Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142915.roa
File: AS142915.roa (raw, json)
Hash identifier: abi3Zfr7q/U2nEbPq2XM+H1EfQIjomeMqdNKzlg7HQA=
Subject key identifier: F8:EC:2D:5C:62:13:8E:42:B9:3A:7D:A2:DC:0E:BC:EB:39:04:90:AF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 47C00509AEA8B5992979BE7AC7355336E22043C6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142915.roa
Signing time: Fri 22 May 2026 02:48:02 +0000
ROA not before: Fri 22 May 2026 02:43:02 +0000
ROA not after: Fri 21 May 2027 02:48:02 +0000
asID: 142915
IP address blocks: 240a:a109::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:c0:05:09:ae:a8:b5:99:29:79:be:7a:c7:35:53:36:e2:20:43:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:02 2026 GMT
Not After : May 21 02:48:02 2027 GMT
Subject: CN=F8EC2D5C62138E42B93A7DA2DC0EBCEB390490AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:02:9d:b5:84:cf:5d:75:40:36:b2:e7:bc:
2a:fb:05:2b:af:92:aa:7a:b6:ca:bc:fc:fc:a2:d4:
6a:5f:92:13:6c:50:28:2e:a4:a9:c0:45:de:7d:80:
2c:09:7a:a2:37:62:ab:41:c4:9d:b9:b3:2f:b9:5f:
a3:a1:cc:c1:6f:29:e9:06:94:6e:5d:12:a9:58:5d:
c4:e8:af:ac:bf:30:e9:a1:a3:b5:3d:d2:b9:ab:d0:
f4:c2:e9:05:b6:cb:9a:1b:7f:ea:9a:c6:c6:37:a4:
ba:21:98:8a:8e:32:5f:2a:8c:d7:a3:55:3b:26:33:
e0:fa:63:69:56:e8:8e:0a:77:b6:42:99:2d:f1:a8:
2f:54:37:60:50:d3:8d:86:f9:cd:b3:6b:36:c4:41:
3b:4c:1d:35:81:a0:18:1f:9d:5e:da:26:32:f7:4e:
0a:35:26:6c:b6:59:53:46:24:f4:c8:c8:4f:b9:1a:
68:11:af:bd:05:b4:44:a9:68:e3:cc:12:ac:70:96:
91:5c:e6:59:c0:36:d0:b9:c4:20:77:a2:14:fa:d1:
95:f5:58:df:f7:ec:03:d5:ba:3e:7a:02:62:7f:e7:
ab:b7:c4:2d:14:b5:20:90:61:4b:df:79:0d:26:61:
0b:4a:ca:1c:93:67:3e:23:20:75:20:31:86:99:61:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:2D:5C:62:13:8E:42:B9:3A:7D:A2:DC:0E:BC:EB:39:04:90:AF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a109::/32
Signature Algorithm: sha256WithRSAEncryption
08:32:c1:16:a8:df:8c:ea:10:aa:36:13:0c:52:9d:cc:8a:e3:
c0:63:91:25:0c:21:12:d6:67:fc:73:3d:9d:7e:a5:3f:df:10:
d6:3c:0c:eb:4c:9b:26:28:db:90:ba:99:9d:93:68:aa:24:ef:
09:72:08:10:05:6f:ec:e5:9d:ff:40:39:ef:d7:b2:ab:79:11:
51:19:d2:6f:6f:d2:17:92:64:a0:9f:47:9e:90:3a:a8:4b:bb:
33:c3:09:56:4c:55:c2:5b:d5:99:c5:69:ff:87:bf:51:f4:9d:
e9:c5:2a:93:7d:e0:47:60:3e:bb:f9:95:03:a6:62:65:08:05:
37:68:88:fd:39:a0:4f:5c:cb:00:7d:83:ed:58:2e:03:d0:88:
04:95:40:9d:4c:81:35:fc:35:15:bf:c7:65:d9:67:b5:3e:03:
db:55:cb:be:37:68:bb:26:2c:99:9f:91:ad:60:ea:11:bb:41:
dd:91:a0:4b:d4:1a:82:30:78:4a:50:0c:74:69:d1:13:f4:17:
b7:61:98:6b:b8:bc:d7:29:bc:81:58:43:15:99:4d:4b:43:f4:
0f:98:75:45:84:ae:06:6a:12:fc:ea:39:13:00:01:2c:8d:af:
10:6c:63:00:d4:1f:48:23:cd:04:02:12:c4:52:d1:70:7e:55:
72:5c:3d:70
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUR8AFCa6otZkpeb56xzVTNuIgQ8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQzMDJaFw0yNzA1MjEwMjQ4MDJaMDMxMTAvBgNV
BAMTKEY4RUMyRDVDNjIxMzhFNDJCOTNBN0RBMkRDMEVCQ0VCMzkwNDkwQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTQKdtYTPXXVANrLnvCr7BSuv
kqp6tsq8/Pyi1GpfkhNsUCgupKnARd59gCwJeqI3YqtBxJ25sy+5X6OhzMFvKekG
lG5dEqlYXcTor6y/MOmho7U90rmr0PTC6QW2y5obf+qaxsY3pLohmIqOMl8qjNej
VTsmM+D6Y2lW6I4Kd7ZCmS3xqC9UN2BQ042G+c2zazbEQTtMHTWBoBgfnV7aJjL3
Tgo1Jmy2WVNGJPTIyE+5GmgRr70FtESpaOPMEqxwlpFc5lnANtC5xCB3ohT60ZX1
WN/37APVuj56AmJ/56u3xC0UtSCQYUvfeQ0mYQtKyhyTZz4jIHUgMYaZYXSZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU+OwtXGITjkK5On2i3A686zkEkK8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhCTANBgkqhkiG9w0BAQsFAAOCAQEACDLB
FqjfjOoQqjYTDFKdzIrjwGORJQwhEtZn/HM9nX6lP98Q1jwM60ybJijbkLqZnZNo
qiTvCXIIEAVv7OWd/0A579eyq3kRURnSb2/SF5JkoJ9HnpA6qEu7M8MJVkxVwlvV
mcVp/4e/UfSd6cUqk33gR2A+u/mVA6ZiZQgFN2iI/TmgT1zLAH2D7VguA9CIBJVA
nUyBNfw1Fb/HZdlntT4D21XLvjdouyYsmZ+RrWDqEbtB3ZGgS9QagjB4SlAMdGnR
E/QXt2GYa7i81ym8gVhDFZlNS0P0D5h1RYSuBmoS/Oo5EwABLI2vEGxjANQfSCPN
BAISxFLRcH5Vclw9cA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:06 2026 by rpki-client