Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142067.roa
File: AS142067.roa (raw, json)
Hash identifier: FemETJJRrAkXhYpnnFra9fKElWvy+aiRCPB7tEOvzUs=
Subject key identifier: 7B:B0:9C:79:D0:55:B5:65:F8:88:CE:1E:C7:69:75:ED:3D:B5:5B:92
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 265D85A997782841ECF3D2595A2DB90DF18AC42F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142067.roa
Signing time: Tue 26 May 2026 02:34:57 +0000
ROA not before: Tue 26 May 2026 02:29:57 +0000
ROA not after: Tue 25 May 2027 02:34:57 +0000
asID: 142067
IP address blocks: 2001:253:201::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:5d:85:a9:97:78:28:41:ec:f3:d2:59:5a:2d:b9:0d:f1:8a:c4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:57 2026 GMT
Not After : May 25 02:34:57 2027 GMT
Subject: CN=7BB09C79D055B565F888CE1EC76975ED3DB55B92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:46:d1:e9:11:ae:ba:d5:3d:b7:0b:da:88:2e:
3f:60:34:3b:17:85:cb:f2:c5:3d:39:aa:fc:0a:c4:
cb:b5:4b:44:4b:a4:17:3e:3f:1e:06:9f:6d:05:62:
6f:ad:38:d2:3f:9b:e0:95:b8:59:ca:3c:02:5e:37:
2f:cb:27:aa:d0:67:2b:b4:af:6b:9b:f4:fe:02:df:
9d:ff:e7:2c:3e:92:2d:2a:4d:12:75:10:ae:96:31:
72:90:df:f1:94:ff:35:f8:79:f6:2c:9c:73:fb:a4:
76:1d:fb:42:03:3d:a1:ff:7a:ca:80:9b:da:ba:f6:
01:d0:dd:ba:1f:c2:84:d6:80:5f:24:c4:31:76:8b:
1c:09:41:c3:e5:be:4a:18:ee:32:5c:e2:12:df:c3:
78:7c:94:a6:f5:83:0b:fe:3f:5d:7e:5f:0b:5d:b0:
1d:77:a7:bf:d4:06:31:14:03:64:1e:90:73:51:6d:
14:35:3d:ef:c5:e2:62:85:c7:a1:bc:25:8d:09:d9:
6c:0e:06:0c:25:4f:ba:59:aa:2a:e0:94:4c:9d:55:
e7:e9:03:22:62:a8:a8:eb:75:c6:fc:8e:24:10:c6:
47:22:0b:61:86:a6:90:4a:d7:4f:5d:e7:db:66:75:
d0:0a:5a:b9:a2:2b:df:eb:45:70:77:3d:70:76:b6:
e2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B0:9C:79:D0:55:B5:65:F8:88:CE:1E:C7:69:75:ED:3D:B5:5B:92
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142067.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:201::/48
Signature Algorithm: sha256WithRSAEncryption
b5:95:f5:f9:f5:1a:bc:0a:0e:b4:84:1f:5d:e2:be:44:9c:40:
d7:29:a1:1d:50:3a:44:26:c0:d7:4a:56:39:46:b4:61:39:65:
f2:04:33:9e:d4:7e:4d:2e:90:a0:18:f4:da:e1:c4:40:01:e0:
1f:c6:84:67:84:e5:23:60:2c:19:b7:b9:73:ed:00:19:fd:77:
de:31:24:b8:6b:b1:1f:83:24:77:57:ae:07:90:f3:1c:ee:09:
59:d1:93:8a:01:54:19:e7:85:7e:56:6c:3d:a0:d0:5f:61:09:
09:58:b9:1c:7f:d4:46:d3:1a:a5:da:7a:07:77:36:7f:1b:5e:
62:17:25:86:92:57:0e:d6:0d:27:11:d7:2f:de:b8:27:cb:95:
67:db:4d:d9:fe:74:52:de:80:6d:d0:0b:d4:b5:9a:89:0e:d3:
b4:6c:b7:f6:ea:1d:86:76:c7:5e:2d:d6:77:81:44:88:3b:e6:
bf:4d:77:ad:b2:dc:e1:00:5a:95:63:e7:29:6b:cf:54:03:82:
ea:b7:2f:e6:8f:11:81:9a:ce:b5:f0:1f:a5:33:02:00:3d:5f:
ff:18:08:19:62:8b:9c:dc:2b:92:f7:ac:5c:9d:0c:db:de:20:
0f:dd:f5:b0:0f:88:c0:a3:90:57:d6:48:b3:5b:91:cc:cc:a3:
fe:03:87:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:06 2026 by rpki-client