Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142071.roa
File: AS142071.roa (raw, json)
Hash identifier: wRhBhxNcIOBQZHpySuoVIjekRlJTecS5dqFco329Qsk=
Subject key identifier: 96:7D:66:F0:22:E1:0D:63:50:0C:5E:A8:20:D4:0E:47:3F:1A:A2:CB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4AF69DA7A5DE4AFE0F520708697FFF065C083437
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142071.roa
Signing time: Mon 25 May 2026 01:20:14 +0000
ROA not before: Mon 25 May 2026 01:15:14 +0000
ROA not after: Mon 24 May 2027 01:20:14 +0000
asID: 142071
IP address blocks: 2001:253:205::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f6:9d:a7:a5:de:4a:fe:0f:52:07:08:69:7f:ff:06:5c:08:34:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:14 2026 GMT
Not After : May 24 01:20:14 2027 GMT
Subject: CN=967D66F022E10D63500C5EA820D40E473F1AA2CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a7:40:b7:c1:d5:6b:50:bd:f8:3c:37:9e:8a:
d1:4b:f2:33:d5:c9:49:64:6d:34:96:08:4f:1f:84:
f3:68:5f:a9:a0:fe:6c:e1:ae:74:47:7b:b9:78:fb:
1c:27:22:25:c2:27:4d:e5:ff:6f:ef:84:0d:fa:95:
a0:2c:fb:04:e7:6d:c0:21:66:0e:f0:e9:2a:80:d4:
57:8e:9d:e4:a5:7c:70:d6:1d:cb:b0:99:3c:9f:b9:
29:35:10:ec:d8:13:27:d0:7f:e7:c4:ee:11:c4:cb:
55:59:3a:91:bb:65:19:49:ae:0b:f4:f5:f1:17:4c:
ca:c3:d1:e1:60:86:56:c7:8b:d9:8c:ab:99:d4:ed:
2f:c8:a4:3d:e1:51:82:a0:4a:39:11:73:1a:1c:d6:
0b:a5:97:a9:c8:09:5e:f5:f4:cc:9f:5f:cc:cc:56:
2b:b3:de:cd:13:bc:6f:32:8e:23:92:22:ec:3a:38:
e5:c0:a7:0c:2c:91:e2:cb:83:bd:a8:90:9c:9c:87:
7c:6e:42:35:67:bd:bc:58:d7:f1:5e:31:62:76:da:
41:5a:2b:ba:8c:25:bf:6c:4a:08:27:7d:85:af:69:
3d:7c:48:34:0d:40:53:fc:1e:c7:41:a3:a4:e3:b1:
9c:85:15:1b:0f:58:d2:78:a8:63:da:65:57:84:a6:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7D:66:F0:22:E1:0D:63:50:0C:5E:A8:20:D4:0E:47:3F:1A:A2:CB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:205::/48
Signature Algorithm: sha256WithRSAEncryption
a5:83:a4:4a:03:0c:a9:af:a4:99:f4:f1:2e:53:14:62:5c:1a:
03:a4:d8:d2:b2:27:a3:d0:7f:40:21:41:63:aa:99:44:0a:7c:
81:85:fd:88:11:ac:c4:29:a3:27:be:29:0c:4a:42:9e:d0:d9:
81:cf:fd:55:d1:b2:34:36:7f:94:c5:b7:f1:99:a6:7d:a9:30:
28:e4:c1:eb:93:aa:f4:b5:e5:60:42:5e:ab:e9:86:03:e2:9b:
e8:ef:1b:74:8f:c0:ac:de:9a:10:ef:16:0c:a7:14:f7:35:61:
23:0a:32:6c:ef:89:90:de:5b:1c:ba:e8:16:65:25:67:74:07:
a6:e1:61:14:b8:5d:ee:e7:aa:73:77:22:81:a1:47:37:56:0c:
a6:06:79:26:8c:ab:aa:04:04:68:50:68:e2:89:9a:7d:60:72:
e6:55:a9:5f:de:d0:56:08:6c:96:bc:26:7d:6e:bf:c0:fe:b7:
e6:de:3a:97:74:61:05:d0:99:a3:15:a2:4b:09:fd:77:9f:56:
9a:35:73:9f:da:90:a4:3c:54:37:ad:54:72:d2:27:9f:7d:79:
96:be:4e:52:dd:8b:8e:8d:63:ed:04:b8:83:18:2d:f5:ac:17:
75:8f:59:c4:76:e4:bf:b4:a3:09:f7:e9:ef:06:2f:28:9b:6e:
eb:b0:41:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:58 2026 by rpki-client