Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142094.roa
File: AS142094.roa (raw, json)
Hash identifier: dOn5iPv0Kjra3aCSdUFu2zB/evgtY80Lcdr8ScP/7HM=
Subject key identifier: F0:C6:19:70:14:39:00:4F:37:16:BC:F3:04:3B:97:E1:31:0B:84:ED
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0565ED280E416BED2AC198A5CCB5720B30CE2A96
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142094.roa
Signing time: Tue 26 May 2026 01:13:34 +0000
ROA not before: Tue 26 May 2026 01:08:34 +0000
ROA not after: Tue 25 May 2027 01:13:34 +0000
asID: 142094
IP address blocks: 2001:253:228::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:65:ed:28:0e:41:6b:ed:2a:c1:98:a5:cc:b5:72:0b:30:ce:2a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:34 2026 GMT
Not After : May 25 01:13:34 2027 GMT
Subject: CN=F0C619701439004F3716BCF3043B97E1310B84ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:a9:95:2d:3d:09:7c:74:29:3e:a4:f0:f9:
10:12:a6:fd:ee:88:33:de:37:24:05:61:70:67:d5:
fc:f8:ee:c5:1f:5e:80:7b:69:f1:c9:81:55:ce:d8:
b2:a7:bd:94:46:dd:99:90:be:e0:0b:69:65:fd:f4:
b0:44:5b:f0:d3:89:1b:31:65:79:89:46:91:ec:f3:
e1:7a:ca:08:f3:ae:41:e5:cb:d1:75:bb:c1:5a:d3:
7d:10:12:dc:16:58:a8:a5:a4:11:3e:08:0f:ac:e3:
e8:c8:e3:1d:0b:bf:e1:bc:46:28:9d:95:49:87:ad:
08:aa:b9:88:5f:eb:b0:67:13:27:6a:6d:87:d6:a3:
2e:bc:82:db:26:35:34:79:90:e8:85:8a:d5:1c:7f:
ca:c6:5e:a8:99:d5:fd:a0:89:dd:16:7c:ce:5f:43:
f3:17:52:21:1b:e9:9e:95:46:8a:e4:25:6c:4d:cb:
7d:45:59:af:f2:71:25:22:05:48:fa:25:5e:ca:0d:
87:1a:16:74:4f:4d:bf:f0:24:e8:6b:b1:06:34:5a:
f6:c5:0e:11:80:d5:2d:f2:e7:93:92:83:de:0d:95:
9f:35:9e:04:fd:9c:76:b0:10:ed:d5:ea:be:de:87:
a4:72:6d:81:cf:2b:e6:f5:e2:b1:bf:6f:a9:ba:17:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C6:19:70:14:39:00:4F:37:16:BC:F3:04:3B:97:E1:31:0B:84:ED
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142094.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:228::/48
Signature Algorithm: sha256WithRSAEncryption
0d:53:64:6e:e6:84:32:35:33:1c:f8:5c:32:5b:87:d3:2d:c3:
f3:2d:5f:d2:1d:2b:2d:40:69:d1:13:fd:10:95:d0:80:4e:d3:
34:b8:f6:1c:dc:69:90:40:28:e3:f9:b9:74:b7:a7:af:18:88:
2c:b4:03:a2:5f:bb:a7:52:fa:6d:4b:36:99:21:e6:3f:f0:02:
04:93:77:5b:20:b9:73:b8:be:12:68:ab:38:56:f7:29:f1:6c:
f6:ca:4e:28:c5:26:29:4a:cb:65:54:c4:79:e6:aa:29:fe:1a:
52:c9:2f:35:46:00:ef:7d:04:f3:23:94:4b:38:b8:3c:07:26:
05:30:d9:0f:7b:90:04:c4:52:06:f3:a8:53:be:17:32:be:65:
a7:3e:e5:c5:32:e7:f4:e0:67:0a:61:bd:d8:06:06:61:e6:be:
1f:b7:40:b9:ca:ac:53:a6:8b:0e:75:bb:c6:8e:14:85:a9:76:
90:92:70:13:11:ec:f3:42:0a:25:e0:bf:cb:7d:12:ca:c2:09:
0e:38:f1:47:66:a3:2b:4f:f4:6b:53:c1:5d:ce:6b:98:0f:77:
f8:cb:60:cd:bf:9f:af:d1:98:e1:6b:c7:45:9d:2a:16:23:c8:
d1:8e:fb:43:35:b8:72:ed:86:1d:3c:68:80:54:5b:9b:d0:51:
cd:20:64:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:07 2026 by rpki-client