Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142104.roa
File: AS142104.roa (raw, json)
Hash identifier: jyn5Ard+l43eqZlfQJ1T3hkSGXfsX9706SHaHMw16pE=
Subject key identifier: 6A:57:1A:6A:AF:0A:33:6F:D5:9E:77:EE:97:7E:DE:C3:4C:DA:43:65
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F8025792C4C09D92AA9EBABD0BE07CD26905D5C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142104.roa
Signing time: Fri 22 May 2026 07:32:38 +0000
ROA not before: Fri 22 May 2026 07:27:38 +0000
ROA not after: Fri 21 May 2027 07:32:38 +0000
asID: 142104
IP address blocks: 2001:253:238::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:80:25:79:2c:4c:09:d9:2a:a9:eb:ab:d0:be:07:cd:26:90:5d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:38 2026 GMT
Not After : May 21 07:32:38 2027 GMT
Subject: CN=6A571A6AAF0A336FD59E77EE977EDEC34CDA4365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:03:e5:a2:8c:e1:88:dd:f3:19:ff:11:b3:
f2:7a:61:94:b3:62:9d:56:5d:9a:21:4d:79:50:f0:
5b:73:89:47:c0:9e:dc:03:08:14:63:be:74:71:8f:
c6:05:6e:12:e6:42:2d:7b:ee:ac:f4:f0:2e:00:d4:
52:a9:54:5d:b9:58:e6:28:ff:d1:d5:be:bf:10:9d:
2e:96:a5:c9:8b:bc:fb:47:a0:7e:48:0e:91:89:2b:
94:fa:a7:3a:57:29:d7:a4:49:40:4f:1b:8b:a9:0c:
73:af:c8:e4:54:76:ba:cb:8a:e2:23:bd:c1:8e:20:
30:dc:d2:7b:ed:cb:99:30:60:dc:61:60:75:aa:0b:
0f:8b:a6:55:06:92:1d:9b:73:bb:70:71:55:12:60:
f2:33:0b:7f:a7:c5:72:18:72:1b:88:7c:08:0a:54:
83:77:e7:9b:4a:41:b8:ee:85:95:9e:57:94:ca:5e:
82:a6:ef:9d:87:8e:37:15:4d:89:c0:4f:39:72:52:
ed:73:cb:f5:22:32:b4:f6:28:3b:e6:d5:01:83:34:
46:d6:d0:a5:dd:38:7a:5b:a4:75:99:77:32:a2:08:
6e:52:86:85:21:3b:45:8c:96:53:1b:09:e1:ea:7f:
70:fc:bf:e6:5b:93:64:d5:8a:5f:ee:30:3d:d8:e8:
14:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:57:1A:6A:AF:0A:33:6F:D5:9E:77:EE:97:7E:DE:C3:4C:DA:43:65
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142104.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:238::/48
Signature Algorithm: sha256WithRSAEncryption
75:38:e0:f1:97:54:ea:28:c5:94:3b:ea:a9:a2:01:9c:06:fd:
45:74:55:02:a7:ac:c8:1c:39:3a:63:a3:0c:ca:b8:b8:90:59:
73:e5:24:e4:f9:25:25:10:e2:48:8c:ba:72:3e:a7:f6:68:21:
a2:cc:50:79:e7:92:dd:b2:05:2f:a2:f8:86:b4:2b:5a:ec:a2:
b7:90:d0:dc:94:18:74:a9:5c:a1:aa:12:5a:7b:f1:d3:4c:5f:
67:4e:97:7a:19:05:a2:05:a0:55:a5:73:b1:4a:51:6e:cd:e0:
bb:a6:4d:55:16:c9:2c:bb:be:90:db:da:78:02:12:2a:e0:ef:
91:86:3f:98:fb:de:93:b1:14:64:bd:16:40:d5:ef:ea:ec:38:
77:55:6a:26:f6:36:69:47:0b:76:a0:51:66:f7:ea:9a:37:b8:
f5:00:7d:7d:a9:2e:a6:6a:67:24:9f:48:0f:df:80:5e:b4:14:
0f:15:86:76:b7:5b:c8:08:e0:17:6f:eb:b5:db:cb:a1:d2:4a:
a5:d8:1b:62:16:39:4f:e3:da:0b:eb:e0:cb:ad:fb:ac:b9:f8:
4d:aa:0c:78:1b:ff:c0:90:1e:63:0b:c2:74:15:d0:73:8c:99:
d8:e0:ce:46:87:81:3a:e1:50:7f:9c:40:c5:eb:9f:24:57:cc:
81:6a:8a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:53 2026 by rpki-client