Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142091.roa
File: AS142091.roa (raw, json)
Hash identifier: iJJHtuBTEx2+4/y4iPNcJaVOFxTbhjQs8FYJiy6eAuU=
Subject key identifier: FF:B4:2D:AF:F9:1E:2E:E8:23:17:1D:AE:2F:95:A3:8F:69:04:ED:64
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1FA98D664EF42C277A1701CE0B2A277D53878E92
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142091.roa
Signing time: Fri 22 May 2026 07:08:42 +0000
ROA not before: Fri 22 May 2026 07:03:42 +0000
ROA not after: Fri 21 May 2027 07:08:42 +0000
asID: 142091
IP address blocks: 2001:253:225::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a9:8d:66:4e:f4:2c:27:7a:17:01:ce:0b:2a:27:7d:53:87:8e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:42 2026 GMT
Not After : May 21 07:08:42 2027 GMT
Subject: CN=FFB42DAFF91E2EE823171DAE2F95A38F6904ED64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:61:64:da:2a:b9:bb:21:94:30:2f:a9:5f:b5:
2f:69:e1:52:3a:18:04:2a:6b:89:2c:5e:b0:42:c8:
ce:6f:2b:97:f6:45:3e:8c:61:54:f3:7b:bf:b5:18:
cf:94:32:3a:85:3b:d6:a3:48:31:23:0e:38:a9:69:
57:69:ba:bb:8a:92:2f:50:a2:13:24:d0:c3:70:11:
45:ca:df:0a:4b:f8:19:33:e2:b6:3b:5b:55:a2:0f:
ce:ab:f4:ad:4d:4e:ad:22:ce:50:69:27:6d:de:4c:
04:db:a0:65:2e:9e:fe:5d:e0:7e:27:11:8c:66:b9:
ba:c4:d6:ba:72:b2:b0:dd:e2:83:ab:e1:8a:98:d1:
74:cf:be:bd:05:17:a5:04:ba:58:7c:6e:b1:d9:07:
e6:08:8c:16:60:76:b5:18:79:52:f4:53:08:10:4f:
ce:5a:be:ed:51:3e:45:7a:d3:d3:96:6f:8c:f1:65:
4b:58:78:c8:a5:a7:ee:23:86:c6:08:2f:ea:30:16:
43:31:cd:ee:8c:1c:19:06:8c:ef:65:91:9e:c2:51:
6b:fe:cc:80:4a:67:6d:ea:e1:96:bd:54:e7:17:eb:
eb:c4:99:a8:e2:27:d6:b2:1e:fc:cc:86:d4:9d:85:
44:6d:50:96:e8:1b:3a:7c:0a:b2:45:12:c4:68:d5:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B4:2D:AF:F9:1E:2E:E8:23:17:1D:AE:2F:95:A3:8F:69:04:ED:64
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142091.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:225::/48
Signature Algorithm: sha256WithRSAEncryption
1b:a4:6d:90:c7:fd:9b:a6:72:71:01:d3:c7:32:36:1a:64:73:
0b:23:fc:fe:77:ee:4e:7e:28:58:eb:00:65:c7:3f:e7:f2:72:
42:6c:a0:02:3b:bb:a8:d3:ce:d3:b9:f8:b0:c5:ef:66:db:1f:
c2:01:e5:16:47:75:d6:55:0c:05:16:44:ee:19:eb:67:78:45:
0a:78:ba:80:a4:18:9b:81:39:34:9b:5e:24:88:ec:c4:f4:14:
1a:76:97:70:bc:67:b2:50:68:eb:47:ef:46:54:14:a0:73:5f:
80:f6:46:ac:37:7d:b1:8c:9d:e5:f5:0a:fc:83:dd:ab:bf:cb:
be:2c:f2:dc:02:e0:8c:35:e3:b8:62:74:f2:ac:55:91:eb:7e:
00:a4:6c:0c:82:14:c4:93:06:22:98:85:19:27:7e:25:52:cd:
0c:a1:27:71:6c:01:41:b1:29:37:98:6f:74:fc:85:15:6c:02:
bc:ad:d2:c4:1e:f5:b0:34:af:85:b3:ef:76:47:57:cc:c4:6a:
22:6f:20:ac:9c:99:c3:13:0e:4e:eb:32:a2:e5:af:9b:be:c5:
a5:20:7a:6b:f9:b9:e4:ce:d6:31:75:cd:1a:31:c2:a2:37:20:
8d:7f:3d:29:1d:a8:3b:6f:bb:bb:67:85:7d:16:ce:b4:33:7f:
17:64:a7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:16 2026 by rpki-client