Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142088.roa
File: AS142088.roa (raw, json)
Hash identifier: fbF9puv1FBhrFLgrOkIwupmZGGiHsIcWSVTtjcOg0P0=
Subject key identifier: C9:F2:DB:E6:EE:66:89:D4:8C:78:71:91:23:98:E0:0C:8F:C6:DE:0D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F10DFB54C58EA30BE2341B870E25FCDE4B7DA2A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142088.roa
Signing time: Mon 25 May 2026 01:19:59 +0000
ROA not before: Mon 25 May 2026 01:14:59 +0000
ROA not after: Mon 24 May 2027 01:19:59 +0000
asID: 142088
IP address blocks: 2001:253:222::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:10:df:b5:4c:58:ea:30:be:23:41:b8:70:e2:5f:cd:e4:b7:da:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:59 2026 GMT
Not After : May 24 01:19:59 2027 GMT
Subject: CN=C9F2DBE6EE6689D48C7871912398E00C8FC6DE0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:81:77:63:a4:fb:48:cb:37:4c:37:e6:f1:
a9:65:a1:21:b9:7b:ac:bb:b6:58:fe:c0:51:e1:22:
9c:f4:70:2e:1d:12:ba:4b:7d:28:72:02:bb:f9:13:
13:fc:a5:ff:11:87:56:d2:d8:15:f0:96:c0:e4:8f:
5c:c5:42:29:c9:ab:9c:31:3f:b8:b1:d2:a8:78:27:
16:7c:21:87:1c:06:07:63:f2:e7:68:31:05:f1:f0:
50:20:75:7f:d7:6c:e3:3b:6d:09:a6:a9:e6:28:b1:
b5:f6:4e:87:c8:73:8b:64:4a:c8:1f:5e:6a:82:ce:
fa:bc:df:e3:63:4e:ae:9e:6f:2f:0f:33:54:4e:84:
bc:6d:0e:c9:6e:7e:93:5e:5c:c1:ae:8c:bd:da:1a:
d1:89:25:84:8b:fe:7b:a8:6c:c4:de:8a:45:78:da:
c1:1f:70:ce:1d:e4:08:c6:51:85:5e:a8:7e:c1:40:
d2:4e:34:67:43:62:45:5b:8c:10:92:44:11:83:68:
a0:9f:f3:d5:0e:af:ff:3e:7b:bf:c8:d7:2e:49:44:
9f:88:21:ff:43:16:c3:1c:f3:0c:1b:b6:15:a0:bd:
99:25:b1:bf:75:0c:9c:21:0d:3d:ad:e0:ba:99:8f:
af:0a:d6:d2:73:a9:b5:d1:62:25:b2:53:a7:5b:62:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F2:DB:E6:EE:66:89:D4:8C:78:71:91:23:98:E0:0C:8F:C6:DE:0D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142088.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:222::/48
Signature Algorithm: sha256WithRSAEncryption
0c:e8:1c:14:50:54:67:75:ea:90:a5:3e:de:e6:9b:1c:ad:8a:
3f:ba:48:70:e6:e0:34:2f:02:da:10:20:18:95:bc:81:ab:6f:
c7:7f:26:18:28:5e:f7:c5:1f:f4:80:bc:62:0d:8b:99:ac:32:
13:0d:a9:85:e9:50:d9:16:ed:ea:1a:06:88:a1:a6:38:45:c1:
d3:1b:09:03:ae:dc:d4:71:c6:13:5c:41:ea:25:5d:83:a1:4e:
54:34:dd:2c:1d:df:49:b0:d2:f2:bb:0e:97:20:36:8a:b3:40:
c9:ff:2d:13:5b:fc:6b:ce:19:da:2c:a0:34:30:a1:84:4d:41:
f5:4a:7a:05:f2:cb:43:5f:81:b3:6b:6a:2a:29:70:5c:a5:f0:
bc:7c:87:fe:f7:3b:45:6e:91:67:30:e7:78:46:ae:8c:00:80:
14:4a:66:bc:51:bb:f3:3f:2b:e1:dc:5b:68:78:86:b3:b8:cb:
da:84:c5:61:ec:64:fb:cd:d3:26:f6:d5:e1:b5:25:9e:1f:17:
0c:40:2d:fd:c2:b2:51:40:ff:3d:6b:df:b2:b7:c5:fc:6b:92:
ab:6a:82:2b:ab:f8:5d:12:bf:7e:7e:bd:31:01:ba:f1:ff:ee:
1f:20:9d:f1:58:bd:80:62:b7:5b:55:24:56:00:ba:a0:e1:85:
77:71:c5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:20 2026 by rpki-client