:
67:90:d2:38:eb:bd:73:f6:e0:d9:89:a5:4f:bd:8a:
f5:df:37:0e:20:cf:ba:f6:3c:4b:c8:8a:06:26:c0:
33:6a:3a:46:f7:fc:4f:00:e9:d6:5c:95:6e:91:f2:
96:3d:cb:e8:4c:5d:a6:c4:a6:2e:20:c0:d8:2e:63:
fb:6d:68:ad:bf:ed:c6:82:d0:a5:f9:74:1e:1a:03:
fc:bf:7f:00:7e:d6:5c:39:82:e7:76:b0:a9:4b:aa:
69:55:72:02:99:05:e6:6c:99:22:bd:e0:0f:52:a4:
df:dd:f7:9e:e0:56:11:60:a9:8c:89:c8:2f:de:ae:
6e:67:c9:c8:be:33:1f:00:29:14:ae:b5:4c:92:14:
9a:e4:66:33:10:1f:3f:c8:11:a6:a7:04:fc:a7:fa:
46:12:de:6e:d6:51:10:67:36:41:42:fc:b7:61:16:
08:a1:f9:a5:94:28:19:dd:ef:33:ce:f1:cf:55:70:
59:0a:60:7c:01:13:36:d7:46:db:1b:74:7a:0a:e1:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:96:39:9B:CC:02:DE:10:34:23:A5:C9:09:C8:44:64:05:20:A8:3D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142903.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a0fd::/32
Signature Algorithm: sha256WithRSAEncryption
9a:bc:ed:f0:f7:0e:f9:57:ef:4a:0f:57:d7:2f:57:35:8b:20:
8e:3a:05:bc:90:06:ca:77:6c:fc:9e:0e:1f:90:79:aa:b2:d6:
83:84:27:a0:54:51:ab:8d:6f:c8:c3:93:5b:a3:59:fb:b3:6a:
0f:57:ab:b1:18:de:21:88:9b:19:72:87:28:17:f1:d4:54:68:
d3:46:75:e6:54:ab:0b:03:9f:2d:4e:db:13:dd:e8:91:d7:c7:
61:ae:35:9e:ea:a2:81:56:8d:ed:b7:02:92:80:4a:eb:12:4d:
15:86:19:01:80:cb:9b:e3:16:44:0b:35:a3:8d:69:e2:ac:72:
1d:55:7d:aa:47:56:56:10:ee:40:8f:c7:be:01:19:d1:e3:b0:
07:cb:f0:5a:59:1a:fc:95:d9:e4:ea:3a:d1:43:d2:4e:fa:a1:
16:e4:26:db:8c:31:e8:60:4b:f8:1c:45:fc:35:e6:f9:4b:61:
d9:5c:1a:69:27:de:dc:99:d9:1d:54:05:66:30:b8:f4:b8:f9:
28:c9:0a:c9:bb:20:7a:b6:b2:8c:cd:c3:f7:05:e9:ae:43:f8:
fa:ea:4f:cd:8e:7b:a3:3a:68:70:92:72:cf:1b:69:1e:79:47:
45:c8:46:db:f6:54:f5:4c:5f:09:2b:56:73:22:12:4a:15:cd:
86:53:4d:c4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUIurgK0DCyv6J+CvyKe58reM1KXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM1NTJaFw0yNzA1MjEwNzQwNTJaMDMxMTAvBgNV
BAMTKDFBOTYzOTlCQ0MwMkRFMTAzNDIzQTVDOTA5Qzg0NDY0MDUyMEE4M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGMSyHkAXVVqUQNrBF1ZJAAXu
fHFe0SSSM8n8oOd/qq1cA4T0OIpYlkuJfDbGg6RKwP0HBbcwOV4CtWeQ0jjrvXP2
4NmJpU+9ivXfNw4gz7r2PEvIigYmwDNqOkb3/E8A6dZclW6R8pY9y+hMXabEpi4g
wNguY/ttaK2/7caC0KX5dB4aA/y/fwB+1lw5gud2sKlLqmlVcgKZBeZsmSK94A9S
pN/d957gVhFgqYyJyC/erm5nyci+Mx8AKRSutUySFJrkZjMQHz/IEaanBPyn+kYS
3m7WURBnNkFC/LdhFgih+aWUKBnd7zPO8c9VcFkKYHwBEzbXRtsbdHoK4RnvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUGpY5m8wC3hA0I6XJCchEZAUgqD0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTAzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqg/TANBgkqhkiG9w0BAQsFAAOCAQEAmrzt
8PcO+VfvSg9X1y9XNYsgjjoFvJAGynds/J4OH5B5qrLWg4QnoFRRq41vyMOTW6NZ
+7NqD1ersRjeIYibGXKHKBfx1FRo00Z15lSrCwOfLU7bE93okdfHYa41nuqigVaN
7bcCkoBK6xJNFYYZAYDLm+MWRAs1o41p4qxyHVV9qkdWVhDuQI/HvgEZ0eOwB8vw
Wlka/JXZ5Oo60UPSTvqhFuQm24wx6GBL+BxF/DXm+Uth2VwaaSfe3JnZHVQFZjC4
9Lj5KMkKybsgerayjM3D9wXprkP4+upPzY57ozpocJJyzxtpHnlHRchG2/ZU9Uxf
CStWcyISShXNhlNNxA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:14 2026 by rpki-client