Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142086.roa
File: AS142086.roa (raw, json)
Hash identifier: tMe6Nxn8UZ7V298Wz3wJFHJIINwVFwvQSOjK8YQO0K0=
Subject key identifier: 6A:9F:44:40:27:90:50:20:40:F7:31:67:0B:61:99:9F:87:FF:EA:2F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 59D1069AC8418AD9EE58735F930A47C8749D0D16
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142086.roa
Signing time: Mon 25 May 2026 02:22:09 +0000
ROA not before: Mon 25 May 2026 02:17:09 +0000
ROA not after: Mon 24 May 2027 02:22:09 +0000
asID: 142086
IP address blocks: 2001:253:220::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d1:06:9a:c8:41:8a:d9:ee:58:73:5f:93:0a:47:c8:74:9d:0d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:09 2026 GMT
Not After : May 24 02:22:09 2027 GMT
Subject: CN=6A9F44402790502040F731670B61999F87FFEA2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:b4:0d:a6:00:d9:3b:9b:e0:68:60:ea:5d:
f0:1e:b7:91:65:60:b6:e2:39:9e:15:06:72:ce:3c:
b8:84:2a:93:f9:80:a1:87:8d:85:6d:7d:4d:43:7d:
e0:b7:14:df:5d:4f:b3:ca:e6:fb:c2:c6:ae:9a:dd:
58:de:42:c6:75:c6:f4:d7:28:f1:e6:58:b4:be:50:
7c:1b:ca:8d:0c:8e:f5:76:7c:e9:86:d5:4a:a5:cc:
63:63:85:a0:77:d4:fd:e8:35:fc:30:22:0b:cb:23:
b7:f6:dc:34:ce:34:58:05:61:df:3f:fc:19:0d:d4:
92:a0:5b:90:d5:4c:1f:e1:37:02:9b:71:ab:90:a5:
d8:57:b5:8a:a5:fc:7e:84:f6:ec:b1:bd:db:82:25:
57:fb:0b:e9:69:59:b4:cd:81:f1:16:d2:d3:aa:49:
16:ff:d9:d1:3f:56:ca:e1:45:61:9b:dd:9a:98:73:
16:95:03:7d:91:cc:ba:c4:ca:6c:d0:91:13:7b:69:
5a:21:dd:ff:38:51:53:c4:1d:e8:40:33:cb:45:49:
a7:19:1a:12:31:05:09:f2:f1:bb:ad:02:c3:35:fc:
07:ca:49:86:28:0f:9a:5b:46:f7:19:4d:ec:86:7d:
02:9e:cf:f6:89:ec:81:a7:a1:82:47:f6:75:40:8e:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9F:44:40:27:90:50:20:40:F7:31:67:0B:61:99:9F:87:FF:EA:2F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142086.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:220::/48
Signature Algorithm: sha256WithRSAEncryption
8a:f1:51:6e:4a:0b:cb:14:98:58:96:2b:b4:3d:45:61:b5:19:
d7:c1:9a:9d:8d:8e:02:08:ff:9c:f2:89:1a:bc:43:6e:c0:69:
82:0d:23:92:28:c9:33:47:97:36:f9:25:5f:2d:c6:99:e0:d6:
11:d6:d9:3c:7a:41:43:cd:e8:eb:d2:6a:42:0c:ee:77:d5:1b:
16:2f:be:2d:0e:19:b2:83:8b:e0:e5:f5:0f:e1:12:83:11:83:
ca:cc:a9:a3:5f:65:27:7f:7c:83:b8:80:c6:e7:29:c3:dd:af:
05:84:dc:26:3c:2f:9e:57:6a:34:d0:13:b4:5e:4f:00:09:45:
cb:23:32:16:9a:3e:3e:dd:56:81:1f:48:f1:8e:8e:9d:00:7a:
50:a5:6f:6b:d8:e8:8d:c3:d1:26:d8:34:f5:35:1f:89:54:b5:
04:d9:fd:57:cf:0d:96:25:26:f9:03:56:49:fb:67:83:6b:0d:
8d:20:c8:81:52:88:d2:c6:4f:1f:b8:ca:a4:d7:5d:44:20:15:
d0:c8:c8:07:87:2b:4b:bb:c0:75:64:3f:60:7b:51:c6:68:c7:
f3:a6:0c:4f:5b:e2:c6:19:8b:e9:85:59:47:bf:d6:10:b6:e0:
01:16:02:f3:a5:c9:15:14:f2:ce:01:17:e5:c4:e5:1c:16:2d:
cc:80:49:4c
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIUWdEGmshBitnuWHNfkwpHyHSdDRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MDlaFw0yNzA1MjQwMjIyMDlaMDMxMTAvBgNV
BAMTKDZBOUY0NDQwMjc5MDUwMjA0MEY3MzE2NzBCNjE5OTlGODdGRkVBMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHb7QNpgDZO5vgaGDqXfAet5Fl
YLbiOZ4VBnLOPLiEKpP5gKGHjYVtfU1DfeC3FN9dT7PK5vvCxq6a3VjeQsZ1xvTX
KPHmWLS+UHwbyo0MjvV2fOmG1UqlzGNjhaB31P3oNfwwIgvLI7f23DTONFgFYd8/
/BkN1JKgW5DVTB/hNwKbcauQpdhXtYql/H6E9uyxvduCJVf7C+lpWbTNgfEW0tOq
SRb/2dE/VsrhRWGb3ZqYcxaVA32RzLrEymzQkRN7aVoh3f84UVPEHehAM8tFSacZ
GhIxBQny8butAsM1/AfKSYYoD5pbRvcZTeyGfQKez/aJ7IGnoYJH9nVAjkTNAgMB
AAGjggHFMIIBwTAdBgNVHQ4EFgQUap9EQCeQUCBA9zFnC2GZn4f/6i8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyMDg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAECUwIgMA0GCSqGSIb3DQEBCwUAA4IBAQCK
8VFuSgvLFJhYliu0PUVhtRnXwZqdjY4CCP+c8okavENuwGmCDSOSKMkzR5c2+SVf
LcaZ4NYR1tk8ekFDzejr0mpCDO531RsWL74tDhmyg4vg5fUP4RKDEYPKzKmjX2Un
f3yDuIDG5ynD3a8FhNwmPC+eV2o00BO0Xk8ACUXLIzIWmj4+3VaBH0jxjo6dAHpQ
pW9r2OiNw9Em2DT1NR+JVLUE2f1Xzw2WJSb5A1ZJ+2eDaw2NIMiBUojSxk8fuMqk
111EIBXQyMgHhytLu8B1ZD9ge1HGaMfzpgxPW+LGGYvphVlHv9YQtuABFgLzpckV
FPLOARflxOUcFi3MgElM
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:42 2026 by rpki-client