Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142098.roa
File: AS142098.roa (raw, json)
Hash identifier: xxemkdr3uVozaI37C6OWMlL3Tsyef125jg0vXR6G4NQ=
Subject key identifier: 47:A7:16:A3:1E:69:55:57:34:2E:38:EB:B8:AF:A3:B7:8B:62:71:20
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 295EA098C56B447EC62D1C053BC99A54A5F8CBD4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142098.roa
Signing time: Tue 26 May 2026 01:13:00 +0000
ROA not before: Tue 26 May 2026 01:08:00 +0000
ROA not after: Tue 25 May 2027 01:13:00 +0000
asID: 142098
IP address blocks: 2001:253:232::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:5e:a0:98:c5:6b:44:7e:c6:2d:1c:05:3b:c9:9a:54:a5:f8:cb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:00 2026 GMT
Not After : May 25 01:13:00 2027 GMT
Subject: CN=47A716A31E695557342E38EBB8AFA3B78B627120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:36:97:a3:b6:26:5a:c4:bb:3c:33:32:2c:
c7:12:6e:7c:47:51:61:22:c0:c0:4a:8c:8e:50:73:
b2:a2:a9:09:df:c5:c4:4f:f7:37:cb:21:9d:da:b1:
32:ec:a7:18:b3:c8:e8:be:fa:ac:4d:42:2f:49:e6:
80:fb:3a:a5:66:fd:71:00:ee:e2:7e:aa:6c:fc:6d:
c1:e9:31:05:eb:92:3d:5a:e3:33:2b:1d:9c:31:e1:
5e:6a:27:12:aa:11:78:8f:46:a4:40:02:20:88:bf:
c4:68:31:70:80:d1:b8:95:82:79:6c:80:c9:87:90:
e6:9d:ce:cb:21:00:2b:a0:68:f5:39:cb:59:e5:5b:
ad:ca:4c:a8:28:0d:1a:64:24:5d:5f:3d:13:0d:a7:
a3:44:15:25:c0:40:af:69:e9:3e:78:ff:a9:15:7d:
57:81:98:c0:15:b7:70:5d:2c:48:c5:cc:05:6d:58:
41:8d:10:07:84:46:8a:90:1d:42:7c:ac:44:47:8c:
32:37:7b:10:03:6f:90:71:90:20:da:59:df:96:c6:
26:32:76:92:ac:e1:f5:81:04:e4:77:b6:cf:c9:ef:
4c:01:58:1c:a6:89:f7:63:ab:3d:f3:2b:07:e8:b7:
cc:d9:1c:31:0f:14:f0:98:9f:00:ed:9e:58:1a:08:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A7:16:A3:1E:69:55:57:34:2E:38:EB:B8:AF:A3:B7:8B:62:71:20
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142098.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:232::/48
Signature Algorithm: sha256WithRSAEncryption
99:d0:10:a7:db:c3:a8:7c:32:b4:cd:c5:41:bb:92:7f:53:2b:
fe:6e:de:4c:45:f1:53:a1:7f:12:ab:c5:d7:5a:aa:0a:0c:9b:
b6:7d:9f:b0:0e:f3:7f:d4:75:d9:ee:ec:c2:28:cf:fa:91:de:
57:aa:19:0f:0e:7d:6c:53:88:09:11:5d:62:e0:1d:e3:9b:00:
98:0a:57:bd:9b:bf:3f:58:86:a8:95:de:c3:4a:cc:72:9a:93:
a2:06:71:a6:11:33:84:a1:27:f9:fb:c6:ea:4d:35:08:8c:5c:
3e:32:43:30:a8:99:3e:1a:96:5a:f4:70:a2:ae:de:d7:95:20:
74:c8:13:be:ab:eb:e8:6a:ba:08:b4:e7:79:ec:05:a7:64:fc:
10:5d:ea:55:bb:14:89:1e:36:24:ad:96:43:fd:f9:0f:d0:45:
6d:dd:c5:a6:7c:95:0f:0e:ca:32:ba:56:71:ef:fc:93:9b:66:
af:ac:35:e4:c5:3b:17:dd:08:b6:44:ee:bb:85:45:e9:b6:62:
81:da:36:d8:14:d3:0b:86:fb:6b:34:b2:ea:d2:89:e7:38:49:
a9:65:5f:da:60:46:71:2a:c3:42:f9:b8:7d:35:c9:ab:46:a8:
6f:43:aa:3d:44:f3:e1:9f:9a:df:2f:fb:50:23:37:c5:6a:ba:
b6:31:1d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:47 2026 by rpki-client