Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142944.roa
File: AS142944.roa (raw, json)
Hash identifier: tLMNuzMP/d7qQjk0hLNomENfuMTTiET6ABPQjhDl7K0=
Subject key identifier: 3F:57:F0:33:6F:DC:A3:25:55:EC:EF:11:48:AE:D5:18:BA:8C:EE:88
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 23AF967A174422CBEAB414EC5FE4F9FB8F02019F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142944.roa
Signing time: Mon 25 May 2026 01:38:01 +0000
ROA not before: Mon 25 May 2026 01:33:01 +0000
ROA not after: Mon 24 May 2027 01:38:01 +0000
asID: 142944
IP address blocks: 240a:a126::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:af:96:7a:17:44:22:cb:ea:b4:14:ec:5f:e4:f9:fb:8f:02:01:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:01 2026 GMT
Not After : May 24 01:38:01 2027 GMT
Subject: CN=3F57F0336FDCA32555ECEF1148AED518BA8CEE88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:a4:ec:34:e8:15:85:a4:7a:4a:de:ff:03:
b0:4b:c4:e7:8c:4b:6c:c6:05:12:92:da:ad:2b:96:
cb:18:ec:7c:9a:b7:c8:7c:c4:5e:4c:38:7c:36:10:
73:fc:db:9d:0f:52:8c:0f:9d:31:70:62:e1:9c:8d:
4a:63:00:dc:e8:44:19:3a:d7:4c:e4:fa:6e:d7:29:
ca:a2:2f:57:32:1f:de:40:fa:d7:20:9f:53:0d:d1:
7f:33:7a:57:3d:bb:76:42:e2:8c:c0:ff:12:e0:17:
82:a4:15:91:16:e5:bf:c9:9c:d9:bf:85:50:ba:27:
e6:d4:44:37:d7:2a:db:66:99:10:1f:99:cd:5b:67:
0a:e9:f8:14:90:16:5d:8e:0e:2e:e6:b4:1d:b5:83:
e1:fe:f6:b1:4a:71:3a:a8:23:f9:c5:fe:5f:1a:18:
e4:ed:f2:3e:4f:b7:d5:5f:9b:b9:2c:50:56:22:20:
61:e6:e9:2d:e3:25:6c:91:9d:a5:d5:d1:aa:d8:46:
81:72:42:48:0a:e2:7a:c8:0e:d6:09:26:e0:4c:aa:
55:7f:ec:06:a1:9d:e9:32:de:0d:ee:29:79:cb:35:
9e:a0:0a:ad:59:b5:c5:12:86:28:a7:3e:0d:28:b5:
83:61:0b:77:6f:ad:50:f8:e5:35:95:11:19:21:9c:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:57:F0:33:6F:DC:A3:25:55:EC:EF:11:48:AE:D5:18:BA:8C:EE:88
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142944.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a126::/32
Signature Algorithm: sha256WithRSAEncryption
4e:9a:e4:bc:db:a8:99:9a:b2:5c:3c:fa:b8:2c:fb:e8:ed:11:
44:57:19:b0:f8:1a:f9:a7:4e:5d:71:93:1f:14:a3:79:49:c7:
22:cf:71:fd:6d:fb:e7:cf:9b:1a:ef:fd:42:bd:0a:86:56:36:
b9:41:80:c6:8c:34:53:64:7b:0d:9b:3d:e9:b0:ef:05:0e:dc:
74:d5:24:55:86:44:d7:03:7d:16:15:f5:f9:93:14:b8:04:85:
07:bc:66:33:5f:c9:a9:59:2c:49:7c:2c:54:58:2c:17:ac:8f:
35:8e:e7:57:08:2f:2e:f5:51:46:9d:37:b4:51:40:e4:a0:ae:
f1:93:84:c9:de:b4:ce:0e:de:21:ed:b7:69:fb:17:b6:9b:80:
ce:23:52:21:bf:c3:e1:ce:b3:44:09:5b:e2:e8:80:48:35:42:
6d:c6:87:7b:1b:3e:d1:d2:85:26:09:1b:b3:20:f2:39:6a:a6:
ef:3e:f1:9e:ed:95:d3:bd:3e:51:55:df:cd:5a:64:81:b1:40:
d1:23:73:c4:0b:63:ff:5b:c0:85:65:cd:5b:c5:46:9e:c4:a8:
6c:c1:a6:a9:ab:ae:21:58:84:36:7f:cd:e5:30:67:4d:a6:45:
92:72:9b:01:16:10:b6:cc:37:f9:4b:d5:8c:3b:40:f7:ea:45:
db:99:76:62
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUI6+WehdEIsvqtBTsX+T5+48CAZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMDFaFw0yNzA1MjQwMTM4MDFaMDMxMTAvBgNV
BAMTKDNGNTdGMDMzNkZEQ0EzMjU1NUVDRUYxMTQ4QUVENTE4QkE4Q0VFODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMXaTsNOgVhaR6St7/A7BLxOeM
S2zGBRKS2q0rlssY7Hyat8h8xF5MOHw2EHP8250PUowPnTFwYuGcjUpjANzoRBk6
10zk+m7XKcqiL1cyH95A+tcgn1MN0X8zelc9u3ZC4ozA/xLgF4KkFZEW5b/JnNm/
hVC6J+bURDfXKttmmRAfmc1bZwrp+BSQFl2ODi7mtB21g+H+9rFKcTqoI/nF/l8a
GOTt8j5Pt9Vfm7ksUFYiIGHm6S3jJWyRnaXV0arYRoFyQkgK4nrIDtYJJuBMqlV/
7Aahneky3g3uKXnLNZ6gCq1ZtcUShiinPg0otYNhC3dvrVD45TWVERkhnP97AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUP1fwM2/coyVV7O8RSK7VGLqM7ogwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTQ0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhJjANBgkqhkiG9w0BAQsFAAOCAQEATprk
vNuomZqyXDz6uCz76O0RRFcZsPga+adOXXGTHxSjeUnHIs9x/W3758+bGu/9Qr0K
hlY2uUGAxow0U2R7DZs96bDvBQ7cdNUkVYZE1wN9FhX1+ZMUuASFB7xmM1/JqVks
SXwsVFgsF6yPNY7nVwgvLvVRRp03tFFA5KCu8ZOEyd60zg7eIe23afsXtpuAziNS
Ib/D4c6zRAlb4uiASDVCbcaHexs+0dKFJgkbsyDyOWqm7z7xnu2V070+UVXfzVpk
gbFA0SNzxAtj/1vAhWXNW8VGnsSobMGmqauuIViENn/N5TBnTaZFknKbARYQtsw3
+UvVjDtA9+pF25l2Yg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:17 2026 by rpki-client