Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142076.roa
File: AS142076.roa (raw, json)
Hash identifier: x2pLi/ps3XV1u3Y497lSQ+HlJVh9/Ult4c/njTATSXs=
Subject key identifier: 76:EE:6E:8F:F2:05:95:B8:77:C5:7B:61:8F:B9:B5:E5:57:9C:C1:3C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32AF2F136BAF82A4C2555F89395486007C55B633
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142076.roa
Signing time: Mon 25 May 2026 06:49:09 +0000
ROA not before: Mon 25 May 2026 06:44:09 +0000
ROA not after: Mon 24 May 2027 06:49:09 +0000
asID: 142076
IP address blocks: 2001:253:210::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:af:2f:13:6b:af:82:a4:c2:55:5f:89:39:54:86:00:7c:55:b6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:09 2026 GMT
Not After : May 24 06:49:09 2027 GMT
Subject: CN=76EE6E8FF20595B877C57B618FB9B5E5579CC13C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:a6:cf:7a:d9:ab:ac:b2:cd:4b:ff:52:57:
a1:bb:c6:72:78:fa:1b:e8:db:e0:29:cf:c0:25:fc:
ef:1b:8b:d0:c7:84:12:66:20:b9:3e:8e:4f:83:d6:
b7:c4:fb:9e:be:dc:9d:c1:98:72:7f:26:a5:9d:bf:
ab:39:18:ad:47:94:ee:41:1c:1c:af:61:ce:1f:ba:
86:27:30:01:c9:77:4d:13:82:39:58:47:14:74:d5:
78:0e:8c:80:a9:2b:a7:00:0e:61:23:90:a9:04:32:
55:20:bb:18:28:27:72:a2:3c:68:9f:1d:86:cd:bc:
c2:68:5b:cc:f1:98:4c:98:d9:7c:81:c1:db:e7:94:
c7:63:6b:70:43:fb:c8:f3:07:e9:49:e2:39:64:9f:
c6:e2:e0:1e:f2:56:8d:3e:3d:de:48:83:2e:e6:cd:
34:ae:7d:52:f9:64:c9:8c:c7:cd:d3:03:90:6a:a4:
ae:ae:98:b5:63:5a:83:94:8d:d1:6a:b8:b2:c1:cf:
d5:e2:27:73:88:1f:9f:32:8d:a1:c2:fc:d7:e9:64:
ec:08:94:1d:2b:df:f9:83:4e:27:de:75:7a:8a:a0:
6a:e8:eb:3e:fe:bb:96:0f:71:98:b7:2c:40:bf:5d:
a2:04:8a:fa:8a:ea:76:0f:11:10:89:34:02:31:2f:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EE:6E:8F:F2:05:95:B8:77:C5:7B:61:8F:B9:B5:E5:57:9C:C1:3C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142076.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:210::/48
Signature Algorithm: sha256WithRSAEncryption
a1:e7:24:8e:e3:7f:fd:22:ca:73:b8:04:8f:9f:1e:65:45:b7:
b3:01:61:ae:db:15:37:86:89:0c:d5:fc:de:d2:69:70:ef:36:
9a:66:95:76:03:37:9a:68:81:00:4d:52:7a:f2:a3:e2:bf:be:
e8:54:b2:b8:48:7a:a1:32:4b:2e:1e:4f:4b:64:09:46:35:69:
18:15:00:66:d6:d2:28:89:08:42:16:f7:2c:d0:4d:26:6e:76:
71:9c:81:3c:80:9b:4e:c5:c8:ef:8a:ac:f0:dd:c1:10:47:eb:
a9:db:d4:c0:2d:e3:57:14:50:b1:9a:e6:6b:b2:0b:30:3d:7d:
ab:e2:cc:c7:6c:4e:91:2b:5a:8e:1a:25:fb:9f:55:ae:73:b7:
6f:c8:eb:04:f4:fa:33:b0:50:a5:ef:96:24:ff:05:16:85:5d:
24:84:b4:d8:25:09:11:e7:11:78:fa:12:fd:2b:26:63:74:42:
1a:ec:0a:fc:30:d7:0c:ec:40:88:38:dd:50:5b:06:a8:28:d8:
fb:f1:5c:d3:8e:b0:eb:86:1c:19:e3:14:6b:c6:24:8f:58:15:
9a:82:f6:c4:c9:71:8d:3a:60:34:d2:6d:48:94:72:45:fb:83:
fc:8e:51:86:58:e9:0d:f5:36:ef:2a:8d:d4:06:3d:9c:88:6f:
63:e5:b2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:47 2026 by rpki-client