Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142072.roa
File: AS142072.roa (raw, json)
Hash identifier: WdxBl5AKILqk5jKNrNI82e/44kf15xgTHamdFzAUcMY=
Subject key identifier: C3:D1:7D:92:35:6B:8B:A0:35:53:4B:8C:86:AC:E1:AD:78:0A:4E:05
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 513EE2918DD21A9CB46BC979BD337BCD5B33D3B0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142072.roa
Signing time: Mon 25 May 2026 06:48:56 +0000
ROA not before: Mon 25 May 2026 06:43:56 +0000
ROA not after: Mon 24 May 2027 06:48:56 +0000
asID: 142072
IP address blocks: 2001:253:206::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:3e:e2:91:8d:d2:1a:9c:b4:6b:c9:79:bd:33:7b:cd:5b:33:d3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:56 2026 GMT
Not After : May 24 06:48:56 2027 GMT
Subject: CN=C3D17D92356B8BA035534B8C86ACE1AD780A4E05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:67:33:07:7d:65:df:39:58:b8:5a:30:9e:
eb:22:25:2c:02:24:73:10:0e:47:4f:f8:85:e8:9f:
6a:7b:d9:67:cd:6c:48:9f:39:f6:68:ff:8d:03:62:
61:4d:ac:b6:82:7b:ea:d2:b8:d6:3b:80:61:bc:94:
b8:da:1a:19:4e:ee:db:c9:e7:63:07:fa:ea:0a:0a:
c6:21:87:a4:09:77:e9:4d:7b:a6:4f:30:f9:91:29:
33:53:db:17:07:32:9d:49:60:6f:ce:12:e4:52:e1:
14:19:55:a5:af:3f:54:8a:c9:0c:41:a8:22:16:53:
a9:3f:7d:01:3d:5e:b0:33:08:9f:15:ae:97:85:e4:
ee:b4:58:4c:e5:f2:19:66:4c:46:53:ed:bd:e3:0c:
b1:b2:f8:a7:38:38:0e:3f:c7:90:fe:7c:b7:3f:56:
58:64:2e:ec:20:30:01:f4:ea:23:de:0f:c0:5e:0b:
5c:98:15:d2:ea:a5:ab:9a:0f:00:c5:ad:6f:7a:97:
7a:c2:b6:88:6c:6d:d7:c3:06:99:23:90:b4:1e:07:
a1:70:60:63:f3:42:75:2a:06:ea:cc:7f:f8:a9:6d:
54:b1:94:30:e8:04:77:8f:b9:f0:6b:40:ff:b4:0b:
47:59:d0:bd:34:fc:4c:75:a6:0e:d7:f6:56:2d:92:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D1:7D:92:35:6B:8B:A0:35:53:4B:8C:86:AC:E1:AD:78:0A:4E:05
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142072.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:206::/48
Signature Algorithm: sha256WithRSAEncryption
8f:7d:8c:fc:8f:7b:a4:16:c9:d6:71:5b:70:61:5a:87:58:b5:
43:46:5a:52:5d:89:18:55:73:82:d5:f1:88:da:0b:a7:80:8f:
0e:fd:0c:53:5e:3e:2d:2a:d8:d2:3d:d4:e9:50:12:8b:ce:42:
0e:35:f3:01:ef:54:64:7a:59:97:59:2a:20:33:ea:d2:b5:3e:
af:5a:e3:01:cd:a7:2b:9f:50:2a:58:82:20:f1:49:43:9c:e1:
1f:30:bf:40:ed:1b:be:a3:36:72:b9:da:24:34:88:e4:27:2c:
e8:8b:cd:76:3d:de:c9:d1:57:c5:30:c3:14:f7:51:ed:bc:7a:
ef:c7:8f:2a:ff:49:a8:e7:ef:d1:ae:6c:82:30:53:d3:1c:f3:
e7:1b:a8:53:9a:a6:7a:48:55:95:60:f5:bb:7a:be:8e:d3:b5:
d2:b3:27:4e:8c:12:3a:e4:50:0a:c2:af:ab:63:fc:ec:d8:83:
0e:f4:57:dc:e3:6f:33:35:6f:c9:56:cd:57:d8:0c:1a:fe:2d:
e6:1d:78:30:46:0a:10:0d:53:4d:22:74:d4:12:18:08:f2:59:
0f:61:b6:56:61:64:77:4a:4a:a3:2e:85:1c:38:70:d7:84:cf:
5f:7e:0b:36:14:4c:77:44:41:23:6a:d1:60:fe:c2:de:1a:4c:
72:e2:14:8c
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIUUT7ikY3SGpy0a8l5vTN7zVsz07AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNTZaFw0yNzA1MjQwNjQ4NTZaMDMxMTAvBgNV
BAMTKEMzRDE3RDkyMzU2QjhCQTAzNTUzNEI4Qzg2QUNFMUFENzgwQTRFMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDF2czB31l3zlYuFownusiJSwC
JHMQDkdP+IXon2p72WfNbEifOfZo/40DYmFNrLaCe+rSuNY7gGG8lLjaGhlO7tvJ
52MH+uoKCsYhh6QJd+lNe6ZPMPmRKTNT2xcHMp1JYG/OEuRS4RQZVaWvP1SKyQxB
qCIWU6k/fQE9XrAzCJ8VrpeF5O60WEzl8hlmTEZT7b3jDLGy+Kc4OA4/x5D+fLc/
VlhkLuwgMAH06iPeD8BeC1yYFdLqpauaDwDFrW96l3rCtohsbdfDBpkjkLQeB6Fw
YGPzQnUqBurMf/ipbVSxlDDoBHePufBrQP+0C0dZ0L00/Ex1pg7X9lYtkoNTAgMB
AAGjggHFMIIBwTAdBgNVHQ4EFgQUw9F9kjVri6A1U0uMhqzhrXgKTgUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyMDcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAECUwIGMA0GCSqGSIb3DQEBCwUAA4IBAQCP
fYz8j3ukFsnWcVtwYVqHWLVDRlpSXYkYVXOC1fGI2gungI8O/QxTXj4tKtjSPdTp
UBKLzkIONfMB71RkelmXWSogM+rStT6vWuMBzacrn1AqWIIg8UlDnOEfML9A7Ru+
ozZyudokNIjkJyzoi812Pd7J0VfFMMMU91HtvHrvx48q/0mo5+/RrmyCMFPTHPPn
G6hTmqZ6SFWVYPW7er6O07XSsydOjBI65FAKwq+rY/zs2IMO9Ffc428zNW/JVs1X
2Awa/i3mHXgwRgoQDVNNInTUEhgI8lkPYbZWYWR3SkqjLoUcOHDXhM9ffgs2FEx3
REEjatFg/sLeGkxy4hSM
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:26 2026 by rpki-client