Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142089.roa
File: AS142089.roa (raw, json)
Hash identifier: HDLfNMZncZNLXHpIefzN0lPH7j0l1OdXfD0zciuda+8=
Subject key identifier: F4:73:35:D5:00:BE:3A:00:FF:99:CB:20:79:52:19:C9:B0:3A:F2:5B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5F0F45F7DE8EC11EE2EAC527138FEEA0EE656A6C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142089.roa
Signing time: Fri 22 May 2026 01:50:06 +0000
ROA not before: Fri 22 May 2026 01:45:06 +0000
ROA not after: Fri 21 May 2027 01:50:06 +0000
asID: 142089
IP address blocks: 2001:253:223::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0f:45:f7:de:8e:c1:1e:e2:ea:c5:27:13:8f:ee:a0:ee:65:6a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:06 2026 GMT
Not After : May 21 01:50:06 2027 GMT
Subject: CN=F47335D500BE3A00FF99CB20795219C9B03AF25B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:bf:c2:53:36:38:eb:8e:0f:37:d8:19:4d:
06:e0:13:35:91:d2:21:88:3e:9b:c4:81:23:77:14:
dd:af:78:75:76:f3:90:b9:94:f5:86:9b:cf:6a:d4:
4d:ba:67:38:e6:0b:76:b9:05:84:fe:53:a1:f1:8e:
58:d1:15:64:71:06:11:cd:ce:20:d3:36:11:eb:53:
99:de:b6:64:93:52:9d:4e:dc:4f:b8:0e:f8:e1:21:
72:ff:40:53:fd:9e:4c:0f:74:a5:d6:90:6c:11:0d:
87:85:f8:df:4a:20:75:b0:b1:8f:66:1e:95:cf:65:
0b:56:57:26:39:34:b6:75:e9:6c:f2:cb:5a:37:75:
29:3f:0c:3b:cb:69:de:1b:6a:a8:95:24:18:d8:89:
e7:8a:d7:8f:ec:6d:7c:8a:dd:7b:a6:2a:b9:56:88:
55:74:1d:32:30:68:93:48:70:2e:9c:03:3d:df:30:
69:69:2c:58:4c:9d:c3:d6:a7:5a:cf:98:d2:3a:4d:
e6:b7:18:98:2b:77:40:5c:36:32:9b:a0:51:dd:fc:
4f:de:ea:d8:f7:0e:5a:d1:aa:1d:36:75:0c:a0:a2:
b9:9d:09:9f:ae:d8:df:ba:cb:71:bd:4e:be:b4:94:
26:8b:04:98:52:5d:fc:e7:9c:78:16:60:d2:a8:c5:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:73:35:D5:00:BE:3A:00:FF:99:CB:20:79:52:19:C9:B0:3A:F2:5B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142089.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:223::/48
Signature Algorithm: sha256WithRSAEncryption
b7:12:5b:16:f9:94:01:07:5f:44:c0:58:91:46:b6:17:24:03:
75:32:26:7d:13:f9:4f:f4:ee:f3:83:27:5d:7e:eb:0f:49:72:
cd:5d:35:4b:3e:dc:d4:df:fb:ec:86:8d:8a:fc:d5:20:7c:aa:
9c:29:80:da:aa:ec:be:d4:de:e8:58:61:fa:26:51:fd:9a:1f:
53:f1:fb:82:76:1b:d5:02:9a:ac:7a:9c:e7:f2:71:26:88:2c:
fa:f2:08:e3:02:31:4c:af:66:4a:59:4e:56:f8:c5:5c:94:ad:
30:36:f2:18:3e:19:17:9b:1e:98:c3:5b:86:c9:bf:4a:cd:fd:
54:ac:cc:d1:00:20:52:7c:af:f9:39:4a:eb:cb:97:4d:98:1b:
f3:ea:43:ac:14:08:2d:f0:16:58:c1:34:5d:bc:33:6a:5f:3e:
9e:53:e4:6f:10:5b:75:20:92:9f:65:34:72:37:c6:6d:f2:ac:
fb:ab:2d:6e:e2:01:14:52:95:ce:62:7c:b0:de:13:8e:70:ab:
db:8c:b0:6e:50:dd:c2:68:55:36:d4:00:6f:8c:d8:72:2b:c7:
d2:13:78:a9:ab:ae:d6:72:32:ef:14:e3:63:d1:14:dc:39:24:
c3:8b:43:f5:9c:96:ec:aa:2e:11:92:a7:16:a8:f3:f9:f9:d4:
87:2a:7c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:19 2026 by rpki-client