Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142080.roa
File: AS142080.roa (raw, json)
Hash identifier: eac4oVEbhJkoNAbo3PWPr9LzydwUqWvrvmHQwUJJUQc=
Subject key identifier: E9:B8:7A:63:EB:DF:7A:80:C8:73:D6:3C:07:B1:12:9B:44:46:83:06
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 23FCC661F8AC16A187E9C1D4BB9C21192BD48F0F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142080.roa
Signing time: Fri 22 May 2026 04:08:21 +0000
ROA not before: Fri 22 May 2026 04:03:21 +0000
ROA not after: Fri 21 May 2027 04:08:21 +0000
asID: 142080
IP address blocks: 2001:253:214::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:fc:c6:61:f8:ac:16:a1:87:e9:c1:d4:bb:9c:21:19:2b:d4:8f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:21 2026 GMT
Not After : May 21 04:08:21 2027 GMT
Subject: CN=E9B87A63EBDF7A80C873D63C07B1129B44468306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:e8:f9:88:da:57:b7:41:b4:a5:7c:db:78:
c1:dc:3d:f6:c9:20:cd:08:6c:26:d7:fd:0c:0e:f2:
64:97:50:22:b0:f3:37:8d:4f:5b:1c:4c:49:bf:86:
85:93:3a:a8:07:cf:44:f6:75:16:33:2d:ba:f0:28:
34:0a:3c:17:f0:ca:33:9f:25:81:61:70:bc:d8:92:
02:80:25:3f:4d:64:34:82:3b:79:71:af:23:05:75:
29:23:d5:84:93:26:5d:52:3f:39:e6:ad:0b:ae:bb:
4b:bd:73:a2:bb:80:df:e1:f6:65:7f:9a:fb:0f:2f:
1f:b9:68:ee:0b:f8:52:e9:c1:12:69:58:08:d8:3d:
69:07:16:8d:05:ec:d2:35:3c:38:85:67:74:ea:dc:
30:a2:eb:bc:9f:00:43:18:04:d9:7f:30:b1:be:f6:
3b:76:4b:9d:42:7f:6b:fa:10:47:4f:5a:c4:15:ac:
00:17:b1:6c:c5:9b:9e:75:2a:5f:17:40:6b:37:ff:
80:2f:69:e6:20:ca:23:c9:7e:70:4d:66:74:08:82:
ad:53:7c:f7:60:8c:39:00:89:e1:22:58:71:65:2b:
8d:c3:36:c5:46:2b:0b:f2:13:5c:1e:15:eb:50:b0:
ab:9a:d9:3e:fd:7f:36:66:80:bd:ec:f4:db:61:75:
bf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B8:7A:63:EB:DF:7A:80:C8:73:D6:3C:07:B1:12:9B:44:46:83:06
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142080.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:214::/48
Signature Algorithm: sha256WithRSAEncryption
bd:97:15:46:98:74:d3:6e:59:a0:2a:52:7f:15:66:54:44:e2:
d8:66:e5:b3:41:aa:73:75:9f:e9:47:ec:14:99:d6:b2:43:11:
d1:a6:2a:96:5d:8c:2d:9c:fc:80:81:1c:05:27:61:11:25:f3:
0b:5c:62:75:63:98:a1:36:f0:6c:f4:50:d4:f6:90:74:f5:17:
3b:c5:55:a5:fa:50:b6:15:33:d4:37:b2:86:5c:6c:ed:34:9e:
91:00:08:8a:19:ae:41:f4:67:10:52:df:cf:36:d8:c1:e3:3d:
fa:d4:4d:c7:42:21:e6:ec:b0:e6:10:da:d8:07:5c:1f:56:b2:
58:51:8b:71:d9:2f:c3:9c:db:e0:d1:03:1e:72:cb:99:49:15:
65:5a:d3:c0:c9:0a:25:21:16:ab:e6:49:83:d4:ea:11:9d:e8:
a4:9c:93:86:fa:43:aa:2a:96:5a:a7:33:a3:40:2f:74:61:61:
5a:f4:6c:d4:68:d7:14:9f:ce:15:29:db:0f:56:38:be:20:26:
95:42:91:74:ed:58:14:73:c5:e9:47:4e:5c:52:aa:67:99:6b:
32:27:33:77:6f:d1:fe:ca:da:ed:8c:a3:5b:49:df:32:95:70:
16:cf:a1:8d:d6:a0:8a:fe:60:c5:25:a6:49:25:dd:a7:24:c6:
e3:d1:04:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:23 2026 by rpki-client