Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142070.roa
File: AS142070.roa (raw, json)
Hash identifier: 1nF0eBcdtd4ux9E2YHhXUuNqpAQWie49JlK6IVFT8i4=
Subject key identifier: 17:E4:6F:9E:B2:DC:69:FC:78:99:4B:5D:BB:12:BB:EE:19:40:0F:AA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 16EFB8376DBBF12B742148550A0162F09BEDC1F9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142070.roa
Signing time: Mon 25 May 2026 03:19:27 +0000
ROA not before: Mon 25 May 2026 03:14:27 +0000
ROA not after: Mon 24 May 2027 03:19:27 +0000
asID: 142070
IP address blocks: 2001:253:204::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ef:b8:37:6d:bb:f1:2b:74:21:48:55:0a:01:62:f0:9b:ed:c1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:27 2026 GMT
Not After : May 24 03:19:27 2027 GMT
Subject: CN=17E46F9EB2DC69FC78994B5DBB12BBEE19400FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:aa:f5:0f:3d:21:84:49:9e:1e:37:89:8e:11:
a0:e1:05:05:bd:44:e7:96:fc:4d:3c:42:9b:04:1a:
c9:60:3a:82:8b:64:27:3e:fb:a0:83:97:05:e3:2a:
de:0f:29:e1:e4:d7:f4:70:3e:12:11:0b:fb:64:0e:
55:3f:6d:e8:75:7c:39:b8:27:89:1b:14:b6:86:fb:
ac:f2:13:f7:70:a2:36:f3:6d:ad:c4:40:66:97:3c:
0f:ab:0e:99:1a:23:85:8a:12:29:f7:a9:b0:d5:67:
39:07:ab:22:c3:74:bf:1f:ce:96:2f:70:43:0d:e1:
b9:57:67:ca:37:7c:ce:88:b1:2d:0e:2a:24:81:37:
bf:83:36:8a:c2:6b:40:4f:85:1f:1d:f4:f3:e4:e2:
71:35:7d:87:95:df:c6:fd:98:2d:05:f8:5d:6c:5f:
37:70:15:a4:97:00:16:15:8f:4e:b1:e7:18:d0:77:
c6:f8:39:0c:53:50:11:3e:53:15:61:12:db:f2:58:
0a:0d:30:fa:07:df:23:5f:a6:5c:fd:c7:de:d0:c8:
4c:89:27:5f:50:2b:18:cf:3f:f0:ee:ad:81:e1:e9:
7f:c4:81:7c:3d:f1:75:2b:41:49:de:97:1f:26:72:
72:62:80:71:4b:35:3e:1a:03:6c:79:4c:70:08:91:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E4:6F:9E:B2:DC:69:FC:78:99:4B:5D:BB:12:BB:EE:19:40:0F:AA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142070.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:204::/48
Signature Algorithm: sha256WithRSAEncryption
7b:09:b0:d2:81:bf:50:af:ac:31:a9:36:38:d3:c5:8e:d4:09:
19:8e:ee:3c:81:c5:48:55:f9:71:b5:31:7b:b4:d9:59:8a:81:
f2:3d:48:2d:a4:31:7b:ab:00:55:2b:70:fc:7e:c9:2f:5d:1f:
3f:47:e0:a0:5f:8c:36:e7:29:15:30:34:85:c1:4a:f0:5b:17:
05:60:23:bc:43:69:92:43:e2:0e:ee:2e:fd:b4:a3:99:a1:55:
d7:02:09:21:a2:e2:2f:83:2b:0f:a6:5e:89:84:2e:0c:3e:af:
f4:40:25:6b:e6:2e:5d:df:33:46:ed:b9:c0:6e:cf:c8:4d:7f:
6d:b3:dc:7e:e2:b4:8a:d0:dc:e1:40:7d:67:bc:04:e3:5a:5d:
89:ce:33:c0:ba:82:40:9b:d7:ba:43:4a:d9:78:86:05:25:cf:
e4:4b:65:2c:eb:36:34:35:cb:66:aa:5e:7e:6e:c2:a8:9c:02:
ee:bc:c5:00:ce:78:1b:f3:1e:00:13:9b:f9:66:1e:a2:a1:af:
c2:0d:fc:cd:3a:02:f2:c3:79:5c:47:4b:30:35:6e:d7:59:31:
7a:1c:49:56:66:ef:b3:9a:1c:26:1c:09:f4:ae:e7:e8:7a:47:
d5:b0:81:6a:9c:a3:fd:bd:e2:86:c7:a1:16:14:7c:21:12:97:
3f:0f:40:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:09 2026 by rpki-client