Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142073.roa
File: AS142073.roa (raw, json)
Hash identifier: M54Hdzzkdst0ufnH4J/B/ox2LmNv2RADsrvp8g23RWY=
Subject key identifier: FE:B1:26:DF:52:CE:1D:9C:17:61:F5:35:CB:DA:6D:2A:E1:18:A4:44
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4CB1500A7C340FCD33BC1016B45750CF363D7E5E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142073.roa
Signing time: Fri 22 May 2026 07:09:07 +0000
ROA not before: Fri 22 May 2026 07:04:07 +0000
ROA not after: Fri 21 May 2027 07:09:07 +0000
asID: 142073
IP address blocks: 2001:253:207::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b1:50:0a:7c:34:0f:cd:33:bc:10:16:b4:57:50:cf:36:3d:7e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:07 2026 GMT
Not After : May 21 07:09:07 2027 GMT
Subject: CN=FEB126DF52CE1D9C1761F535CBDA6D2AE118A444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:d4:70:dd:c1:b9:02:14:91:af:1b:83:e8:
9f:37:c3:f5:c6:1b:84:e1:e6:f8:60:71:49:f2:ea:
fd:c9:88:d7:74:54:c7:1d:80:73:48:59:79:c5:2d:
2c:a1:af:1f:f7:d0:31:eb:5d:4d:1f:bb:17:23:8c:
0b:3c:ee:5e:db:d6:47:40:6f:4e:07:44:f5:16:eb:
db:4e:2e:f2:ac:08:70:af:b3:08:fb:13:f0:7a:7e:
37:e0:c4:e5:99:1e:97:81:91:39:64:d2:13:4b:5f:
32:5e:0a:50:15:11:3a:e3:fe:0f:7b:f3:0f:b9:4a:
9e:82:97:6b:25:34:ca:ce:75:62:d4:52:0a:93:4c:
7e:87:79:ec:4d:7c:ed:6f:4e:81:84:17:d4:2e:48:
8a:c3:4d:92:a0:cf:82:a4:8b:77:03:f4:7c:fc:84:
8b:05:bb:10:3b:0f:01:7c:3f:88:a0:a1:6b:55:e8:
0a:1c:a0:81:31:3b:4b:16:bf:a4:f6:18:19:91:2f:
79:cf:59:55:98:cb:44:a5:76:22:53:a6:8d:38:ee:
ca:0d:a2:7c:fc:6a:de:b8:da:c7:fd:72:41:1e:a8:
9f:b3:b5:bb:e9:64:6f:79:b1:b1:4b:e5:51:ac:02:
e8:c3:6c:76:f0:50:25:d0:1d:26:38:00:f3:c9:b3:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B1:26:DF:52:CE:1D:9C:17:61:F5:35:CB:DA:6D:2A:E1:18:A4:44
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:207::/48
Signature Algorithm: sha256WithRSAEncryption
ae:f8:60:ff:c3:87:72:bb:f8:bb:97:74:99:60:9a:af:27:bf:
d9:b8:9c:23:c1:6a:8d:f6:da:8e:95:95:d7:57:64:43:ae:4e:
61:20:6e:fd:ba:29:0a:2c:f1:05:3a:02:00:c9:8a:24:f8:00:
0d:79:2c:fb:99:86:61:e4:1c:4b:58:c8:c2:55:ae:f0:52:12:
0d:7f:1d:16:de:82:a4:c5:31:24:2f:80:63:c4:10:fb:97:67:
fa:45:ef:f9:cb:e9:42:f1:b9:ec:fb:a9:7d:30:62:30:9a:58:
02:e1:fd:54:38:51:44:f4:e8:2d:36:73:db:d3:d2:25:d3:b5:
bf:b9:b6:ce:26:8c:bb:8a:c4:8e:91:8e:f8:75:c2:b4:0f:93:
e7:2e:04:3d:e5:a9:a4:94:a7:d7:06:10:b3:99:a2:c2:e5:2e:
ac:e4:91:a1:f1:ac:c8:0a:99:48:fd:c9:d3:77:29:f1:f3:36:
cf:00:ab:d4:09:76:31:4e:e4:53:1e:6e:5e:0f:0e:cb:0d:e7:
00:d6:c7:09:87:d7:a6:a6:5b:15:eb:ec:e5:19:0d:e1:ff:8f:
51:d5:ac:a3:5c:18:d6:b8:a4:3c:75:17:8f:3c:d3:7c:90:16:
f7:8b:5d:11:9c:ba:35:5f:84:05:8c:d6:31:b2:69:1d:42:ba:
f6:97:90:59
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIUTLFQCnw0D80zvBAWtFdQzzY9fl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MDdaFw0yNzA1MjEwNzA5MDdaMDMxMTAvBgNV
BAMTKEZFQjEyNkRGNTJDRTFEOUMxNzYxRjUzNUNCREE2RDJBRTExOEE0NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKA9Rw3cG5AhSRrxuD6J83w/XG
G4Th5vhgcUny6v3JiNd0VMcdgHNIWXnFLSyhrx/30DHrXU0fuxcjjAs87l7b1kdA
b04HRPUW69tOLvKsCHCvswj7E/B6fjfgxOWZHpeBkTlk0hNLXzJeClAVETrj/g97
8w+5Sp6Cl2slNMrOdWLUUgqTTH6HeexNfO1vToGEF9QuSIrDTZKgz4Kki3cD9Hz8
hIsFuxA7DwF8P4igoWtV6AocoIExO0sWv6T2GBmRL3nPWVWYy0SldiJTpo047soN
onz8at642sf9ckEeqJ+ztbvpZG95sbFL5VGsAujDbHbwUCXQHSY4APPJs82JAgMB
AAGjggHFMIIBwTAdBgNVHQ4EFgQU/rEm31LOHZwXYfU1y9ptKuEYpEQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyMDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAECUwIHMA0GCSqGSIb3DQEBCwUAA4IBAQCu
+GD/w4dyu/i7l3SZYJqvJ7/ZuJwjwWqN9tqOlZXXV2RDrk5hIG79uikKLPEFOgIA
yYok+AANeSz7mYZh5BxLWMjCVa7wUhINfx0W3oKkxTEkL4BjxBD7l2f6Re/5y+lC
8bns+6l9MGIwmlgC4f1UOFFE9OgtNnPb09Il07W/ubbOJoy7isSOkY74dcK0D5Pn
LgQ95amklKfXBhCzmaLC5S6s5JGh8azICplI/cnTdynx8zbPAKvUCXYxTuRTHm5e
Dw7LDecA1scJh9emplsV6+zlGQ3h/49R1ayjXBjWuKQ8dRePPNN8kBb3i10RnLo1
X4QFjNYxsmkdQrr2l5BZ
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:53 2026 by rpki-client