Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142959.roa
File: AS142959.roa (raw, json)
Hash identifier: I4CVDjZC6skmlM2OD2fEWb/B1mVt6bN7AQqiHcT8tus=
Subject key identifier: 02:1C:A8:9B:89:21:50:1A:60:92:E8:F6:AA:88:4E:B9:A2:36:4A:CD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4290FCFC7E8C88F54BCED70E07155485E88CEC6F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142959.roa
Signing time: Tue 26 May 2026 06:12:53 +0000
ROA not before: Tue 26 May 2026 06:07:53 +0000
ROA not after: Tue 25 May 2027 06:12:53 +0000
asID: 142959
IP address blocks: 240a:a135::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:90:fc:fc:7e:8c:88:f5:4b:ce:d7:0e:07:15:54:85:e8:8c:ec:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:53 2026 GMT
Not After : May 25 06:12:53 2027 GMT
Subject: CN=021CA89B8921501A6092E8F6AA884EB9A2364ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:34:6f:31:bb:5e:0e:2b:78:b3:b2:63:b3:
4d:34:92:60:aa:fa:f4:fe:4d:ac:98:7c:62:e6:52:
1e:fe:61:21:d4:fe:f8:4a:5d:7d:d3:d8:4a:ff:71:
9f:d3:d9:a4:a5:f3:5e:25:df:3e:57:54:b9:02:49:
bb:88:64:22:c6:05:fa:a5:2d:bc:17:a0:88:e8:2e:
ed:a1:c3:bb:dd:ad:64:5d:0a:b8:72:c6:85:69:17:
69:d6:a4:fe:ef:30:bd:56:4b:21:5b:8f:8a:50:1c:
9e:33:28:29:c2:5e:c8:a2:ff:36:0b:91:d0:df:cc:
08:25:2a:fa:c8:0d:4d:81:83:aa:d7:52:ee:87:df:
f0:32:ba:16:91:22:ce:f5:9a:d7:74:da:ab:ad:10:
d3:99:66:9c:5e:3e:86:40:ce:7d:d9:a7:a8:97:52:
14:45:00:ce:77:4a:57:2b:5a:da:ac:cb:9d:20:a4:
e9:2d:f2:24:1e:3c:6a:f1:8b:50:d4:8f:23:e0:61:
e5:84:ae:42:52:c8:b5:3d:ac:48:da:ed:99:b8:d3:
7f:f5:68:18:d2:ef:5c:b7:b1:60:6f:18:8e:a9:69:
04:a3:ab:3e:c7:a5:bc:3c:e7:b5:23:e3:06:8d:90:
eb:8f:53:cf:d1:9d:c6:0a:82:88:75:be:25:b5:6d:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1C:A8:9B:89:21:50:1A:60:92:E8:F6:AA:88:4E:B9:A2:36:4A:CD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a135::/32
Signature Algorithm: sha256WithRSAEncryption
79:96:16:47:1a:9d:16:78:35:50:56:aa:e1:92:6c:2c:df:ea:
5b:8d:0d:5b:b9:77:92:a6:09:82:b8:78:6d:ae:d5:68:20:a7:
43:d1:d1:e9:b9:70:9c:43:4b:82:c8:3b:24:e8:c1:e3:a3:35:
30:fb:39:22:65:44:bf:d5:10:4a:90:a0:29:d1:63:5b:e9:b4:
ac:d3:d6:bd:0b:aa:a7:56:1b:3a:cb:35:cb:c4:f7:1a:ca:d2:
5c:56:6d:9c:b5:86:9f:9f:fa:2e:49:6c:3a:f3:d5:cd:03:af:
37:86:1b:ca:80:6c:6f:c5:fb:aa:46:73:c7:d7:52:4f:df:6c:
56:f3:d9:d4:e5:c0:d4:cd:b4:88:32:0b:5a:00:e2:60:0c:90:
88:93:60:21:26:f7:0a:7d:cb:b7:37:6a:7b:a1:69:cd:27:91:
bb:c2:59:5a:e4:e2:b2:da:e8:63:3b:06:cf:d5:f6:cf:b1:a1:
c0:c9:d6:9f:c7:f1:8b:fc:c0:b7:d0:20:7f:82:6d:f0:89:e1:
65:82:c2:6a:36:00:20:a4:e7:31:65:c3:03:6e:6f:de:81:1a:
61:88:5c:92:78:a3:5c:4a:3e:f0:7c:35:1a:66:53:ce:d0:65:
5a:2f:a8:44:d2:c8:74:9f:8e:91:83:18:0d:47:ad:f9:4e:e8:
ed:14:9a:a1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQpD8/H6MiPVLztcOBxVUheiM7G8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3NTNaFw0yNzA1MjUwNjEyNTNaMDMxMTAvBgNV
BAMTKDAyMUNBODlCODkyMTUwMUE2MDkyRThGNkFBODg0RUI5QTIzNjRBQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4zRvMbteDit4s7Jjs000kmCq
+vT+TayYfGLmUh7+YSHU/vhKXX3T2Er/cZ/T2aSl814l3z5XVLkCSbuIZCLGBfql
LbwXoIjoLu2hw7vdrWRdCrhyxoVpF2nWpP7vML1WSyFbj4pQHJ4zKCnCXsii/zYL
kdDfzAglKvrIDU2Bg6rXUu6H3/AyuhaRIs71mtd02qutENOZZpxePoZAzn3Zp6iX
UhRFAM53SlcrWtqsy50gpOkt8iQePGrxi1DUjyPgYeWErkJSyLU9rEja7Zm403/1
aBjS71y3sWBvGI6paQSjqz7Hpbw857Uj4waNkOuPU8/RncYKgoh1viW1bVpnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUAhyom4khUBpgkuj2qohOuaI2Ss0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhNTANBgkqhkiG9w0BAQsFAAOCAQEAeZYW
RxqdFng1UFaq4ZJsLN/qW40NW7l3kqYJgrh4ba7VaCCnQ9HR6blwnENLgsg7JOjB
46M1MPs5ImVEv9UQSpCgKdFjW+m0rNPWvQuqp1YbOss1y8T3GsrSXFZtnLWGn5/6
LklsOvPVzQOvN4YbyoBsb8X7qkZzx9dST99sVvPZ1OXA1M20iDILWgDiYAyQiJNg
ISb3Cn3Ltzdqe6FpzSeRu8JZWuTistroYzsGz9X2z7GhwMnWn8fxi/zAt9Agf4Jt
8InhZYLCajYAIKTnMWXDA25v3oEaYYhcknijXEo+8Hw1GmZTztBlWi+oRNLIdJ+O
kYMYDUet+U7o7RSaoQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:08 2026 by rpki-client