Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142968.roa
File: AS142968.roa (raw, json)
Hash identifier: a9lis+UpabfTV7pah+t47xdnJiBDgW/YLr13iWognkI=
Subject key identifier: 1A:2C:22:FD:E4:77:D1:5C:59:7A:FE:EA:5F:78:CF:F0:95:93:7F:B4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7CFE18AC97D9ADFF8CBF85AB39011FAC54DCB2C9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142968.roa
Signing time: Fri 22 May 2026 06:27:54 +0000
ROA not before: Fri 22 May 2026 06:22:54 +0000
ROA not after: Fri 21 May 2027 06:27:54 +0000
asID: 142968
IP address blocks: 240a:a13e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:fe:18:ac:97:d9:ad:ff:8c:bf:85:ab:39:01:1f:ac:54:dc:b2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:54 2026 GMT
Not After : May 21 06:27:54 2027 GMT
Subject: CN=1A2C22FDE477D15C597AFEEA5F78CFF095937FB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d6:b3:89:67:92:db:1a:48:77:73:7a:dc:e3:
92:e1:33:4f:80:91:f2:3f:fb:39:2b:02:5e:ad:16:
33:19:db:59:1a:6c:21:9a:13:a4:bf:cd:61:8f:68:
e1:0f:4b:0f:bc:44:41:14:f6:1d:73:26:ec:1c:1a:
b1:97:51:14:d8:d9:eb:f2:f5:9c:2e:11:01:d5:85:
03:cf:19:ee:f9:c8:88:3c:be:7b:b4:fc:7a:3f:ff:
e1:c4:d7:b9:4d:29:9c:a7:95:e8:8c:11:60:06:ab:
90:cf:5d:44:94:f7:9b:f4:26:10:05:e5:10:e8:3e:
99:11:65:3b:e6:80:2d:60:1c:46:96:03:2c:26:9a:
d6:34:73:e8:31:7b:ae:0e:f5:38:c0:db:ac:fb:0e:
30:5d:74:aa:18:cb:71:6a:cb:e8:99:f1:3d:9b:6c:
38:62:6e:8c:18:4e:0f:18:8b:64:2c:40:34:b2:5f:
9e:78:d9:71:13:76:64:ed:e5:d3:f2:c6:99:69:b3:
83:1a:e5:03:5f:b1:24:12:ef:2c:17:3c:b4:70:6b:
a2:47:60:70:4d:ec:cc:3a:57:f2:f7:1c:de:93:cc:
f8:fd:a0:e1:7c:3a:10:b1:e4:07:c9:87:d5:bd:d5:
88:46:2f:d4:24:b9:9e:e3:83:3d:fc:b5:9e:c6:d6:
b5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2C:22:FD:E4:77:D1:5C:59:7A:FE:EA:5F:78:CF:F0:95:93:7F:B4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a13e::/32
Signature Algorithm: sha256WithRSAEncryption
4f:bc:65:4e:f2:45:5b:e9:d6:93:9c:2d:f6:92:45:f8:87:f3:
92:80:78:51:f8:96:83:7c:4a:c5:98:ab:2b:7b:38:c4:ed:40:
96:e7:27:51:ba:06:ba:5a:2d:85:f7:2d:a1:c4:f5:61:02:af:
1e:b4:3f:fa:f2:9b:4e:ae:60:65:ba:34:0d:49:85:a3:f1:0b:
1d:65:16:89:2d:86:e2:10:60:67:e9:ac:2f:17:91:74:3f:26:
51:93:06:7c:a2:f3:8f:2e:31:1f:82:23:d9:11:b7:82:fe:9c:
04:06:1a:0f:75:1f:92:de:81:21:91:d6:ab:e1:d4:59:b2:99:
5d:89:85:f2:64:b7:d9:cb:5d:7b:a0:58:49:02:33:77:9d:1d:
c7:30:b9:61:1f:0a:8d:50:8f:9e:48:a7:ab:b2:5d:16:27:39:
2d:98:65:04:8c:e6:a4:0d:73:32:9b:6e:c1:65:42:d2:87:a1:
bb:2e:49:0e:27:dd:0a:76:e1:2b:d9:1e:7e:65:b0:3b:3a:71:
2e:64:fe:20:a5:07:a6:e9:95:c8:81:44:78:2b:44:af:e4:34:
a6:db:b3:e5:29:da:3c:95:26:e2:c5:28:82:8c:9d:ce:16:13:
51:e9:27:31:05:ac:f7:fc:8e:1b:7e:d3:09:eb:62:a6:09:c4:
f4:53:df:e0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfP4YrJfZrf+Mv4WrOQEfrFTcsskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNTRaFw0yNzA1MjEwNjI3NTRaMDMxMTAvBgNV
BAMTKDFBMkMyMkZERTQ3N0QxNUM1OTdBRkVFQTVGNzhDRkYwOTU5MzdGQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl1rOJZ5LbGkh3c3rc45LhM0+A
kfI/+zkrAl6tFjMZ21kabCGaE6S/zWGPaOEPSw+8REEU9h1zJuwcGrGXURTY2evy
9ZwuEQHVhQPPGe75yIg8vnu0/Ho//+HE17lNKZynleiMEWAGq5DPXUSU95v0JhAF
5RDoPpkRZTvmgC1gHEaWAywmmtY0c+gxe64O9TjA26z7DjBddKoYy3Fqy+iZ8T2b
bDhibowYTg8Yi2QsQDSyX5542XETdmTt5dPyxplps4Ma5QNfsSQS7ywXPLRwa6JH
YHBN7Mw6V/L3HN6TzPj9oOF8OhCx5AfJh9W91YhGL9QkuZ7jgz38tZ7G1rVTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUGiwi/eR30VxZev7qX3jP8JWTf7QwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhPjANBgkqhkiG9w0BAQsFAAOCAQEAT7xl
TvJFW+nWk5wt9pJF+IfzkoB4UfiWg3xKxZirK3s4xO1AlucnUboGulothfctocT1
YQKvHrQ/+vKbTq5gZbo0DUmFo/ELHWUWiS2G4hBgZ+msLxeRdD8mUZMGfKLzjy4x
H4Ij2RG3gv6cBAYaD3Ufkt6BIZHWq+HUWbKZXYmF8mS32ctde6BYSQIzd50dxzC5
YR8KjVCPnkinq7JdFic5LZhlBIzmpA1zMptuwWVC0oehuy5JDifdCnbhK9kefmWw
OzpxLmT+IKUHpumVyIFEeCtEr+Q0ptuz5SnaPJUm4sUogoydzhYTUeknMQWs9/yO
G37TCetipgnE9FPf4A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:21 2026 by rpki-client