Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142966.roa
File: AS142966.roa (raw, json)
Hash identifier: xlLPy+M9DS1vhED+ndR7GuWflJY6zX7G/9PgDNA3B1o=
Subject key identifier: 68:0C:C5:88:C7:20:37:96:09:69:1B:06:4E:86:43:F7:25:CD:B6:B1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2D5FED04B84BE2ABCF39095E971BD821A48D7970
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142966.roa
Signing time: Fri 22 May 2026 06:45:57 +0000
ROA not before: Fri 22 May 2026 06:40:57 +0000
ROA not after: Fri 21 May 2027 06:45:57 +0000
asID: 142966
IP address blocks: 240a:a13c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:5f:ed:04:b8:4b:e2:ab:cf:39:09:5e:97:1b:d8:21:a4:8d:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:40:57 2026 GMT
Not After : May 21 06:45:57 2027 GMT
Subject: CN=680CC588C720379609691B064E8643F725CDB6B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:4e:2e:de:07:9c:9a:0a:b6:d6:ee:9a:58:
bf:31:9d:95:36:e7:5b:a8:02:e1:4b:a8:0b:43:3b:
44:91:bb:aa:9a:21:63:9b:d0:96:5a:25:3f:08:c3:
4b:0a:3d:4b:1d:d5:69:28:27:b6:5d:8a:6d:a1:38:
e5:26:b8:c4:5e:85:43:82:7c:a9:8e:87:e7:f4:ac:
44:37:4b:b0:40:b9:18:97:c1:9a:11:77:b0:5f:81:
f5:58:c4:f8:f1:f2:53:c0:5e:30:41:dc:d4:74:0c:
cc:37:5a:ec:30:04:e7:2f:e4:65:1f:3d:93:75:78:
ed:97:6f:72:48:47:21:82:cc:ca:b1:98:54:3f:e2:
18:69:cd:bb:86:ce:84:3c:1f:9c:c9:41:fd:75:3a:
d0:32:09:23:29:88:1e:d6:3f:75:53:0f:05:37:f6:
9f:8d:52:a1:d7:9f:fc:22:35:a4:61:de:ea:a6:46:
80:ec:10:11:39:6a:ad:43:bd:d5:65:08:ed:14:8d:
64:b4:51:54:31:b2:eb:bb:ad:95:53:41:8d:72:49:
8f:a9:ab:c5:65:da:19:ef:66:1b:1a:a0:b3:24:4b:
50:dc:e1:2a:d7:0c:ed:03:c1:5a:90:c0:a8:bf:09:
2a:4b:40:bc:04:5e:08:3d:07:6e:58:98:74:1f:38:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0C:C5:88:C7:20:37:96:09:69:1B:06:4E:86:43:F7:25:CD:B6:B1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142966.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a13c::/32
Signature Algorithm: sha256WithRSAEncryption
3b:08:da:dc:47:38:47:50:b3:f3:3e:03:d9:56:0b:06:32:cc:
e9:29:21:91:61:98:d8:a5:c5:5a:fc:0c:ce:e7:a1:3f:fb:87:
c3:e1:e7:c6:6b:87:85:b5:83:6d:92:a8:0f:89:19:31:b4:13:
4b:45:f2:98:06:db:d0:03:e2:2b:58:2d:fd:80:30:04:6d:c9:
07:f0:e7:94:db:3f:d8:90:65:4c:8e:2a:e8:bb:3f:5a:bc:03:
7b:3a:b0:8c:ed:d0:0c:17:6f:79:61:6b:c2:69:47:96:f5:5e:
3c:c0:c7:ec:11:c4:79:bc:59:78:08:1c:89:86:b0:d2:9c:7b:
03:c6:55:76:76:92:19:99:c7:be:8b:09:25:41:44:41:56:b5:
6b:6d:30:14:4e:29:1d:9a:7b:64:34:fd:d6:7f:d3:9c:f1:71:
17:ea:4e:a3:2e:19:e3:9d:13:24:c0:81:74:12:cc:48:0f:1c:
29:de:c6:47:6b:e3:6f:d8:f3:0b:8a:d0:25:3c:63:e6:76:c6:
ab:9a:67:79:4e:28:96:ba:e3:1b:9a:20:5f:31:23:7f:e7:92:
e4:a7:ea:d0:44:bf:09:80:09:03:58:33:47:f2:28:5c:1d:75:
0b:78:96:f1:4d:6c:54:3d:a8:cb:18:db:2c:85:5d:ff:20:32:
e9:c9:fc:30
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULV/tBLhL4qvPOQlelxvYIaSNeXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQwNTdaFw0yNzA1MjEwNjQ1NTdaMDMxMTAvBgNV
BAMTKDY4MENDNTg4QzcyMDM3OTYwOTY5MUIwNjRFODY0M0Y3MjVDREI2QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcgU4u3gecmgq21u6aWL8xnZU2
51uoAuFLqAtDO0SRu6qaIWOb0JZaJT8Iw0sKPUsd1WkoJ7Zdim2hOOUmuMRehUOC
fKmOh+f0rEQ3S7BAuRiXwZoRd7BfgfVYxPjx8lPAXjBB3NR0DMw3WuwwBOcv5GUf
PZN1eO2Xb3JIRyGCzMqxmFQ/4hhpzbuGzoQ8H5zJQf11OtAyCSMpiB7WP3VTDwU3
9p+NUqHXn/wiNaRh3uqmRoDsEBE5aq1DvdVlCO0UjWS0UVQxsuu7rZVTQY1ySY+p
q8Vl2hnvZhsaoLMkS1Dc4SrXDO0DwVqQwKi/CSpLQLwEXgg9B25YmHQfOHtpAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUaAzFiMcgN5YJaRsGToZD9yXNtrEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhPDANBgkqhkiG9w0BAQsFAAOCAQEAOwja
3Ec4R1Cz8z4D2VYLBjLM6SkhkWGY2KXFWvwMzuehP/uHw+HnxmuHhbWDbZKoD4kZ
MbQTS0XymAbb0APiK1gt/YAwBG3JB/DnlNs/2JBlTI4q6Ls/WrwDezqwjO3QDBdv
eWFrwmlHlvVePMDH7BHEebxZeAgciYaw0px7A8ZVdnaSGZnHvosJJUFEQVa1a20w
FE4pHZp7ZDT91n/TnPFxF+pOoy4Z450TJMCBdBLMSA8cKd7GR2vjb9jzC4rQJTxj
5nbGq5pneU4olrrjG5ogXzEjf+eS5Kfq0ES/CYAJA1gzR/IoXB11C3iW8U1sVD2o
yxjbLIVd/yAy6cn8MA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:46 2026 by rpki-client