Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142101.roa
File: AS142101.roa (raw, json)
Hash identifier: ek4LIk6RTRTLlSSObDf5KR+dMW37BzBj6nt3He0YVcY=
Subject key identifier: B4:5E:95:FA:BC:16:70:16:AD:14:89:4C:A5:88:A2:77:06:0C:A1:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 450205352BBFF1642FF524738DCEB5DB7C4700F9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142101.roa
Signing time: Fri 22 May 2026 04:26:53 +0000
ROA not before: Fri 22 May 2026 04:21:53 +0000
ROA not after: Fri 21 May 2027 04:26:53 +0000
asID: 142101
IP address blocks: 2001:253:235::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:02:05:35:2b:bf:f1:64:2f:f5:24:73:8d:ce:b5:db:7c:47:00:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:53 2026 GMT
Not After : May 21 04:26:53 2027 GMT
Subject: CN=B45E95FABC167016AD14894CA588A277060CA102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:36:7c:0d:0f:48:7c:34:37:a3:49:72:e5:
ab:b6:5d:41:39:1c:0e:c5:cb:67:9e:71:3d:d3:5b:
2f:9c:e4:e8:ce:9e:4b:22:3f:6c:a0:b5:15:85:0d:
0b:2d:39:80:77:a4:b9:81:15:38:20:b8:a3:16:c1:
7d:56:bf:5d:a3:cd:ba:4b:54:95:65:20:c6:e3:01:
46:a2:32:29:90:17:0f:c5:f6:6f:c6:fa:2c:59:b1:
db:04:83:07:81:ab:05:a5:62:11:06:dd:36:32:03:
12:a8:44:e7:d6:2c:87:09:7f:7d:dd:44:a7:e6:3e:
54:e7:b3:9f:e7:c6:65:37:28:b3:81:79:57:38:ef:
a1:6b:9f:54:63:a1:b2:fd:33:d6:60:03:3f:e8:db:
77:60:30:b4:4e:da:10:a3:a5:b3:c7:5f:4e:60:84:
86:8a:20:eb:94:48:7e:72:8c:03:6b:1e:9f:af:ad:
67:aa:1c:8e:a1:b6:68:3f:03:fd:be:7b:3a:75:66:
71:c6:91:3f:2f:f6:ff:ae:a4:f5:6b:0c:91:c8:61:
e0:04:e8:43:ef:42:06:ce:6e:ad:c1:f8:13:17:1d:
9e:cc:d6:8b:51:ea:45:c6:84:b4:30:b4:ca:40:b0:
75:64:da:9c:b8:c9:5c:d8:a6:a6:d0:21:f1:6b:f4:
1a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5E:95:FA:BC:16:70:16:AD:14:89:4C:A5:88:A2:77:06:0C:A1:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142101.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:235::/48
Signature Algorithm: sha256WithRSAEncryption
15:52:aa:d2:be:f8:06:a0:84:2d:4a:93:d4:b7:ff:c0:bd:dd:
98:b4:b1:cf:17:8b:93:d8:25:9f:85:1d:d1:7c:33:9d:4c:2d:
14:f2:d2:c4:42:d8:71:d7:c4:69:ba:b3:d8:00:0b:6f:ab:49:
70:2f:11:18:b4:d8:32:35:07:66:41:e4:34:45:b2:ef:b3:a7:
21:51:66:f2:f8:4e:ef:70:a2:5f:f8:06:9b:79:78:58:61:ae:
ca:2b:db:af:04:d9:e5:75:72:6a:8c:1b:44:92:51:d3:d4:d8:
79:d9:0c:81:a4:6d:46:e6:02:11:d3:fc:01:59:55:0d:55:b5:
8c:2b:aa:50:26:37:1b:ee:d2:c6:f5:cb:3d:07:10:ae:02:6d:
b8:2c:bc:b9:70:f0:9a:13:49:fd:0e:9f:fb:38:a1:24:c6:b7:
61:09:64:49:62:3a:a7:60:c0:ee:96:75:2b:63:5b:31:e3:8d:
ee:2e:4b:4c:77:39:36:4e:00:d9:a2:fe:10:9e:9c:43:45:bd:
c8:c8:9a:04:97:f0:08:4b:8b:63:dc:a4:69:ef:ef:d6:24:23:
0c:c8:3c:75:cf:a5:eb:72:67:37:de:94:ad:89:db:e2:8e:f5:
45:ae:34:35:14:3a:29:64:1b:39:6f:9e:cc:55:3b:8f:91:c3:
7b:7d:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:49 2026 by rpki-client