Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142105.roa
File: AS142105.roa (raw, json)
Hash identifier: J7a13ewDvkEUxYmgEzn5bTotjZf/hdkvVd1Gng27aTM=
Subject key identifier: 60:97:0E:68:E5:28:06:AA:41:70:39:46:3B:54:F9:AC:4F:94:35:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 01485AFB9E35C066FBE399A08A104D7505551C89
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142105.roa
Signing time: Fri 22 May 2026 04:07:57 +0000
ROA not before: Fri 22 May 2026 04:02:57 +0000
ROA not after: Fri 21 May 2027 04:07:57 +0000
asID: 142105
IP address blocks: 2001:253:239::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:48:5a:fb:9e:35:c0:66:fb:e3:99:a0:8a:10:4d:75:05:55:1c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:57 2026 GMT
Not After : May 21 04:07:57 2027 GMT
Subject: CN=60970E68E52806AA417039463B54F9AC4F94352E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8f:96:eb:1c:6f:48:2e:2b:fa:e6:46:fe:d8:
a8:29:c5:dc:40:dd:59:0d:fa:0d:3b:95:7c:11:f5:
3d:2f:62:0f:b4:32:5f:20:e3:1e:16:16:f2:8e:5f:
dd:58:f4:72:ad:37:b3:86:01:38:5e:f5:61:72:bb:
85:7d:05:78:83:08:c1:76:12:ed:3a:9f:6c:63:5e:
84:2f:3c:43:42:17:1d:5d:c2:59:c2:8a:b3:8f:3a:
c8:cb:8d:69:2a:b9:b3:af:66:c6:f3:1f:48:cc:85:
f0:14:a2:0b:21:d4:86:ed:b6:6e:53:0a:01:17:21:
7c:7f:c5:46:0e:b3:91:9c:a0:e4:99:8a:0a:be:cb:
77:c0:f4:59:6f:ae:91:4d:d9:7b:8b:89:ab:2d:57:
c0:0b:e3:e5:fb:08:b4:49:51:8a:c2:41:94:96:48:
d6:2c:df:8c:4d:d1:21:ab:37:52:79:ef:dd:19:7d:
bd:cc:87:f4:2d:60:25:7a:49:d7:72:99:bd:ff:68:
0f:30:38:ed:96:1b:6d:c3:fa:be:0c:ed:10:44:c8:
c2:1c:6f:fa:2b:db:30:1c:92:a6:69:40:61:1c:c4:
05:b2:10:fe:0a:be:71:62:4b:c0:81:f6:b3:1f:ca:
4d:1d:7c:d2:fc:dc:12:7b:ec:74:09:bf:dd:34:e9:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:97:0E:68:E5:28:06:AA:41:70:39:46:3B:54:F9:AC:4F:94:35:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:239::/48
Signature Algorithm: sha256WithRSAEncryption
0b:52:d5:b0:6f:1d:d9:df:0d:e4:2a:63:bf:ab:d6:73:0b:9e:
38:ca:df:32:21:fe:cf:11:6c:4c:e8:33:d1:fe:77:3d:df:dc:
09:a4:ef:69:f5:f9:28:5b:8a:0a:17:d7:99:f8:79:79:ff:e5:
a9:cd:1b:08:3a:b8:a7:7e:b8:11:ae:eb:4e:5b:ce:96:49:88:
c2:87:ee:d3:de:d5:52:cd:96:e8:4b:dc:91:d4:75:e4:7d:b8:
55:aa:1d:6e:f0:d6:11:4a:cf:50:a9:6d:f7:17:8b:bc:7a:4e:
35:39:ab:e2:85:ba:a8:93:4c:d6:5b:23:ec:ce:96:61:da:55:
39:1f:85:53:8c:31:31:c9:17:3f:2e:42:2a:ad:23:ce:2a:19:
90:5e:c0:c6:78:52:f8:3f:94:25:9c:83:96:6a:e5:ba:e3:b1:
39:4a:3c:d9:70:f7:77:96:b9:25:32:1f:7e:6a:81:83:28:ea:
e3:aa:d2:17:2a:76:0e:f0:d2:1a:af:84:62:1f:2d:7e:cd:bb:
5a:e8:15:50:84:9c:c2:d9:b1:ee:be:af:51:a7:7f:41:f4:d4:
67:27:30:45:d4:ae:46:49:42:6d:fd:f4:32:ba:52:56:43:ab:
c1:81:09:38:63:51:a3:e4:2f:43:6e:bd:56:bc:8c:fd:78:3d:
24:27:7b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:51 2026 by rpki-client