Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142989.roa
File: AS142989.roa (raw, json)
Hash identifier: flW1C1Jya0XJbvATK88d9vdDu0y5d1Ft7fk0TP+QVbw=
Subject key identifier: 8E:EE:AB:E0:EB:21:2E:D5:CA:8C:0F:C3:A3:46:F8:CC:CE:2A:A6:7C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 010545AA7F64D60C84DCEAC3D03AAF5C945AF2F3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142989.roa
Signing time: Fri 22 May 2026 01:50:20 +0000
ROA not before: Fri 22 May 2026 01:45:20 +0000
ROA not after: Fri 21 May 2027 01:50:20 +0000
asID: 142989
IP address blocks: 240a:a153::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:05:45:aa:7f:64:d6:0c:84:dc:ea:c3:d0:3a:af:5c:94:5a:f2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:20 2026 GMT
Not After : May 21 01:50:20 2027 GMT
Subject: CN=8EEEABE0EB212ED5CA8C0FC3A346F8CCCE2AA67C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e4:6a:52:fe:ee:44:4d:70:f1:ad:3b:83:76:
9e:72:c4:65:49:dc:74:92:57:ba:a4:cd:d0:2f:9d:
68:3a:96:23:c8:48:b7:bd:c8:e4:cc:29:4d:81:fe:
c8:97:38:52:33:95:70:49:8d:ff:84:15:76:ee:01:
06:5b:a4:61:7d:1c:b6:f5:a8:8d:fd:5b:d4:4b:cf:
0f:72:64:98:b9:34:62:96:5f:7c:ab:bf:5e:5f:8e:
66:f2:ea:6d:80:88:46:aa:bb:03:b7:80:cc:cf:2a:
a3:46:f2:c8:7a:29:75:0d:6d:e5:be:0a:44:79:a8:
cd:4b:fe:e8:7d:ad:73:d4:a6:d4:80:47:f1:2c:1a:
38:70:be:4b:1b:bd:2e:de:37:95:4f:5b:d6:2e:52:
0f:62:8d:91:75:3e:f5:41:7d:ec:d2:80:de:22:09:
87:59:7f:75:69:ac:13:d9:5b:88:04:03:12:49:23:
0c:69:3c:2f:72:0b:31:cb:e0:19:40:b4:f4:12:11:
e3:1b:d3:fe:a7:44:9e:09:8c:39:cb:ec:c9:0a:ac:
dc:88:a2:e1:e3:e2:a6:f7:90:df:25:be:6c:a1:b8:
47:4d:3f:71:13:69:2d:50:da:a2:46:78:d9:0b:46:
4f:6c:9e:c1:97:17:05:c2:57:3e:97:a1:a3:a8:42:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EE:AB:E0:EB:21:2E:D5:CA:8C:0F:C3:A3:46:F8:CC:CE:2A:A6:7C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a153::/32
Signature Algorithm: sha256WithRSAEncryption
98:96:4b:ef:ff:d8:31:4f:32:41:d8:44:37:da:e5:15:4f:1f:
c0:a3:7d:be:f5:d0:18:2b:37:ff:aa:3d:5d:38:60:a4:a6:32:
7f:a7:d8:a3:24:95:92:33:30:6d:7f:c5:f3:37:db:c5:04:c5:
29:7d:24:05:cc:5b:46:76:a1:e8:32:4a:a7:51:e9:61:83:a8:
b8:a4:69:72:f5:b4:83:a6:2c:64:66:58:22:74:09:d2:20:a3:
da:01:e4:e6:de:ff:ca:25:d1:aa:4f:c4:0d:9b:03:02:13:e2:
60:cc:0b:46:c7:e7:83:08:01:5b:b8:ee:7e:f0:6b:7f:f4:7b:
af:e1:81:cb:d5:16:db:79:d2:39:51:66:e1:bd:f5:a6:d7:22:
82:ee:87:84:0c:80:ca:69:01:84:31:7b:f4:eb:1b:5a:1b:5d:
5d:dc:36:2a:42:cd:82:d4:9b:ba:5a:3f:9c:76:a9:2c:c0:85:
24:71:25:e0:3a:0a:99:0a:3d:a4:ec:3d:78:0b:84:4f:b2:7b:
0e:5a:cf:5c:d0:c2:98:99:82:d7:36:36:0c:d0:24:77:f6:14:
22:e9:ac:eb:48:bf:ea:b3:71:d0:da:04:d6:99:d9:b6:1a:87:
07:ba:68:ba:58:5a:d7:85:61:1c:c4:37:e4:ca:00:fb:5d:f2:
f6:5c:0d:17
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAQVFqn9k1gyE3OrD0DqvXJRa8vMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MjBaFw0yNzA1MjEwMTUwMjBaMDMxMTAvBgNV
BAMTKDhFRUVBQkUwRUIyMTJFRDVDQThDMEZDM0EzNDZGOENDQ0UyQUE2N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh5GpS/u5ETXDxrTuDdp5yxGVJ
3HSSV7qkzdAvnWg6liPISLe9yOTMKU2B/siXOFIzlXBJjf+EFXbuAQZbpGF9HLb1
qI39W9RLzw9yZJi5NGKWX3yrv15fjmby6m2AiEaquwO3gMzPKqNG8sh6KXUNbeW+
CkR5qM1L/uh9rXPUptSAR/EsGjhwvksbvS7eN5VPW9YuUg9ijZF1PvVBfezSgN4i
CYdZf3VprBPZW4gEAxJJIwxpPC9yCzHL4BlAtPQSEeMb0/6nRJ4JjDnL7MkKrNyI
ouHj4qb3kN8lvmyhuEdNP3ETaS1Q2qJGeNkLRk9snsGXFwXCVz6XoaOoQj1xAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUju6r4OshLtXKjA/Do0b4zM4qpnwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyOTg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqhUzANBgkqhkiG9w0BAQsFAAOCAQEAmJZL
7//YMU8yQdhEN9rlFU8fwKN9vvXQGCs3/6o9XThgpKYyf6fYoySVkjMwbX/F8zfb
xQTFKX0kBcxbRnah6DJKp1HpYYOouKRpcvW0g6YsZGZYInQJ0iCj2gHk5t7/yiXR
qk/EDZsDAhPiYMwLRsfngwgBW7jufvBrf/R7r+GBy9UW23nSOVFm4b31ptcigu6H
hAyAymkBhDF79OsbWhtdXdw2KkLNgtSbulo/nHapLMCFJHEl4DoKmQo9pOw9eAuE
T7J7DlrPXNDCmJmC1zY2DNAkd/YUIums60i/6rNx0NoE1pnZthqHB7poulha14Vh
HMQ35MoA+13y9lwNFw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:10 2026 by rpki-client