Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142069.roa
File: AS142069.roa (raw, json)
Hash identifier: HOF17t0wXddvlIVLs9mEvUQnIevpPJv/SRzyc9f1KsQ=
Subject key identifier: BA:A6:56:F0:AB:31:19:CC:B7:C0:43:E8:88:B6:0C:A7:EA:6B:67:A0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B8CB57B83877B2E92F53FAE565AF3BFD4BE56DD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142069.roa
Signing time: Mon 25 May 2026 03:19:12 +0000
ROA not before: Mon 25 May 2026 03:14:12 +0000
ROA not after: Mon 24 May 2027 03:19:12 +0000
asID: 142069
IP address blocks: 2001:253:203::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:8c:b5:7b:83:87:7b:2e:92:f5:3f:ae:56:5a:f3:bf:d4:be:56:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:12 2026 GMT
Not After : May 24 03:19:12 2027 GMT
Subject: CN=BAA656F0AB3119CCB7C043E888B60CA7EA6B67A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:c8:fa:16:06:a6:bd:61:8b:97:1b:cf:ee:
32:90:0f:b9:79:34:ef:f0:07:36:d0:a9:d9:f1:10:
54:7f:ef:19:1a:ec:32:dd:c6:e7:24:93:7c:cc:14:
70:bc:87:92:f9:4b:99:df:43:1a:0e:8e:5c:dc:b3:
6a:ec:17:6a:28:0e:00:d1:73:0b:f1:dd:a1:77:3f:
ba:5d:b4:fe:15:d4:ed:bb:4d:45:4a:d3:7e:cf:5b:
aa:6a:e4:04:fd:70:e2:ed:fd:04:c0:5b:7e:5d:af:
f0:c7:08:fa:5f:80:ea:86:aa:e1:fd:06:84:c2:05:
89:c2:91:94:17:6d:ab:cc:a9:1a:96:36:19:cc:90:
ef:33:7e:49:6f:17:b5:92:cf:5b:1f:c3:d8:eb:6b:
15:f7:74:b0:df:04:17:6b:8e:5c:3f:82:25:a8:ed:
b3:85:29:cb:14:b3:56:43:07:e4:0d:f2:ed:ca:2f:
f0:df:a7:1a:d8:75:17:0d:14:e5:d0:dd:bf:64:8c:
02:87:56:82:a4:45:f0:3e:a5:a6:33:07:7e:be:2b:
6e:14:6f:83:7b:9f:9e:69:43:94:a1:cc:e3:c8:e6:
0b:3a:62:9c:b5:07:5a:e2:f1:a7:f7:5d:10:82:2f:
71:db:8b:a9:60:8e:30:fa:0f:73:51:54:9f:39:c6:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:56:F0:AB:31:19:CC:B7:C0:43:E8:88:B6:0C:A7:EA:6B:67:A0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:203::/48
Signature Algorithm: sha256WithRSAEncryption
9c:60:49:7f:01:b9:92:97:36:f4:10:cf:9a:1d:ea:f6:c3:63:
dc:bf:e5:10:a8:2c:5b:9e:9d:3a:90:4b:24:ce:2f:58:7f:8f:
20:0f:5a:5a:65:08:f7:43:4f:2e:1a:f7:e7:0e:c8:cf:06:e0:
4c:8c:e0:2f:79:7a:7e:e5:2d:ff:d2:76:3a:51:8d:b4:66:12:
14:3a:0c:75:a1:f8:4b:04:6c:81:92:6e:19:93:81:5d:04:1f:
90:e9:e6:ce:47:66:c0:29:2e:f6:bc:ab:ea:6e:76:01:71:e3:
71:fa:cc:ef:08:74:cc:61:c9:1d:69:14:a1:7b:21:86:89:c2:
e3:05:1e:ca:bb:aa:a6:b4:9e:cb:6b:1b:96:8a:92:57:6d:ef:
05:af:1e:36:69:7d:05:9f:19:8b:97:fa:e2:94:dc:60:af:c4:
72:bc:96:87:b1:8e:11:9d:be:25:e9:bd:37:84:11:5d:59:b8:
c5:19:f4:da:fa:15:27:f1:cc:03:07:bc:90:44:60:79:0b:84:
a6:fe:1a:c2:dc:de:e4:92:6a:5b:83:42:5e:c1:cb:1c:32:cb:
c1:1a:d9:f2:18:6e:63:d8:87:a4:fc:70:7a:09:24:e4:96:1d:
62:ca:bf:19:aa:f6:96:45:e9:6d:bd:b7:41:9c:68:d0:40:f8:
b3:89:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:58 2026 by rpki-client