Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142085.roa
File: AS142085.roa (raw, json)
Hash identifier: Tg5mGOXo8FVzv5LbPKwrZYeoeHKcVHx3tIUYUwIJvNI=
Subject key identifier: D6:60:B4:D4:60:A4:80:C6:93:70:C9:8B:7B:DD:AB:BF:C3:5F:8B:15
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 41A7D0A640308659BD84BFB1C9C4D8C1F986331A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142085.roa
Signing time: Fri 22 May 2026 04:08:13 +0000
ROA not before: Fri 22 May 2026 04:03:13 +0000
ROA not after: Fri 21 May 2027 04:08:13 +0000
asID: 142085
IP address blocks: 2001:253:219::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a7:d0:a6:40:30:86:59:bd:84:bf:b1:c9:c4:d8:c1:f9:86:33:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:13 2026 GMT
Not After : May 21 04:08:13 2027 GMT
Subject: CN=D660B4D460A480C69370C98B7BDDABBFC35F8B15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:17:00:6b:0a:55:4c:08:f0:34:ae:4e:23:
e4:8a:fb:50:8c:2d:1e:12:7c:16:98:35:75:05:b8:
9c:10:73:62:f3:03:27:66:3d:58:fc:56:0f:02:76:
50:14:25:5e:17:48:c4:98:72:27:0c:58:6e:ce:5a:
cf:9c:52:0e:d9:0a:c8:81:7c:42:b5:89:d9:02:a0:
2f:cc:51:7d:1b:06:c4:79:ed:9c:f9:98:e6:dd:bc:
f1:1b:07:19:44:d6:41:4a:29:f6:33:22:ee:72:76:
87:66:17:4a:c9:7d:ef:64:d9:db:a1:f5:43:43:70:
d6:b4:9e:53:cd:36:82:9c:75:5e:71:f1:21:37:18:
37:f9:c6:4a:6b:4e:cd:36:df:fc:5b:29:23:94:1f:
9e:2d:32:cf:12:9e:1e:8e:3b:d6:07:36:2b:12:bd:
f0:43:8b:2d:5a:0b:8f:1e:89:b8:5c:75:a0:25:49:
82:f0:52:fc:9e:f2:67:3e:f5:b8:b0:7c:2d:b7:80:
03:db:c5:0f:3d:7d:fe:38:82:b1:3b:ee:9d:12:5b:
5c:e6:67:6c:be:8b:8c:91:eb:04:b6:09:84:9a:6e:
6e:33:40:00:66:f1:d6:7b:a4:0e:ba:98:25:9d:d5:
7a:95:8a:9a:9a:e0:29:4d:ff:a8:2b:7f:6c:5a:ca:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:60:B4:D4:60:A4:80:C6:93:70:C9:8B:7B:DD:AB:BF:C3:5F:8B:15
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:219::/48
Signature Algorithm: sha256WithRSAEncryption
b8:16:fa:f6:55:67:5f:83:8b:ca:9e:d3:d1:d6:d2:85:99:7f:
ee:95:78:e9:56:ad:67:0f:32:f8:32:48:eb:f6:21:4f:35:85:
6c:d3:6f:f2:8d:d7:8e:59:8f:c1:5a:1d:a9:91:3c:ea:87:2a:
dc:ac:54:0e:10:12:51:02:91:2f:94:e8:4a:68:69:9b:09:2d:
e3:af:7c:22:85:c3:55:93:94:2d:55:75:12:c7:14:4e:e7:60:
b2:68:c6:6c:fa:2a:3a:0d:15:10:6f:34:78:90:ff:c0:ef:a2:
e0:60:7a:72:36:72:6c:e5:58:77:ab:a0:77:a7:f0:65:ff:df:
5f:4e:83:97:dd:20:e8:ab:a3:ed:6d:61:a7:fd:57:b1:ef:97:
56:88:f4:8e:61:34:da:42:c7:10:ce:d4:8e:6c:e0:88:c2:93:
bb:0e:17:d0:27:1e:02:2f:5b:12:f2:86:bd:18:54:ab:44:c7:
6f:dd:6b:92:5e:8f:50:ed:55:97:cb:74:9e:7b:22:a0:be:f3:
c5:8e:be:75:a1:a6:95:d4:a9:39:4e:8f:0c:aa:e6:d5:2a:cc:
4c:35:41:dc:cf:7e:75:b0:de:61:c3:67:97:6b:5e:62:26:41:
a2:9a:98:01:d6:56:71:22:fa:17:e2:7f:e5:fd:d0:3b:00:54:
de:d8:ad:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:40 2026 by rpki-client