Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142932.roa
File: AS142932.roa (raw, json)
Hash identifier: dKxzi51JkmAuszxSMTc7jMTNzu3xt33TnKh/yECZ88g=
Subject key identifier: C1:25:CD:F6:B9:3E:E0:D4:46:73:DA:16:32:E7:CB:91:57:7E:9F:28
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2869E4C4D1912681A9C72A65E6A6AB230582061A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142932.roa
Signing time: Mon 25 May 2026 06:28:44 +0000
ROA not before: Mon 25 May 2026 06:23:44 +0000
ROA not after: Mon 24 May 2027 06:28:44 +0000
asID: 142932
IP address blocks: 240a:a11a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:69:e4:c4:d1:91:26:81:a9:c7:2a:65:e6:a6:ab:23:05:82:06:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:44 2026 GMT
Not After : May 24 06:28:44 2027 GMT
Subject: CN=C125CDF6B93EE0D44673DA1632E7CB91577E9F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a2:87:a0:6a:91:86:b6:f8:3e:0e:61:1d:3d:
58:64:98:0a:24:f4:e1:a3:40:66:71:d3:cc:54:77:
08:05:58:01:4c:c6:f7:c9:99:d9:e1:6f:d5:6e:e3:
0b:3f:4c:a8:2f:ec:0f:82:82:2d:cc:f4:dd:f8:70:
b1:7f:b0:a7:82:2f:b8:1a:0f:1c:93:df:df:93:48:
04:f7:3a:60:02:e5:8d:67:14:f4:c6:8c:53:f9:69:
75:0a:df:6a:69:5f:db:8f:3c:b7:54:bd:10:3c:cd:
22:33:bb:5b:34:f5:87:da:68:ca:4f:ae:17:18:3c:
8e:6e:a8:41:ef:de:0d:e1:c5:12:be:1b:d7:25:2a:
ca:1e:76:1a:1c:28:d2:cc:f4:18:ce:9c:3d:95:ef:
c1:fa:95:db:8b:5f:2e:81:dd:07:ea:bb:c2:7a:8f:
2d:60:1d:0d:ff:ce:cf:37:7d:e7:54:32:b7:0c:22:
5a:40:43:28:6b:76:11:1b:9e:0b:e4:13:e2:1c:db:
bc:ca:f2:a4:eb:10:b3:f4:7d:c0:0d:48:30:dd:6d:
4b:1a:da:f9:06:e8:30:22:43:5f:c9:62:6d:1d:60:
53:3f:50:c5:7a:9e:b2:ff:0d:c1:09:b3:53:a8:11:
f1:bd:4a:53:dc:f3:6c:da:5c:2b:28:b6:ad:48:23:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:25:CD:F6:B9:3E:E0:D4:46:73:DA:16:32:E7:CB:91:57:7E:9F:28
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a11a::/32
Signature Algorithm: sha256WithRSAEncryption
6f:c0:be:12:08:63:1a:32:a7:cd:8b:04:1f:01:66:1b:4f:1b:
c4:e8:41:bd:c6:13:ff:06:68:e7:70:84:9c:ce:d3:77:54:78:
ba:75:17:90:9d:b6:a0:0c:95:26:cb:ce:4f:22:9d:12:21:35:
25:f0:43:d9:89:08:d5:29:2b:09:81:fa:ff:87:c0:f2:a6:46:
eb:a5:04:48:10:b3:5e:ee:4f:90:c0:e0:34:cf:36:5e:a1:3a:
fb:82:c7:16:6c:99:06:15:4f:8b:39:b6:e3:05:dd:84:a9:6e:
b6:82:5a:fa:aa:d0:3c:30:43:e6:43:05:95:ed:00:5d:78:de:
69:c4:40:8d:98:22:ce:17:a3:6f:f9:a6:9b:28:15:03:c2:b3:
3b:20:c1:a0:04:6d:c3:52:ad:7d:7c:da:f9:6f:d7:67:68:b3:
75:96:a3:52:e7:8d:94:aa:15:f6:9d:d3:38:49:32:88:ad:c0:
2f:1a:1e:b0:32:d5:32:fa:16:19:f1:2a:4b:7c:1d:4d:0b:7e:
f1:83:5f:05:53:de:05:9f:68:e8:eb:49:e0:a5:d8:62:a4:83:
81:a8:ee:af:36:b2:72:e1:61:46:e4:1b:a0:9c:e4:99:eb:cf:
03:48:61:41:b1:c0:99:6a:fc:86:82:c0:fc:7c:df:37:1f:21:
9a:e6:cb:21
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKGnkxNGRJoGpxypl5qarIwWCBhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzNDRaFw0yNzA1MjQwNjI4NDRaMDMxMTAvBgNV
BAMTKEMxMjVDREY2QjkzRUUwRDQ0NjczREExNjMyRTdDQjkxNTc3RTlGMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoooegapGGtvg+DmEdPVhkmAok
9OGjQGZx08xUdwgFWAFMxvfJmdnhb9Vu4ws/TKgv7A+Cgi3M9N34cLF/sKeCL7ga
DxyT39+TSAT3OmAC5Y1nFPTGjFP5aXUK32ppX9uPPLdUvRA8zSIzu1s09YfaaMpP
rhcYPI5uqEHv3g3hxRK+G9clKsoedhocKNLM9BjOnD2V78H6lduLXy6B3Qfqu8J6
jy1gHQ3/zs83fedUMrcMIlpAQyhrdhEbngvkE+Ic27zK8qTrELP0fcANSDDdbUsa
2vkG6DAiQ1/JYm0dYFM/UMV6nrL/DcEJs1OoEfG9SlPc82zaXCsotq1II2rdAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUwSXN9rk+4NRGc9oWMufLkVd+nygwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhGjANBgkqhkiG9w0BAQsFAAOCAQEAb8C+
EghjGjKnzYsEHwFmG08bxOhBvcYT/wZo53CEnM7Td1R4unUXkJ22oAyVJsvOTyKd
EiE1JfBD2YkI1SkrCYH6/4fA8qZG66UESBCzXu5PkMDgNM82XqE6+4LHFmyZBhVP
izm24wXdhKlutoJa+qrQPDBD5kMFle0AXXjeacRAjZgizhejb/mmmygVA8KzOyDB
oARtw1KtfXza+W/XZ2izdZajUueNlKoV9p3TOEkyiK3ALxoesDLVMvoWGfEqS3wd
TQt+8YNfBVPeBZ9o6OtJ4KXYYqSDgajurzaycuFhRuQboJzkmevPA0hhQbHAmWr8
hoLA/HzfNx8hmubLIQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:48 2026 by rpki-client