Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142087.roa
File: AS142087.roa (raw, json)
Hash identifier: zEF6kHwZ6jiZgZ2zjxsB1hsLNKsod5I/3SoZ0sriNzE=
Subject key identifier: 2F:39:36:CB:52:13:36:A4:A3:AC:F5:65:46:18:B1:08:57:8C:C8:78
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 31D5CEB786AD520210C945BEAC5BA20AE7CB2750
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142087.roa
Signing time: Fri 22 May 2026 07:09:01 +0000
ROA not before: Fri 22 May 2026 07:04:01 +0000
ROA not after: Fri 21 May 2027 07:09:01 +0000
asID: 142087
IP address blocks: 2001:253:221::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d5:ce:b7:86:ad:52:02:10:c9:45:be:ac:5b:a2:0a:e7:cb:27:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:01 2026 GMT
Not After : May 21 07:09:01 2027 GMT
Subject: CN=2F3936CB521336A4A3ACF5654618B108578CC878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:fe:4b:9b:b1:6a:18:b2:6f:35:49:54:cd:
9e:fe:8e:77:81:84:e9:06:93:96:55:33:d8:48:d6:
2a:3f:f2:06:01:a3:04:41:fb:1f:48:54:c9:57:bb:
0f:f5:af:78:8b:59:b7:67:1f:3f:23:0c:1a:c3:f2:
22:c7:3a:3f:dd:8f:03:80:62:64:0a:bc:0c:4b:ca:
d1:07:4a:6f:14:19:7d:36:67:9f:d8:d1:f5:7f:69:
0f:b8:63:73:4e:28:33:ac:dc:9e:98:5e:58:22:ae:
df:c0:4b:68:af:23:02:86:bd:48:b6:c1:a5:0b:3b:
14:f1:67:19:0f:82:23:c9:58:1b:c9:05:d9:4e:15:
5a:63:c5:07:62:c2:ea:34:9b:86:ef:25:a4:60:63:
69:bf:09:84:20:06:b5:2d:35:9d:b1:4d:01:fb:f4:
63:a5:5c:6b:a4:5e:de:0a:da:9d:ab:a1:7d:07:d7:
ea:31:49:af:03:c7:89:7f:13:6c:61:77:72:02:da:
1e:12:df:f3:b8:d9:f8:41:a2:8e:53:2c:2b:4a:7d:
d9:fc:a9:50:fe:1f:ff:d6:8f:f1:89:8e:49:77:24:
4b:36:29:01:0b:a6:1f:0f:76:db:47:b4:51:27:76:
b7:cc:81:fd:7e:e4:4d:9a:dd:6a:4f:27:dd:bf:93:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:39:36:CB:52:13:36:A4:A3:AC:F5:65:46:18:B1:08:57:8C:C8:78
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:221::/48
Signature Algorithm: sha256WithRSAEncryption
00:ed:1b:ae:a7:67:39:78:e2:60:5c:2e:d7:cc:fa:36:46:0f:
cb:06:60:8a:44:a4:4a:9d:46:29:74:e9:04:3e:49:88:cb:04:
22:3e:e3:94:90:7e:04:86:d1:6e:03:88:94:b5:39:b6:75:49:
5f:a8:fb:fa:62:db:e2:f7:22:84:2a:a3:ba:19:05:4f:15:5a:
e5:a2:d2:21:4f:44:f6:ab:9b:77:68:bc:3f:f8:67:ae:50:c8:
25:78:85:6c:d8:6a:1e:1b:c8:fc:0d:7f:90:c7:38:b0:68:3b:
0a:28:74:a6:f5:65:60:18:49:de:15:b6:88:60:2a:22:73:8d:
0b:98:1c:91:82:43:f0:55:27:7b:17:e2:3d:82:94:8b:4a:e7:
5d:25:0b:f7:60:4a:7f:34:f9:1d:a8:83:60:25:88:fe:6e:1b:
af:8d:f0:34:08:6d:3f:3b:0f:aa:64:13:a6:3f:3b:fc:84:d5:
df:c0:9e:42:04:02:ea:53:b6:04:fc:d1:f9:b0:79:26:de:94:
85:f9:a1:9a:36:8f:c8:4e:b7:c7:f5:ba:67:29:ab:d3:56:b0:
3b:9d:7e:7c:4b:bf:1b:60:1e:aa:2a:4c:4b:36:cc:2e:88:a2:
3a:20:ca:3a:9f:c1:b4:53:dc:2e:8a:98:2a:ea:af:52:88:83:
6b:98:d0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:21 2026 by rpki-client