Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142068.roa
File: AS142068.roa (raw, json)
Hash identifier: LHiBFUnEg8oAvpLwLvmqVWyGPEj1CVFwKYCrZbYod7Q=
Subject key identifier: F9:A8:AF:9B:1B:52:29:0B:03:4D:77:41:10:CF:A9:CB:76:09:30:13
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 23EA984ECE5058E62A7AF02D4D2FF659D164731E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142068.roa
Signing time: Tue 26 May 2026 06:12:45 +0000
ROA not before: Tue 26 May 2026 06:07:45 +0000
ROA not after: Tue 25 May 2027 06:12:45 +0000
asID: 142068
IP address blocks: 2001:253:202::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ea:98:4e:ce:50:58:e6:2a:7a:f0:2d:4d:2f:f6:59:d1:64:73:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:45 2026 GMT
Not After : May 25 06:12:45 2027 GMT
Subject: CN=F9A8AF9B1B52290B034D774110CFA9CB76093013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:39:68:d6:8f:bc:73:60:82:66:86:8e:31:
f9:22:c6:3a:6b:39:99:04:29:50:09:7f:b1:36:65:
35:01:9f:a9:4e:e7:f9:4c:a2:0a:b8:2c:ae:18:ee:
cf:2c:5a:28:ae:46:04:37:45:96:e6:f5:80:ae:ac:
c5:7f:95:64:47:6b:8b:d8:5a:f8:31:50:d7:fb:fb:
9d:23:5a:83:d4:6c:15:4e:11:21:a3:2f:1e:3b:74:
d4:99:33:d6:e9:ac:e1:e3:09:30:07:bf:f1:7a:c4:
e4:2d:db:93:6e:b7:14:c5:ed:7d:5f:c6:b0:6a:df:
a9:7d:80:58:b5:df:91:d4:8d:82:cc:1d:ec:83:cc:
a2:97:25:10:ef:01:1e:71:cd:90:7f:d9:e1:83:98:
9a:c3:37:64:d3:bd:57:bb:a2:05:96:40:07:d0:05:
a4:53:00:2a:7a:77:78:26:42:52:65:65:ce:5c:66:
22:ad:dc:14:c6:39:1a:29:ac:d7:c5:10:b2:04:0b:
c4:81:5e:52:b5:7a:6b:81:e9:d8:a5:ba:60:1a:d6:
2c:7e:41:72:52:4d:19:e8:3e:bf:1d:85:6c:8b:c9:
56:19:16:b0:73:c0:fe:14:c5:4a:92:cb:e4:2f:67:
2a:ec:79:5d:7b:62:4b:ba:25:d1:33:60:34:48:cf:
64:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A8:AF:9B:1B:52:29:0B:03:4D:77:41:10:CF:A9:CB:76:09:30:13
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:202::/48
Signature Algorithm: sha256WithRSAEncryption
31:eb:32:03:65:77:43:a7:8e:75:fd:fc:61:b8:0d:b3:a8:4a:
c0:90:c5:96:88:46:69:b9:3c:8f:96:30:36:07:1a:99:81:7f:
82:d6:66:9d:de:4e:e1:e6:c6:d1:45:ae:a8:6e:1d:0a:a6:a2:
ae:6b:1f:c5:11:81:63:c2:72:55:e2:d9:7c:90:2e:06:d5:67:
ae:37:24:87:e3:c6:48:bb:7b:b0:76:5b:ab:ea:23:06:1b:44:
de:7b:1f:57:f4:48:92:a3:86:7c:8d:7d:59:1b:75:56:d4:69:
c0:42:e9:69:8b:f5:d6:d4:2b:02:66:31:e3:3d:13:b8:81:4d:
94:51:90:f1:68:c2:17:33:ff:14:45:b7:04:df:07:ab:83:cb:
9f:9a:ab:94:42:eb:47:4b:72:70:c3:60:de:65:fa:60:81:02:
a0:bb:88:39:63:79:c1:2f:20:ae:f7:91:4d:e0:58:f6:4b:54:
ba:71:59:f5:b3:51:6d:77:6d:0d:35:11:ba:73:6a:1e:4d:43:
8a:ba:34:c5:2c:c1:6c:86:a4:a9:0b:bc:fe:26:92:b0:4e:b6:
af:51:f5:46:d9:e5:b0:79:4c:aa:cc:81:b4:3f:2b:83:b0:5b:
ac:b3:15:9b:46:e1:94:b1:a8:dd:f9:c0:ce:8d:72:6a:f2:10:
fb:29:f6:8d
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIUI+qYTs5QWOYqevAtTS/2WdFkcx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3NDVaFw0yNzA1MjUwNjEyNDVaMDMxMTAvBgNV
BAMTKEY5QThBRjlCMUI1MjI5MEIwMzRENzc0MTEwQ0ZBOUNCNzYwOTMwMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnjzlo1o+8c2CCZoaOMfkixjpr
OZkEKVAJf7E2ZTUBn6lO5/lMogq4LK4Y7s8sWiiuRgQ3RZbm9YCurMV/lWRHa4vY
WvgxUNf7+50jWoPUbBVOESGjLx47dNSZM9bprOHjCTAHv/F6xOQt25NutxTF7X1f
xrBq36l9gFi135HUjYLMHeyDzKKXJRDvAR5xzZB/2eGDmJrDN2TTvVe7ogWWQAfQ
BaRTACp6d3gmQlJlZc5cZiKt3BTGORoprNfFELIEC8SBXlK1emuB6dilumAa1ix+
QXJSTRnoPr8dhWyLyVYZFrBzwP4UxUqSy+QvZyrseV17Yku6JdEzYDRIz2T1AgMB
AAGjggHFMIIBwTAdBgNVHQ4EFgQU+aivmxtSKQsDTXdBEM+py3YJMBMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyMDY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAECUwICMA0GCSqGSIb3DQEBCwUAA4IBAQAx
6zIDZXdDp451/fxhuA2zqErAkMWWiEZpuTyPljA2BxqZgX+C1mad3k7h5sbRRa6o
bh0KpqKuax/FEYFjwnJV4tl8kC4G1WeuNySH48ZIu3uwdlur6iMGG0Teex9X9EiS
o4Z8jX1ZG3VW1GnAQulpi/XW1CsCZjHjPRO4gU2UUZDxaMIXM/8URbcE3werg8uf
mquUQutHS3Jww2DeZfpggQKgu4g5Y3nBLyCu95FN4Fj2S1S6cVn1s1Ftd20NNRG6
c2oeTUOKujTFLMFshqSpC7z+JpKwTravUfVG2eWweUyqzIG0PyuDsFussxWbRuGU
sajd+cDOjXJq8hD7KfaN
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:09 2026 by rpki-client