Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143000.roa
File: AS143000.roa (raw, json)
Hash identifier: hmBFcCyK59Goz57eCdiLvkBnYX43Ey5Kx4MCsaZlzHk=
Subject key identifier: 04:FB:20:41:86:08:E7:B8:5E:53:0D:9C:4B:41:23:52:FE:48:05:9E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 632113B862355CDB64C4D3C449716026797BA94E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143000.roa
Signing time: Tue 26 May 2026 08:52:40 +0000
ROA not before: Tue 26 May 2026 08:47:40 +0000
ROA not after: Tue 25 May 2027 08:52:40 +0000
asID: 143000
IP address blocks: 240a:a15e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:21:13:b8:62:35:5c:db:64:c4:d3:c4:49:71:60:26:79:7b:a9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:40 2026 GMT
Not After : May 25 08:52:40 2027 GMT
Subject: CN=04FB20418608E7B85E530D9C4B412352FE48059E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:76:bd:41:4e:40:91:33:73:36:6d:61:ff:84:
a8:20:70:4d:f0:3e:76:b3:ba:18:f6:e4:54:89:f9:
fa:1d:a4:1e:ef:43:b1:ea:ce:54:77:88:66:88:d2:
08:2d:ec:8f:db:48:06:81:a7:22:d0:ec:84:08:08:
51:54:19:22:c2:40:e1:5e:02:b6:2e:bd:5b:4a:fb:
6f:8d:db:5f:c7:94:e8:9f:7e:bf:39:af:8f:2f:0d:
9c:21:28:8e:64:dc:69:2b:3f:75:83:22:91:08:56:
4f:b1:7c:34:5e:26:03:52:bd:c3:1f:d8:8e:eb:2d:
ba:e6:37:64:d7:80:c7:55:7a:61:39:59:6a:af:d4:
da:9b:bb:f7:e2:fa:f8:c4:33:b0:cb:a7:88:08:55:
cd:7c:8e:7f:24:26:f0:42:7c:43:cd:b7:23:35:0a:
2c:d5:bf:67:8a:73:4c:dd:ac:8a:79:06:88:38:09:
10:ec:8d:ee:ae:d0:ee:d0:76:c3:b1:2b:0f:c8:80:
cc:c2:5d:fd:4c:51:2b:f9:40:2f:fd:5e:c8:51:dd:
7f:ab:16:4d:50:9d:42:76:1d:1b:b1:d2:59:27:a4:
f9:13:3c:ea:a9:e4:6b:67:07:e8:b6:92:14:d8:05:
3f:28:cb:e4:6a:f4:a7:83:06:8c:d3:2c:36:2e:67:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FB:20:41:86:08:E7:B8:5E:53:0D:9C:4B:41:23:52:FE:48:05:9E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143000.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a15e::/32
Signature Algorithm: sha256WithRSAEncryption
5b:f4:5e:58:55:98:68:f5:7c:a1:93:a8:ba:9b:4c:82:6a:a1:
2b:00:6a:2f:75:dd:6a:27:61:81:e2:ce:94:8b:9f:63:74:91:
a7:5b:38:15:8b:91:52:e0:8a:e4:c7:5d:ba:6c:6c:30:b5:c0:
19:0d:ad:ed:6b:c6:cc:52:0f:77:29:7d:36:48:8f:ad:38:90:
31:6d:a0:e0:5f:20:0b:3e:b6:3d:64:75:6c:5a:18:06:a7:ce:
d0:36:b1:f7:cc:61:b2:3f:1d:4b:03:ab:7a:a6:0b:91:6f:6a:
d1:3a:c1:87:61:ec:5a:7f:e5:bb:70:7b:1f:d6:16:8a:73:b2:
84:4f:94:6c:93:46:a5:08:88:15:3c:31:2d:50:2e:cd:dd:88:
b8:92:b0:43:b5:8b:49:a7:ea:7a:a0:55:3c:3b:5f:2c:96:82:
4a:c8:a0:a6:1f:9c:88:4a:e1:2d:83:4a:a4:e1:b8:7b:11:d0:
75:cf:98:30:30:06:db:ee:73:9a:e9:03:31:76:07:79:0e:ec:
b5:25:90:44:65:70:fe:e7:29:84:58:7a:f5:6f:bc:1f:6f:5a:
ed:3c:de:db:8c:62:32:df:d2:23:14:c5:aa:91:95:58:bb:ea:
2c:4a:be:33:cc:fe:0b:e5:34:e9:25:fa:46:8d:0c:c4:2f:89:
bb:8a:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:15 2026 by rpki-client