Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142970.roa
File: AS142970.roa (raw, json)
Hash identifier: oS+6SaMfpn0+wAZD2oqgfB4Mwg+6IQVD8elOJ9X12y8=
Subject key identifier: 88:32:47:21:52:89:46:A8:75:90:24:6B:54:3E:2E:EC:AD:CC:90:A4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6BB0D5C968F258C4768670C928833BC8242A9DEF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142970.roa
Signing time: Fri 22 May 2026 04:27:15 +0000
ROA not before: Fri 22 May 2026 04:22:15 +0000
ROA not after: Fri 21 May 2027 04:27:15 +0000
asID: 142970
IP address blocks: 240a:a140::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b0:d5:c9:68:f2:58:c4:76:86:70:c9:28:83:3b:c8:24:2a:9d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:15 2026 GMT
Not After : May 21 04:27:15 2027 GMT
Subject: CN=88324721528946A87590246B543E2EECADCC90A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:dd:da:96:fc:33:56:ee:78:7b:4d:2a:cc:
79:23:98:4f:6f:18:23:86:6e:da:00:b6:53:ea:53:
5f:ef:4d:ef:9e:e7:7e:0d:06:34:75:3e:26:b4:65:
38:65:5a:54:d9:1d:75:59:52:5a:39:f6:da:14:5e:
66:fe:35:1c:77:10:2c:c4:e2:21:a5:a1:7d:36:95:
0a:74:b4:0e:8e:1f:de:c0:b4:e0:35:ae:df:ba:0a:
1a:1b:f8:50:33:96:14:f1:fb:a7:22:20:5c:c3:4a:
65:9e:3f:ba:d4:6c:6f:1e:85:03:e8:ae:40:8d:c4:
1f:c8:f8:4a:dd:c7:86:d9:7c:8c:9c:8d:6f:be:27:
4e:1c:bf:99:98:b5:46:26:91:f6:be:d2:8e:7d:54:
2a:17:ee:05:27:cd:e6:50:65:c0:cb:aa:01:c3:19:
00:64:bd:6e:18:e0:d9:db:ac:5e:37:45:79:4b:43:
e0:0c:fd:16:8b:bb:21:9e:42:b7:fc:b9:26:52:d6:
0d:3d:df:78:ac:07:31:a0:e2:62:d5:eb:46:78:f2:
9a:3e:8a:b2:eb:70:f2:b0:48:49:60:ef:01:ca:1f:
a8:20:5e:6c:f5:31:35:58:87:6e:f8:52:8a:26:2a:
80:5e:7d:4b:35:03:44:af:c3:49:a4:fc:3a:16:eb:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:32:47:21:52:89:46:A8:75:90:24:6B:54:3E:2E:EC:AD:CC:90:A4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142970.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a140::/32
Signature Algorithm: sha256WithRSAEncryption
59:0c:52:b4:57:a9:94:53:af:48:7a:a2:21:88:4b:3b:af:d6:
b5:f3:d1:95:e9:b4:9d:1f:69:56:c4:5a:49:0d:14:13:9a:62:
d3:db:93:8b:ed:aa:6c:69:dd:0f:d7:ba:d2:66:69:c4:05:dc:
f9:11:eb:82:5e:4e:cf:50:c6:eb:35:1c:89:60:ad:e3:34:d0:
23:69:2f:34:2b:a4:61:f1:2f:f3:38:60:f9:93:00:b1:65:f2:
19:7f:b6:72:0b:83:aa:84:99:24:4b:ef:2b:b7:94:fd:d0:04:
6e:7f:01:f8:3d:05:d9:81:84:d6:63:67:a1:3f:1e:5c:5e:e0:
55:9a:35:17:c3:5d:f2:de:08:29:06:75:24:be:b2:2f:2d:b8:
d3:f6:9e:c8:e0:19:3e:3f:5a:37:e5:82:5a:45:da:cd:0e:33:
22:25:8b:aa:be:45:a3:df:24:6d:37:a5:c6:5a:1d:91:31:79:
0d:ba:5d:6a:7d:22:9d:9e:f9:16:34:70:c5:00:1e:b2:86:a9:
e0:51:fe:d8:d0:39:b5:29:26:37:2d:c4:6f:b6:e4:72:b6:a0:
01:e0:85:2f:40:c6:ca:b1:1c:d5:cb:34:1d:08:b0:4e:5b:99:
57:f3:5e:e5:31:0c:f8:c2:de:15:ca:39:d6:98:df:07:31:32:
19:1e:44:4e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUa7DVyWjyWMR2hnDJKIM7yCQqne8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMTVaFw0yNzA1MjEwNDI3MTVaMDMxMTAvBgNV
BAMTKDg4MzI0NzIxNTI4OTQ2QTg3NTkwMjQ2QjU0M0UyRUVDQURDQzkwQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJN3alvwzVu54e00qzHkjmE9v
GCOGbtoAtlPqU1/vTe+e534NBjR1Pia0ZThlWlTZHXVZUlo59toUXmb+NRx3ECzE
4iGloX02lQp0tA6OH97AtOA1rt+6Chob+FAzlhTx+6ciIFzDSmWeP7rUbG8ehQPo
rkCNxB/I+Erdx4bZfIycjW++J04cv5mYtUYmkfa+0o59VCoX7gUnzeZQZcDLqgHD
GQBkvW4Y4NnbrF43RXlLQ+AM/RaLuyGeQrf8uSZS1g0933isBzGg4mLV60Z48po+
irLrcPKwSElg7wHKH6ggXmz1MTVYh274UoomKoBefUs1A0Svw0mk/DoW64t3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUiDJHIVKJRqh1kCRrVD4u7K3MkKQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhQDANBgkqhkiG9w0BAQsFAAOCAQEAWQxS
tFeplFOvSHqiIYhLO6/WtfPRlem0nR9pVsRaSQ0UE5pi09uTi+2qbGndD9e60mZp
xAXc+RHrgl5Oz1DG6zUciWCt4zTQI2kvNCukYfEv8zhg+ZMAsWXyGX+2cguDqoSZ
JEvvK7eU/dAEbn8B+D0F2YGE1mNnoT8eXF7gVZo1F8Nd8t4IKQZ1JL6yLy240/ae
yOAZPj9aN+WCWkXazQ4zIiWLqr5Fo98kbTelxlodkTF5Dbpdan0inZ75FjRwxQAe
soap4FH+2NA5tSkmNy3Eb7bkcragAeCFL0DGyrEc1cs0HQiwTluZV/Ne5TEM+MLe
Fco51pjfBzEyGR5ETg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:11 2026 by rpki-client