Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142985.roa
File: AS142985.roa (raw, json)
Hash identifier: izvYmbL3BeWxAtFK4Tz5NTD7uc8SETiQ6siM+CdbGII=
Subject key identifier: B9:0B:D7:6D:32:B5:CB:BC:33:C5:34:5C:22:E0:5A:9D:51:FC:EF:27
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 615AB9AC72632B3597DCB325869CCD086AAFABAA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142985.roa
Signing time: Fri 22 May 2026 06:58:44 +0000
ROA not before: Fri 22 May 2026 06:53:44 +0000
ROA not after: Fri 21 May 2027 06:58:44 +0000
asID: 142985
IP address blocks: 240a:a14f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:5a:b9:ac:72:63:2b:35:97:dc:b3:25:86:9c:cd:08:6a:af:ab:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:44 2026 GMT
Not After : May 21 06:58:44 2027 GMT
Subject: CN=B90BD76D32B5CBBC33C5345C22E05A9D51FCEF27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:3b:6a:b3:cc:74:12:0c:b5:82:90:ce:56:
7b:3f:f8:93:f2:0a:80:a1:22:94:11:78:0c:55:dc:
8b:c3:0f:9d:4b:df:a2:cf:8a:56:d5:e1:c0:27:0b:
73:7f:3d:74:fe:36:1d:8a:3b:e5:cb:96:9c:72:c9:
a9:56:85:ad:2b:3e:93:55:39:ea:7e:d6:23:67:ce:
be:c6:a9:ac:e0:ba:78:51:e4:d7:d9:04:a2:a4:80:
05:e0:a2:6e:eb:cd:81:f5:58:ac:1e:be:05:fc:b3:
87:ad:e8:f4:6e:52:be:42:90:9d:eb:75:8a:18:04:
0c:8d:8a:cd:92:3d:0b:f1:3a:08:e6:24:5d:ca:16:
ed:03:b5:9e:2c:d1:2a:6b:e4:5c:f8:af:a7:be:d5:
af:29:d7:33:fd:80:a5:1c:01:6d:d3:51:a0:f6:6e:
74:f2:37:dc:f3:8d:b7:fc:97:7b:1e:e2:6a:c0:5e:
5b:d0:e7:e8:d9:22:1f:33:99:2c:cc:50:4f:60:cd:
b4:4b:50:0b:d2:65:c8:fb:9f:ab:72:6a:32:73:ac:
e5:9a:ff:e4:7b:5f:00:a4:88:8c:ac:8e:1d:2f:93:
da:0a:6e:66:5c:e9:c7:fc:e3:dd:11:64:7a:3b:7d:
61:b0:5b:6c:d5:1f:1b:3b:04:2c:ad:15:54:76:fc:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0B:D7:6D:32:B5:CB:BC:33:C5:34:5C:22:E0:5A:9D:51:FC:EF:27
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142985.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a14f::/32
Signature Algorithm: sha256WithRSAEncryption
67:20:95:af:c8:75:57:1c:98:ea:5f:81:7a:23:7a:85:f8:bc:
c3:e4:c1:71:80:6d:85:9d:28:63:20:e1:cc:60:d6:84:33:53:
6c:82:27:2a:9d:cd:4b:2f:17:2e:a2:f3:5b:a7:59:83:c5:d5:
14:b8:11:2b:c2:55:24:dd:ea:50:42:e2:8b:8f:3e:2a:6c:71:
93:41:f6:b1:ba:91:89:4b:97:a1:dc:1c:fa:c7:ad:69:82:4e:
91:76:60:59:60:0c:14:02:41:06:70:dc:e2:d0:11:4c:82:3e:
1e:51:ce:cd:f5:55:51:34:4f:6c:a4:ae:4c:70:20:51:65:79:
d3:70:93:dd:af:e3:fe:09:75:de:2b:73:c5:c1:b7:aa:a1:66:
14:f0:35:bf:73:75:8c:a1:b1:b2:f1:67:11:14:9b:5a:f6:54:
24:4c:89:95:f3:31:91:4b:a1:6f:b6:3f:3d:4d:de:5d:1f:fd:
c0:e3:c2:c7:a3:0d:9c:1d:11:9c:ef:97:30:7c:22:ca:1b:66:
d3:ec:13:26:54:36:cb:c6:3e:a3:fa:4d:cf:06:ec:26:51:48:
66:02:1d:b2:51:73:6c:4d:65:e8:d4:f4:cc:63:2a:86:06:98:
f2:56:3f:36:cf:1e:56:90:d9:21:fd:69:da:7d:f6:70:93:0a:
66:26:f1:99
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYVq5rHJjKzWX3LMlhpzNCGqvq6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzNDRaFw0yNzA1MjEwNjU4NDRaMDMxMTAvBgNV
BAMTKEI5MEJENzZEMzJCNUNCQkMzM0M1MzQ1QzIyRTA1QTlENTFGQ0VGMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDojtqs8x0Egy1gpDOVns/+JPy
CoChIpQReAxV3IvDD51L36LPilbV4cAnC3N/PXT+Nh2KO+XLlpxyyalWha0rPpNV
Oep+1iNnzr7GqazgunhR5NfZBKKkgAXgom7rzYH1WKwevgX8s4et6PRuUr5CkJ3r
dYoYBAyNis2SPQvxOgjmJF3KFu0DtZ4s0Spr5Fz4r6e+1a8p1zP9gKUcAW3TUaD2
bnTyN9zzjbf8l3se4mrAXlvQ5+jZIh8zmSzMUE9gzbRLUAvSZcj7n6tyajJzrOWa
/+R7XwCkiIysjh0vk9oKbmZc6cf8490RZHo7fWGwW2zVHxs7BCytFVR2/MS3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUuQvXbTK1y7wzxTRcIuBanVH87ycwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhTzANBgkqhkiG9w0BAQsFAAOCAQEAZyCV
r8h1VxyY6l+BeiN6hfi8w+TBcYBthZ0oYyDhzGDWhDNTbIInKp3NSy8XLqLzW6dZ
g8XVFLgRK8JVJN3qUELii48+Kmxxk0H2sbqRiUuXodwc+setaYJOkXZgWWAMFAJB
BnDc4tARTII+HlHOzfVVUTRPbKSuTHAgUWV503CT3a/j/gl13itzxcG3qqFmFPA1
v3N1jKGxsvFnERSbWvZUJEyJlfMxkUuhb7Y/PU3eXR/9wOPCx6MNnB0RnO+XMHwi
yhtm0+wTJlQ2y8Y+o/pNzwbsJlFIZgIdslFzbE1l6NT0zGMqhgaY8lY/Ns8eVpDZ
If1p2n32cJMKZibxmQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:30 2026 by rpki-client