Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142100.roa
File: AS142100.roa (raw, json)
Hash identifier: VW+8Nhxn4iMMoXvNVcgl1ieC/hphq8hSbaLhf2RGex0=
Subject key identifier: DF:FB:58:9B:3D:B9:C3:C9:6E:89:86:69:05:20:51:A5:94:C5:D5:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 19F2F90CBAB01D64CC18589AE285AF5606A5ED37
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142100.roa
Signing time: Tue 26 May 2026 01:13:10 +0000
ROA not before: Tue 26 May 2026 01:08:10 +0000
ROA not after: Tue 25 May 2027 01:13:10 +0000
asID: 142100
IP address blocks: 2001:253:234::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f2:f9:0c:ba:b0:1d:64:cc:18:58:9a:e2:85:af:56:06:a5:ed:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:10 2026 GMT
Not After : May 25 01:13:10 2027 GMT
Subject: CN=DFFB589B3DB9C3C96E898669052051A594C5D5E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a6:85:5a:4a:7d:28:c4:54:cb:e1:0d:3b:17:
2d:41:30:db:2f:4d:64:0e:09:26:60:89:a0:16:8d:
71:08:f6:1b:94:41:ed:e4:49:f1:32:e2:50:1f:6a:
38:38:1a:34:4a:1a:21:84:22:fc:49:dc:e4:46:2b:
bb:07:12:44:37:56:d9:fc:c5:1a:d2:7a:f0:91:55:
c3:66:bd:f3:df:a7:7e:76:24:15:c8:4c:5d:a8:4c:
ea:85:a4:b0:70:28:8f:b4:df:9c:6f:4b:29:0f:48:
48:39:2e:e4:4e:74:28:97:c3:22:08:08:12:ed:6c:
1b:af:0c:c0:a3:8e:c9:81:c4:71:e3:40:c2:2c:f3:
7a:9e:87:69:0f:89:16:8c:c7:e0:8d:86:dd:b4:4f:
0f:3e:62:55:e9:62:b1:83:11:d8:6a:54:a8:c7:b5:
c4:80:29:29:90:00:52:8d:ae:8c:1f:02:cd:72:da:
9d:1d:07:8e:3b:df:d7:7f:64:94:5d:66:13:ab:d7:
51:b9:b0:07:33:e3:48:8c:39:e8:80:c2:6b:20:1f:
7f:d7:f3:18:f1:f0:4b:5a:ef:39:11:24:17:eb:d6:
b8:df:ce:a9:ea:41:1e:ae:d5:14:88:d8:29:59:b5:
55:12:7b:1a:a1:cd:3b:88:b0:81:34:6c:f9:c3:e6:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FB:58:9B:3D:B9:C3:C9:6E:89:86:69:05:20:51:A5:94:C5:D5:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:234::/48
Signature Algorithm: sha256WithRSAEncryption
46:3e:7a:73:73:43:ae:5b:5b:2c:f7:00:24:08:51:92:db:5c:
11:90:17:4e:60:ac:84:62:10:72:cb:bc:18:ef:77:c3:c3:94:
c2:ac:0a:fb:15:26:16:81:84:03:53:8f:ce:4c:b3:dd:26:bd:
1c:dd:06:78:6d:98:2d:f9:9c:3e:44:23:aa:df:fa:d1:c3:f2:
49:53:5e:5f:7c:60:2f:55:5f:13:c0:6f:12:ce:e7:30:fc:c2:
8f:a2:e5:f5:93:80:54:d8:c0:b6:28:60:fc:25:bb:08:05:8c:
05:50:a5:92:ef:17:7b:b7:51:c4:94:85:6c:78:5f:14:7b:7b:
1a:97:27:b4:67:3f:16:1e:75:97:bf:44:8f:8f:55:d5:2a:15:
39:81:15:2f:67:95:a6:92:04:a6:cc:db:aa:56:3e:b7:62:b7:
1c:6a:48:d2:77:d1:b0:01:33:4a:85:83:99:5c:fe:76:67:b3:
f9:7f:64:31:89:99:3e:b6:a8:ef:d3:87:be:b3:c0:1c:66:c4:
13:81:b6:55:57:f5:27:6d:e5:9a:ba:8c:0f:74:25:dd:3d:13:
58:09:ce:27:cd:f5:86:88:7b:67:ca:5a:43:a8:b7:0c:14:c7:
86:6d:35:ff:d8:38:91:eb:cf:ad:06:d5:24:78:7d:a0:28:7c:
eb:86:97:f6
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIUGfL5DLqwHWTMGFia4oWvVgal7TcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MTBaFw0yNzA1MjUwMTEzMTBaMDMxMTAvBgNV
BAMTKERGRkI1ODlCM0RCOUMzQzk2RTg5ODY2OTA1MjA1MUE1OTRDNUQ1RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRpoVaSn0oxFTL4Q07Fy1BMNsv
TWQOCSZgiaAWjXEI9huUQe3kSfEy4lAfajg4GjRKGiGEIvxJ3ORGK7sHEkQ3Vtn8
xRrSevCRVcNmvfPfp352JBXITF2oTOqFpLBwKI+035xvSykPSEg5LuROdCiXwyII
CBLtbBuvDMCjjsmBxHHjQMIs83qeh2kPiRaMx+CNht20Tw8+YlXpYrGDEdhqVKjH
tcSAKSmQAFKNrowfAs1y2p0dB44739d/ZJRdZhOr11G5sAcz40iMOeiAwmsgH3/X
8xjx8Eta7zkRJBfr1rjfzqnqQR6u1RSI2ClZtVUSexqhzTuIsIE0bPnD5vu/AgMB
AAGjggHFMIIBwTAdBgNVHQ4EFgQU3/tYmz25w8luiYZpBSBRpZTF1eEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQyMTAwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAECUwI0MA0GCSqGSIb3DQEBCwUAA4IBAQBG
Pnpzc0OuW1ss9wAkCFGS21wRkBdOYKyEYhByy7wY73fDw5TCrAr7FSYWgYQDU4/O
TLPdJr0c3QZ4bZgt+Zw+RCOq3/rRw/JJU15ffGAvVV8TwG8Szucw/MKPouX1k4BU
2MC2KGD8JbsIBYwFUKWS7xd7t1HElIVseF8Ue3salye0Zz8WHnWXv0SPj1XVKhU5
gRUvZ5WmkgSmzNuqVj63YrccakjSd9GwATNKhYOZXP52Z7P5f2QxiZk+tqjv04e+
s8AcZsQTgbZVV/UnbeWauowPdCXdPRNYCc4nzfWGiHtnylpDqLcMFMeGbTX/2DiR
68+tBtUkeH2gKHzrhpf2
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:30:15 2026 by rpki-client