Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142921.roa
File: AS142921.roa (raw, json)
Hash identifier: zIP67x5zkn8smsctESERthuJ+ViMJEH1Je4//ENZAGI=
Subject key identifier: 08:CB:C0:05:83:9B:AC:F1:2B:9F:26:84:97:C3:24:14:E1:FC:57:64
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4FF6E5B56F1311E0E2AE2A7901596E0E534925F5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142921.roa
Signing time: Fri 22 May 2026 06:05:24 +0000
ROA not before: Fri 22 May 2026 06:00:24 +0000
ROA not after: Fri 21 May 2027 06:05:24 +0000
asID: 142921
IP address blocks: 240a:a10f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f6:e5:b5:6f:13:11:e0:e2:ae:2a:79:01:59:6e:0e:53:49:25:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:24 2026 GMT
Not After : May 21 06:05:24 2027 GMT
Subject: CN=08CBC005839BACF12B9F268497C32414E1FC5764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:98:9d:65:52:5e:62:3c:65:22:b2:2b:02:
d7:b7:f2:77:6c:fd:78:f3:08:62:1c:cf:54:1a:64:
67:e4:9c:2a:d1:fe:a1:07:8f:08:0d:e3:ff:17:f8:
a9:d6:6a:dc:a6:ee:b6:e4:8d:17:f2:99:94:1c:b3:
5e:b6:29:28:16:33:fa:88:99:18:1e:c7:d2:44:60:
08:fd:1d:1f:eb:f2:71:c7:7e:3d:9d:a3:5e:57:14:
d7:0b:0a:33:40:3d:26:08:d6:84:6b:87:ac:cd:17:
8c:07:19:76:0b:db:b7:fa:58:f3:62:c3:38:14:8c:
17:f6:2e:04:0f:ed:53:b9:56:27:aa:38:16:18:fa:
33:37:47:87:a4:5b:2a:5d:4d:f9:01:b1:29:ca:d3:
51:e0:c1:28:09:df:76:db:94:aa:4f:88:7e:1a:9e:
fb:ec:16:9a:fd:18:c0:56:26:7b:d2:f8:8c:de:aa:
87:d8:b5:9d:24:c6:d4:bd:03:aa:99:48:23:b0:f8:
b7:b7:9d:93:ce:3f:d0:31:4b:5c:e1:dc:30:b0:8e:
03:7f:3e:bc:22:2e:5e:0e:72:3e:07:00:a7:4e:be:
d3:e7:8d:bb:b7:75:44:7c:7f:82:e5:f1:fd:c7:a6:
6f:d8:a1:d6:75:f2:84:45:ad:d9:c3:9a:94:c3:74:
90:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CB:C0:05:83:9B:AC:F1:2B:9F:26:84:97:C3:24:14:E1:FC:57:64
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142921.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a10f::/32
Signature Algorithm: sha256WithRSAEncryption
05:0d:9b:72:c5:71:3d:94:c1:bf:05:4d:30:da:2a:6e:dd:02:
dd:5b:7a:9f:1a:57:75:3b:77:71:07:0f:8c:e6:c3:2e:ff:5e:
99:d6:19:ee:0e:3d:da:08:cd:81:4b:c9:2f:1f:1d:86:31:f3:
31:32:f2:9f:d7:2f:2f:2c:dc:53:bc:e3:79:b9:8f:e8:98:07:
17:bd:d3:d4:6f:04:0a:71:1f:5c:0e:f2:d2:30:9f:15:62:9a:
6f:1c:c4:71:0c:cc:a5:57:dd:18:73:63:29:78:e5:87:cd:75:
ed:0d:3b:3e:62:0f:22:ad:4a:0a:79:4d:10:94:c6:f5:d0:1c:
dc:18:45:f3:d9:a5:c3:09:d9:55:e2:61:e2:a4:1c:93:22:0a:
43:92:fe:2c:fd:90:9e:20:de:5a:29:3b:7b:d5:25:f8:46:18:
b2:3d:10:ad:07:70:9f:a9:d9:25:70:5a:65:9d:17:cc:ba:dd:
4a:58:11:2c:36:48:f7:d9:bd:9f:1a:a1:85:67:0b:ec:80:86:
83:0e:79:4a:8e:78:c0:32:51:85:d0:2a:fc:d1:12:75:10:38:
49:99:38:ce:b5:ec:55:21:f6:ee:c4:28:51:26:6d:a0:21:21:
27:c3:24:f5:28:d2:b3:d9:05:a7:bd:3e:35:76:e5:21:3f:b9:
57:86:2e:f7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUT/bltW8TEeDirip5AVluDlNJJfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMjRaFw0yNzA1MjEwNjA1MjRaMDMxMTAvBgNV
BAMTKDA4Q0JDMDA1ODM5QkFDRjEyQjlGMjY4NDk3QzMyNDE0RTFGQzU3NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCls5idZVJeYjxlIrIrAte38nds
/XjzCGIcz1QaZGfknCrR/qEHjwgN4/8X+KnWatym7rbkjRfymZQcs162KSgWM/qI
mRgex9JEYAj9HR/r8nHHfj2do15XFNcLCjNAPSYI1oRrh6zNF4wHGXYL27f6WPNi
wzgUjBf2LgQP7VO5VieqOBYY+jM3R4ekWypdTfkBsSnK01HgwSgJ33bblKpPiH4a
nvvsFpr9GMBWJnvS+IzeqofYtZ0kxtS9A6qZSCOw+Le3nZPOP9AxS1zh3DCwjgN/
PrwiLl4Ocj4HAKdOvtPnjbu3dUR8f4Ll8f3Hpm/YodZ18oRFrdnDmpTDdJBNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUCMvABYObrPErnyaEl8MkFOH8V2QwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhDzANBgkqhkiG9w0BAQsFAAOCAQEABQ2b
csVxPZTBvwVNMNoqbt0C3Vt6nxpXdTt3cQcPjObDLv9emdYZ7g492gjNgUvJLx8d
hjHzMTLyn9cvLyzcU7zjebmP6JgHF73T1G8ECnEfXA7y0jCfFWKabxzEcQzMpVfd
GHNjKXjlh8117Q07PmIPIq1KCnlNEJTG9dAc3BhF89mlwwnZVeJh4qQckyIKQ5L+
LP2QniDeWik7e9Ul+EYYsj0QrQdwn6nZJXBaZZ0XzLrdSlgRLDZI99m9nxqhhWcL
7ICGgw55So54wDJRhdAq/NESdRA4SZk4zrXsVSH27sQoUSZtoCEhJ8Mk9SjSs9kF
p70+NXblIT+5V4Yu9w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:35 2026 by rpki-client