Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142102.roa
File: AS142102.roa (raw, json)
Hash identifier: +2imGFrsVxPokxaKJwiNr8qfGsI+2AAOxld1PaggsCI=
Subject key identifier: 32:8D:E1:7A:36:0A:6E:C9:67:5C:E0:E9:CC:D6:59:A9:F2:23:E1:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 60B6B70C65B047E6D41104E2996C4D09607BA7D5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142102.roa
Signing time: Fri 22 May 2026 02:47:50 +0000
ROA not before: Fri 22 May 2026 02:42:50 +0000
ROA not after: Fri 21 May 2027 02:47:50 +0000
asID: 142102
IP address blocks: 2001:253:236::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b6:b7:0c:65:b0:47:e6:d4:11:04:e2:99:6c:4d:09:60:7b:a7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:50 2026 GMT
Not After : May 21 02:47:50 2027 GMT
Subject: CN=328DE17A360A6EC9675CE0E9CCD659A9F223E12D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:e4:e9:4d:09:2d:e7:3e:b4:b9:3a:13:c3:
1b:b4:84:17:94:cd:be:1b:5f:10:9a:0d:6b:ab:57:
10:08:7f:fb:4f:51:9c:4f:db:17:41:d5:92:17:ef:
ed:63:18:a8:44:13:da:5d:13:56:9c:c6:69:55:23:
40:57:dc:19:0a:07:d7:a2:d3:f1:64:5c:20:a6:57:
63:d6:6a:08:f5:53:c3:f9:b1:0c:97:d9:86:b9:10:
f9:a9:c6:25:2e:3a:64:f8:b1:1b:f9:31:7f:9b:15:
76:02:02:52:98:09:7c:ca:52:9c:12:cc:60:60:55:
da:e0:e7:1d:fe:51:1f:3a:ea:02:5f:f5:28:a1:05:
1f:d3:4e:7c:93:4a:2d:74:01:24:8c:21:04:b9:91:
d6:71:ad:9a:c9:e1:85:5d:0f:35:26:44:c1:7f:70:
4b:96:d0:4f:9b:bf:d0:b8:7f:9a:48:32:30:fe:37:
5f:4b:18:41:d8:01:dd:13:e3:6e:6c:3b:1b:75:19:
2c:a2:5a:74:bc:01:86:0b:6d:92:66:15:f4:a1:a0:
2d:d5:7c:63:aa:4f:e6:13:97:3f:51:3b:9c:42:d8:
d0:10:73:9f:c6:2a:1a:40:9c:1b:9f:3a:ff:07:1c:
55:4d:c0:ca:cd:76:88:0b:00:f9:62:be:24:19:bf:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8D:E1:7A:36:0A:6E:C9:67:5C:E0:E9:CC:D6:59:A9:F2:23:E1:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142102.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:236::/48
Signature Algorithm: sha256WithRSAEncryption
3f:61:c1:1b:af:71:59:b3:66:d1:a4:c3:f7:5d:9a:c4:24:64:
d1:ac:fb:0c:ce:b8:23:3a:4f:99:3c:42:be:b3:60:e7:66:da:
4e:db:b8:e8:ab:46:a6:85:b8:67:e1:54:36:ba:b2:1e:94:c4:
d9:97:1b:05:ee:31:c3:ca:f1:4c:db:62:56:9e:26:79:dc:9a:
15:3a:97:7e:06:ed:21:34:17:d9:ea:d7:f6:2a:ac:ca:e5:ad:
3d:9c:87:e9:97:15:e5:24:c3:3b:4d:57:a3:57:f0:14:94:e9:
96:0f:04:9f:00:9f:66:e2:ad:33:8d:70:f2:ea:c2:2c:c1:64:
03:b3:d6:7b:c1:a1:bc:be:2f:84:29:83:97:55:77:7b:b4:43:
c9:39:e9:e1:f6:2c:49:d7:48:4d:93:9a:26:b6:50:d2:af:17:
be:14:d8:cd:2a:32:9c:21:96:7c:b5:4c:16:74:ae:7b:96:a3:
36:bb:3e:fa:61:07:68:fd:b0:d7:88:cd:70:ab:b4:d8:f8:66:
92:4b:d8:9d:00:f3:16:0b:34:9d:1f:d3:dd:07:05:25:33:f6:
7e:a6:14:82:71:ea:7a:d1:3a:82:91:63:36:34:ca:0d:10:3e:
1c:17:e5:b5:6a:2e:3e:5d:70:ae:d0:f6:6a:59:8b:61:71:08:
b0:19:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:56 2026 by rpki-client