Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142974.roa
File: AS142974.roa (raw, json)
Hash identifier: Oi/VaIuOSD7xHcnQBCmQTA5K261J3ejjOped070cW4o=
Subject key identifier: E2:AD:83:E2:3C:F9:44:4D:89:FF:D4:08:D9:E5:F8:E4:D4:99:84:C2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 46A05B36A0E7593642BA21130164928017479330
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142974.roa
Signing time: Mon 25 May 2026 01:38:03 +0000
ROA not before: Mon 25 May 2026 01:33:03 +0000
ROA not after: Mon 24 May 2027 01:38:03 +0000
asID: 142974
IP address blocks: 240a:a144::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a0:5b:36:a0:e7:59:36:42:ba:21:13:01:64:92:80:17:47:93:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:03 2026 GMT
Not After : May 24 01:38:03 2027 GMT
Subject: CN=E2AD83E23CF9444D89FFD408D9E5F8E4D49984C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:89:dd:bc:a4:f5:1d:ef:12:78:58:80:4f:
36:be:13:2d:f2:3b:72:3b:e1:9d:97:9d:b2:19:9b:
f6:7e:e6:bf:2f:77:c1:21:a7:c5:53:24:13:9f:b6:
8a:94:41:9a:16:59:38:36:fd:ac:10:12:c9:17:e3:
a4:e4:90:f5:ca:18:ee:d3:7f:f9:10:6d:65:de:b0:
8f:07:25:aa:7e:8f:75:d4:e2:a2:ee:2e:b0:b8:07:
0d:56:e1:ec:ef:22:5f:db:0e:7d:5f:d4:d0:fb:f6:
38:52:b4:27:c7:35:89:b5:2e:0d:e8:79:12:25:f1:
a6:19:e1:3d:79:5b:f9:0e:7f:19:87:12:a6:72:44:
53:fe:a9:82:5e:56:fa:0f:2e:d5:64:e9:22:15:9a:
b0:6a:8b:65:8d:c0:38:d3:d5:5c:85:a3:f6:cc:07:
e2:d7:95:77:9d:e3:5f:89:97:f4:b9:37:7e:40:43:
6f:a5:6f:a4:dc:8a:b6:5c:b2:eb:f7:14:af:4d:1f:
14:83:f1:3f:2e:0e:67:63:3f:91:98:10:e2:b6:b5:
56:35:0c:e8:db:3c:aa:38:bc:2c:32:d1:2d:61:9d:
66:91:c6:5b:b1:68:98:57:60:dd:ad:6f:3a:43:64:
c0:94:b9:5c:93:75:3f:dc:44:3b:88:77:4e:eb:39:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AD:83:E2:3C:F9:44:4D:89:FF:D4:08:D9:E5:F8:E4:D4:99:84:C2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142974.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a144::/32
Signature Algorithm: sha256WithRSAEncryption
7d:42:11:5c:5a:19:f0:5c:c1:ba:30:45:4f:cd:d3:22:4d:fa:
b5:ac:4b:91:21:b3:cc:34:c2:70:b4:ab:ed:ac:17:4a:86:5a:
35:1c:53:8e:f2:37:ab:ac:5c:75:d1:c4:9a:8c:2e:c3:1a:e3:
29:c8:ff:03:82:d4:aa:f4:43:b5:e5:46:52:1a:0d:3d:cb:a0:
4c:54:c0:5b:1e:56:a9:5c:ba:11:a7:8c:f7:00:93:e8:12:8f:
40:57:63:62:8d:92:6c:c0:96:ce:8c:eb:4f:b9:13:fb:56:59:
c3:89:75:8e:1d:1e:02:11:20:27:35:de:09:25:66:45:7e:c1:
96:01:f8:61:88:5b:ab:d4:4f:ef:67:83:39:49:60:27:20:a7:
3b:29:3f:76:27:22:88:a1:23:7c:7f:89:aa:c8:f0:9e:d7:b5:
c5:13:67:0d:ae:f1:b0:3f:d0:86:d2:d0:b3:a5:78:6a:0b:4b:
72:0e:69:f3:a6:94:64:36:8f:36:30:55:51:23:2b:70:af:72:
f5:48:bd:1a:e6:c8:82:64:0e:d1:8c:59:2f:e7:c9:51:6e:40:
3d:0d:9a:12:d6:c0:41:7c:63:c5:fa:d5:99:01:85:e0:20:5f:
8a:3f:ba:37:75:c5:60:90:61:d7:23:18:e5:71:df:e3:99:6a:
fb:b3:df:0d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURqBbNqDnWTZCuiETAWSSgBdHkzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMDNaFw0yNzA1MjQwMTM4MDNaMDMxMTAvBgNV
BAMTKEUyQUQ4M0UyM0NGOTQ0NEQ4OUZGRDQwOEQ5RTVGOEU0RDQ5OTg0QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GYndvKT1He8SeFiATza+Ey3y
O3I74Z2XnbIZm/Z+5r8vd8Ehp8VTJBOftoqUQZoWWTg2/awQEskX46TkkPXKGO7T
f/kQbWXesI8HJap+j3XU4qLuLrC4Bw1W4ezvIl/bDn1f1ND79jhStCfHNYm1Lg3o
eRIl8aYZ4T15W/kOfxmHEqZyRFP+qYJeVvoPLtVk6SIVmrBqi2WNwDjT1VyFo/bM
B+LXlXed41+Jl/S5N35AQ2+lb6TcirZcsuv3FK9NHxSD8T8uDmdjP5GYEOK2tVY1
DOjbPKo4vCwy0S1hnWaRxluxaJhXYN2tbzpDZMCUuVyTdT/cRDuId07rORHlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU4q2D4jz5RE2J/9QI2eX45NSZhMIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTc0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhRDANBgkqhkiG9w0BAQsFAAOCAQEAfUIR
XFoZ8FzBujBFT83TIk36taxLkSGzzDTCcLSr7awXSoZaNRxTjvI3q6xcddHEmowu
wxrjKcj/A4LUqvRDteVGUhoNPcugTFTAWx5WqVy6EaeM9wCT6BKPQFdjYo2SbMCW
zozrT7kT+1ZZw4l1jh0eAhEgJzXeCSVmRX7BlgH4YYhbq9RP72eDOUlgJyCnOyk/
diciiKEjfH+Jqsjwnte1xRNnDa7xsD/QhtLQs6V4agtLcg5p86aUZDaPNjBVUSMr
cK9y9Ui9GubIgmQO0YxZL+fJUW5APQ2aEtbAQXxjxfrVmQGF4CBfij+6N3XFYJBh
1yMY5XHf45lq+7PfDQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:55 2026 by rpki-client