Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142919.roa
File: AS142919.roa (raw, json)
Hash identifier: kmS+p/DMstSThAXPQKBPYeNHc/Et1UYScDiYU1atIUE=
Subject key identifier: 32:DF:EC:6B:86:4B:E7:16:BF:DB:2A:CD:5E:81:46:14:B8:7F:FE:BC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1FC41C5E1CA3B76AC6206B30A5B794F85CC483A9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142919.roa
Signing time: Fri 22 May 2026 04:08:23 +0000
ROA not before: Fri 22 May 2026 04:03:23 +0000
ROA not after: Fri 21 May 2027 04:08:23 +0000
asID: 142919
IP address blocks: 240a:a10d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c4:1c:5e:1c:a3:b7:6a:c6:20:6b:30:a5:b7:94:f8:5c:c4:83:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:23 2026 GMT
Not After : May 21 04:08:23 2027 GMT
Subject: CN=32DFEC6B864BE716BFDB2ACD5E814614B87FFEBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:16:2f:27:22:9a:ad:65:05:0d:02:f0:35:
93:58:62:ed:fe:d2:13:ad:e4:a6:77:08:c0:55:91:
f0:47:8e:da:59:11:c2:43:b5:ff:29:00:79:45:94:
d9:b5:6e:aa:f3:1c:78:fb:52:b4:74:50:88:32:f4:
4e:66:08:26:a9:0a:80:31:27:e8:a6:40:be:4a:62:
b5:bf:41:a4:79:a6:7e:d5:32:5b:d3:cb:d4:58:09:
ab:0b:c5:07:43:b3:aa:a0:0f:b9:82:c0:2d:0b:a2:
0c:dd:ef:e7:98:22:35:4b:f3:fa:35:64:e4:d0:c0:
61:da:e6:01:d1:df:3d:6e:c8:7d:eb:6d:a3:4c:8a:
1a:89:f5:74:15:5b:2e:18:d8:4b:4a:86:65:74:69:
e1:66:77:51:ae:28:22:87:02:d1:95:8e:02:9b:a7:
72:46:6f:56:c6:e5:7b:0e:9a:49:d6:d3:ed:06:bf:
a9:75:c2:a5:c0:79:65:a6:77:33:c1:45:92:09:83:
c7:d9:d1:97:4c:c8:79:65:d3:cd:a5:9c:ad:e9:da:
eb:2d:81:4c:fb:6c:da:19:c5:49:f4:40:31:f9:4d:
ca:95:e4:fb:44:b2:b4:13:b8:0a:a5:33:e8:c6:37:
c2:17:b2:fe:f3:ee:da:02:8f:a4:ae:bd:2b:54:72:
3f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DF:EC:6B:86:4B:E7:16:BF:DB:2A:CD:5E:81:46:14:B8:7F:FE:BC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142919.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a10d::/32
Signature Algorithm: sha256WithRSAEncryption
12:d0:11:6c:d0:07:a2:ff:b2:3c:97:f4:7e:ae:9b:c7:8e:e5:
34:bd:f4:e5:c0:1a:b5:e0:69:22:3d:8f:28:b4:50:34:39:d6:
81:37:21:78:b3:08:cf:be:f3:a7:17:77:b1:0d:d1:21:5d:29:
eb:74:1b:f2:67:7c:f7:bd:21:98:3c:5d:7f:2f:86:05:b3:ec:
6b:e8:2a:cf:ec:2e:0e:ed:22:47:ee:a7:68:23:c7:76:dd:83:
33:f2:75:13:bc:82:86:5a:17:d2:ce:58:28:b9:85:6f:26:31:
6a:bb:ee:da:28:b0:46:4b:ac:a7:92:37:68:c5:83:d4:f8:75:
77:9f:70:df:4a:3b:ff:58:4c:50:6d:5e:7e:21:6d:36:e6:8c:
a4:30:3a:d6:13:1f:f5:8f:2e:f6:3d:e4:af:04:64:36:f4:e8:
fe:e3:ce:e5:83:0a:59:45:4d:99:4a:c7:9e:ef:6b:14:9e:1f:
51:ea:41:26:ce:ce:47:f5:33:82:10:ae:91:2b:92:e6:f9:69:
f1:d4:87:14:02:04:6c:e1:83:87:4c:06:09:12:3e:58:96:3b:
66:ea:53:d3:6b:ec:36:a7:6c:5c:bd:25:6d:44:dc:df:b4:57:
b8:33:3e:e2:60:7c:b3:f6:cd:6a:f0:8a:c9:31:b4:77:52:1b:
5e:1e:65:d6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUH8QcXhyjt2rGIGswpbeU+FzEg6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMjNaFw0yNzA1MjEwNDA4MjNaMDMxMTAvBgNV
BAMTKDMyREZFQzZCODY0QkU3MTZCRkRCMkFDRDVFODE0NjE0Qjg3RkZFQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFyRYvJyKarWUFDQLwNZNYYu3+
0hOt5KZ3CMBVkfBHjtpZEcJDtf8pAHlFlNm1bqrzHHj7UrR0UIgy9E5mCCapCoAx
J+imQL5KYrW/QaR5pn7VMlvTy9RYCasLxQdDs6qgD7mCwC0Logzd7+eYIjVL8/o1
ZOTQwGHa5gHR3z1uyH3rbaNMihqJ9XQVWy4Y2EtKhmV0aeFmd1GuKCKHAtGVjgKb
p3JGb1bG5XsOmknW0+0Gv6l1wqXAeWWmdzPBRZIJg8fZ0ZdMyHll082lnK3p2ust
gUz7bNoZxUn0QDH5TcqV5PtEsrQTuAqlM+jGN8IXsv7z7toCj6SuvStUcj9xAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUMt/sa4ZL5xa/2yrNXoFGFLh//rwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTE5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhDTANBgkqhkiG9w0BAQsFAAOCAQEAEtAR
bNAHov+yPJf0fq6bx47lNL305cAateBpIj2PKLRQNDnWgTcheLMIz77zpxd3sQ3R
IV0p63Qb8md8970hmDxdfy+GBbPsa+gqz+wuDu0iR+6naCPHdt2DM/J1E7yChloX
0s5YKLmFbyYxarvu2iiwRkusp5I3aMWD1Ph1d59w30o7/1hMUG1efiFtNuaMpDA6
1hMf9Y8u9j3krwRkNvTo/uPO5YMKWUVNmUrHnu9rFJ4fUepBJs7OR/UzghCukSuS
5vlp8dSHFAIEbOGDh0wGCRI+WJY7ZupT02vsNqdsXL0lbUTc37RXuDM+4mB8s/bN
avCKyTG0d1IbXh5l1g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:21 2026 by rpki-client