Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142097.roa
File: AS142097.roa (raw, json)
Hash identifier: J71W8v6Ig4nb7EBeTMTWdaiVtbgq8zPIUNiqV1k/tX0=
Subject key identifier: 86:EF:32:E7:3E:D4:8F:6C:1D:D3:E7:8B:0E:52:FA:0F:A9:98:BE:08
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 09B86B64E3ABC1FA150CDDFF5DF1EA4B52146997
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142097.roa
Signing time: Fri 22 May 2026 06:05:11 +0000
ROA not before: Fri 22 May 2026 06:00:11 +0000
ROA not after: Fri 21 May 2027 06:05:11 +0000
asID: 142097
IP address blocks: 2001:253:231::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b8:6b:64:e3:ab:c1:fa:15:0c:dd:ff:5d:f1:ea:4b:52:14:69:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:11 2026 GMT
Not After : May 21 06:05:11 2027 GMT
Subject: CN=86EF32E73ED48F6C1DD3E78B0E52FA0FA998BE08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:4a:a8:30:ee:12:54:1c:2a:84:33:ac:c5:
68:5a:3e:39:86:03:a2:09:a7:eb:ce:4e:fb:cd:ea:
96:3a:71:7b:c9:d1:17:62:64:00:af:fa:3e:97:d1:
29:1d:db:a5:8c:6c:72:b4:21:fe:8b:f3:5a:85:9a:
7f:1d:4f:15:d0:73:9b:dc:9f:04:49:03:e0:e1:8d:
50:55:39:8d:47:d1:1c:01:69:4c:b0:a3:43:71:69:
eb:37:db:b4:0a:fc:7d:8b:18:c6:56:4b:20:72:d7:
c3:e8:19:e7:55:98:06:63:f4:21:ac:1d:3d:57:59:
d4:28:4c:55:fa:9b:80:f1:be:2d:5d:22:04:0f:9c:
3e:1b:d6:23:cd:d0:fb:aa:0a:75:0f:32:7b:eb:81:
00:6f:3c:7a:e5:fa:ac:6a:69:a4:2f:06:ab:89:25:
e2:45:52:9b:d1:93:e4:f4:67:82:ee:e0:34:23:7f:
bb:4b:e7:85:3a:72:02:50:07:73:ea:b0:fa:78:87:
1c:b4:a1:f2:bf:be:a0:cd:a1:9b:c5:58:3f:33:b3:
f8:ae:94:44:6e:d4:a1:63:b5:9c:ca:c4:f6:cd:ed:
f3:e3:b6:18:29:4b:c4:53:e1:35:b4:5b:ef:ef:78:
c5:1c:27:c6:08:16:52:94:d7:a0:a1:8e:6f:ba:c4:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EF:32:E7:3E:D4:8F:6C:1D:D3:E7:8B:0E:52:FA:0F:A9:98:BE:08
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142097.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:231::/48
Signature Algorithm: sha256WithRSAEncryption
a2:ab:70:67:64:66:32:7b:06:ac:a4:e4:d2:4e:08:52:a9:ae:
82:8a:6c:0e:75:b5:dd:8c:73:7d:01:75:f0:84:d1:e8:6f:dc:
db:a7:9c:58:b8:26:91:61:ca:17:f9:82:bc:6e:be:44:3b:c5:
f4:71:0f:07:01:ae:01:c6:f8:2e:ca:f2:77:87:a8:8b:5a:25:
71:c0:0c:39:8a:98:d5:39:be:d2:31:ea:2d:29:bd:82:9b:62:
fb:8d:1c:a0:27:92:a6:95:7b:13:f3:67:e5:66:da:89:43:80:
36:cc:5c:70:39:ad:47:fc:ae:39:2c:be:85:73:4b:75:9d:11:
91:a6:76:10:3c:26:6e:9b:5c:b1:a2:90:5d:24:97:be:a6:b9:
1e:aa:f9:fc:c8:17:16:2d:85:97:0b:72:90:3b:25:ba:5a:27:
a6:00:25:45:52:79:92:69:43:2c:be:41:e1:f8:26:91:98:55:
eb:53:9f:54:7f:cc:9d:7a:88:07:46:31:b8:4c:f9:c3:e7:00:
7d:f8:6c:c9:07:a3:64:ed:ab:4c:df:b7:1d:71:29:88:15:43:
c6:eb:21:f3:ab:49:e9:f1:0e:a5:14:59:97:3a:57:86:a6:cc:
9a:fb:b0:c7:f4:4d:1d:45:19:e0:d4:42:88:3d:54:1a:fd:62:
ae:95:47:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:53 2026 by rpki-client