Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS142106.roa
File: AS142106.roa (raw, json)
Hash identifier: IFUX+/p3OnMkcSDHM7qqs6KKOtfnmcOM/PczPqrrdoc=
Subject key identifier: 12:C1:BB:B8:F0:EF:3A:FA:97:3E:48:E9:D3:8B:F2:A5:34:42:DD:45
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4434A3D919D5CDDB18D860FA3973C9057FF20B8A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142106.roa
Signing time: Fri 22 May 2026 07:24:55 +0000
ROA not before: Fri 22 May 2026 07:19:55 +0000
ROA not after: Fri 21 May 2027 07:24:55 +0000
asID: 142106
IP address blocks: 2001:253:240::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:34:a3:d9:19:d5:cd:db:18:d8:60:fa:39:73:c9:05:7f:f2:0b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:55 2026 GMT
Not After : May 21 07:24:55 2027 GMT
Subject: CN=12C1BBB8F0EF3AFA973E48E9D38BF2A53442DD45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:e4:80:6c:fb:a1:b4:f2:81:58:61:27:26:
cd:a4:d1:b2:52:37:8d:bc:b3:52:39:37:68:be:9d:
1a:2b:e4:7e:74:49:63:f4:48:27:80:69:55:09:fc:
6e:71:c4:07:f6:5b:81:92:05:88:18:58:b7:4a:ce:
09:5e:8e:d1:1c:c8:7c:65:25:e7:64:aa:7a:f2:47:
78:81:4d:14:a4:8c:56:e8:ec:60:b5:b3:f0:99:7e:
68:8b:ac:c0:f3:78:62:0a:93:1c:cc:27:7d:10:d6:
a2:14:fd:c1:d4:71:23:75:e7:45:b1:48:bc:4c:85:
f5:11:61:4e:ac:ed:b8:82:02:72:b3:f2:68:f8:b0:
4c:53:ae:0e:89:22:25:8e:b7:df:2b:60:15:63:2b:
70:57:44:7e:9f:dc:c7:15:6c:e7:16:a4:06:3f:30:
4f:79:69:48:9e:eb:9a:54:18:64:07:24:eb:96:12:
41:9b:f6:4a:52:1b:90:35:e0:42:08:a4:52:83:92:
56:79:c1:c6:cf:11:f9:9f:03:70:22:ac:d9:63:df:
7e:3d:b7:0b:f0:3c:fc:19:cd:d5:04:68:13:32:fd:
94:98:31:25:a3:f3:d6:f2:f6:2c:9c:79:b2:2e:6e:
32:32:50:db:40:16:09:4d:f3:71:42:2f:63:4f:be:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C1:BB:B8:F0:EF:3A:FA:97:3E:48:E9:D3:8B:F2:A5:34:42:DD:45
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS142106.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:253:240::/48
Signature Algorithm: sha256WithRSAEncryption
a4:b7:a9:b4:f8:e4:07:dd:4b:1c:6f:c8:3c:3f:83:c3:99:e3:
78:98:b2:55:64:d4:4c:a1:c4:6f:fe:73:df:12:d8:61:64:bc:
ef:86:86:ae:d4:64:bd:56:d6:89:32:fa:c8:3b:ec:ed:64:ec:
52:f0:b9:90:8c:81:0e:33:a6:87:9d:82:20:66:77:98:7f:81:
f1:e6:69:c7:f0:8b:d3:a4:46:db:f9:92:a6:fd:5f:36:af:a7:
8a:4b:c2:8e:81:7d:8d:7d:a0:50:6a:d4:2b:2e:f0:0c:d1:73:
d5:3f:6c:f7:5b:64:84:fb:18:ec:b9:41:8a:b5:10:f7:e8:47:
16:53:a0:b7:a7:98:ba:8c:26:ff:7d:47:05:97:80:97:da:e5:
0b:cd:70:59:94:74:be:fb:2f:50:18:c4:ad:27:69:33:87:37:
2f:d4:46:0c:51:d3:b9:99:9a:8d:64:7c:ac:5c:c5:a9:28:49:
8c:55:c6:b3:f7:8d:52:a2:b2:ba:9a:1f:4e:7d:04:b5:cd:35:
01:b2:72:c6:51:47:ef:1a:17:56:9e:29:f3:f1:e2:a0:4c:e0:
2a:89:17:9e:96:ff:a6:92:87:af:58:18:4a:c2:04:91:5e:d7:
13:77:40:ab:72:5d:50:58:2b:87:c2:82:bd:20:bf:e6:4a:60:
fe:42:aa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:18 2026 by rpki-client