Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142917.roa
File: AS142917.roa (raw, json)
Hash identifier: eyquwTmDg97/r/10Y5/X/uaVUrBBZx0PPXqrZ+4r0HI=
Subject key identifier: 86:A1:9C:72:75:7F:FC:C2:80:AB:37:36:88:08:DC:7B:51:88:E0:1F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 433AAB4ECD338DE38A8152AD8F42060B1369EA53
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142917.roa
Signing time: Mon 25 May 2026 06:28:48 +0000
ROA not before: Mon 25 May 2026 06:23:48 +0000
ROA not after: Mon 24 May 2027 06:28:48 +0000
asID: 142917
IP address blocks: 240a:a10b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:3a:ab:4e:cd:33:8d:e3:8a:81:52:ad:8f:42:06:0b:13:69:ea:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:48 2026 GMT
Not After : May 24 06:28:48 2027 GMT
Subject: CN=86A19C72757FFCC280AB37368808DC7B5188E01F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:d8:95:45:48:45:2c:d9:d9:e9:d6:e0:af:
52:95:87:b2:89:66:bc:71:e1:c1:89:ed:86:08:6d:
dd:19:9b:79:7f:57:19:4e:c3:d5:d3:77:f0:43:b9:
96:5e:5f:67:2b:dc:06:31:51:35:6d:d4:47:84:d4:
d7:fc:18:1a:d4:b8:99:9b:28:20:4a:aa:fd:6b:a2:
5f:93:6e:a7:b0:c0:aa:3d:01:2b:e2:19:e7:36:1c:
fc:5b:02:78:7b:02:68:92:dd:73:0a:18:13:cd:52:
b1:d3:5e:1b:d2:b9:44:02:90:e9:dc:66:17:87:8c:
a7:3b:5d:59:6e:b9:fa:fd:40:86:4c:5e:ed:32:71:
ab:55:63:29:a8:22:ea:43:28:44:ae:b3:ec:de:f1:
d1:a2:a1:b2:0a:93:90:7b:1a:91:66:32:27:44:e7:
6a:7e:56:d3:af:a8:68:3f:1a:79:58:bc:55:e3:a3:
e8:d9:a5:fa:75:69:0e:d3:fb:e1:4d:c6:54:a8:dc:
e6:a5:59:be:e5:54:c6:db:3b:7d:14:dd:4a:ef:a1:
9a:8f:11:b9:cf:fc:13:a7:35:ef:d3:c0:9c:ea:41:
ad:10:2e:90:c1:eb:97:71:74:c2:38:cc:6c:7f:14:
f5:33:41:0e:b6:14:93:33:9f:6a:17:a1:ef:da:2c:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A1:9C:72:75:7F:FC:C2:80:AB:37:36:88:08:DC:7B:51:88:E0:1F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142917.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a10b::/32
Signature Algorithm: sha256WithRSAEncryption
04:2c:bb:4f:2f:a7:06:5d:85:7c:8d:8b:fa:50:1b:a5:46:7d:
f3:bf:19:c0:29:a8:65:7e:86:d5:44:a8:89:6c:15:9f:1f:56:
35:7e:6b:e3:63:69:81:50:af:5b:a3:ed:08:bf:f4:1d:6c:3f:
3a:b9:37:d6:5b:ad:dd:b2:61:c0:8b:cf:77:74:5d:2a:65:e8:
6c:ee:f7:89:4f:81:b8:da:5f:46:ca:86:9e:3e:45:9a:4c:eb:
51:fc:12:60:29:b7:3e:89:ce:ae:52:2b:ee:ed:17:bd:11:55:
01:70:96:a9:5f:f4:66:69:6d:7c:13:68:28:4e:2a:09:db:34:
13:be:15:32:a4:09:02:a4:0f:65:1a:53:5c:54:ca:01:3b:b5:
97:e1:6c:76:5d:e2:9f:3d:48:4b:38:5e:52:52:57:ba:0b:b6:
23:1e:13:46:ac:2a:a2:9e:f3:52:cc:a8:ad:18:f6:3d:4c:2d:
24:d7:3f:2f:ac:48:c8:da:b4:7a:f6:09:35:00:66:a9:7d:80:
a4:14:c4:86:a7:f0:87:a7:2e:88:2e:4b:6a:3f:59:98:96:47:
69:1d:2b:a7:10:51:90:59:17:01:26:c0:85:88:c9:20:0c:f0:
fc:f4:36:ec:5b:61:7e:39:a4:cb:76:8b:6d:23:0d:c5:eb:c7:
fa:2c:59:bf
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQzqrTs0zjeOKgVKtj0IGCxNp6lMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzNDhaFw0yNzA1MjQwNjI4NDhaMDMxMTAvBgNV
BAMTKDg2QTE5QzcyNzU3RkZDQzI4MEFCMzczNjg4MDhEQzdCNTE4OEUwMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCla9iVRUhFLNnZ6dbgr1KVh7KJ
Zrxx4cGJ7YYIbd0Zm3l/VxlOw9XTd/BDuZZeX2cr3AYxUTVt1EeE1Nf8GBrUuJmb
KCBKqv1rol+TbqewwKo9ASviGec2HPxbAnh7AmiS3XMKGBPNUrHTXhvSuUQCkOnc
ZheHjKc7XVluufr9QIZMXu0ycatVYymoIupDKESus+ze8dGiobIKk5B7GpFmMidE
52p+VtOvqGg/GnlYvFXjo+jZpfp1aQ7T++FNxlSo3OalWb7lVMbbO30U3UrvoZqP
EbnP/BOnNe/TwJzqQa0QLpDB65dxdMI4zGx/FPUzQQ62FJMzn2oXoe/aLIFhAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUhqGccnV//MKAqzc2iAjce1GI4B8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhCzANBgkqhkiG9w0BAQsFAAOCAQEABCy7
Ty+nBl2FfI2L+lAbpUZ9878ZwCmoZX6G1USoiWwVnx9WNX5r42NpgVCvW6PtCL/0
HWw/Ork31lut3bJhwIvPd3RdKmXobO73iU+BuNpfRsqGnj5FmkzrUfwSYCm3PonO
rlIr7u0XvRFVAXCWqV/0ZmltfBNoKE4qCds0E74VMqQJAqQPZRpTXFTKATu1l+Fs
dl3inz1ISzheUlJXugu2Ix4TRqwqop7zUsyorRj2PUwtJNc/L6xIyNq0evYJNQBm
qX2ApBTEhqfwh6cuiC5Laj9ZmJZHaR0rpxBRkFkXASbAhYjJIAzw/PQ27Fthfjmk
y3aLbSMNxevH+ixZvw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:19 2026 by rpki-client