Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143001.roa
File: AS143001.roa (raw, json)
Hash identifier: TKRtxGxokTH5h10iIfoCCiFeel361shoerIBlB19CAA=
Subject key identifier: EE:83:CA:A6:C8:CA:AC:A0:76:77:62:33:0F:9C:D7:F8:EF:A5:09:9B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 11D726B677EAF7E74B1570418CCFDBD3F61C0768
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143001.roa
Signing time: Mon 25 May 2026 06:49:03 +0000
ROA not before: Mon 25 May 2026 06:44:03 +0000
ROA not after: Mon 24 May 2027 06:49:03 +0000
asID: 143001
IP address blocks: 240a:a15f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d7:26:b6:77:ea:f7:e7:4b:15:70:41:8c:cf:db:d3:f6:1c:07:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:03 2026 GMT
Not After : May 24 06:49:03 2027 GMT
Subject: CN=EE83CAA6C8CAACA0767762330F9CD7F8EFA5099B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:68:50:b0:9d:56:8e:bb:84:0e:03:a2:04:
fe:be:09:b7:44:33:fd:69:22:2e:2b:5b:47:0c:e8:
ab:7f:7c:db:8f:09:f3:5c:4a:c2:51:44:af:46:53:
da:0e:a1:46:20:10:1d:51:44:3d:55:c8:0d:8a:15:
a1:29:b7:7b:d8:4c:e4:9a:eb:83:3f:47:d0:a5:35:
a9:2b:07:df:8c:3e:94:45:9b:a2:88:ee:7b:2a:45:
a9:c0:22:a5:41:1c:3c:18:c6:ed:4d:cd:62:a7:48:
78:5b:b2:38:db:5a:c5:0e:99:aa:96:11:c2:75:6e:
c8:bc:fc:f3:df:df:f2:f8:8a:22:22:64:1c:8f:d2:
e6:cc:d6:59:03:f7:4b:05:c0:67:8d:c2:d7:1d:5a:
22:18:3e:2a:85:a4:58:b7:a5:61:b5:68:c6:15:ae:
ec:5f:7f:89:a1:ce:47:92:34:4a:68:a8:9a:65:38:
95:43:a7:50:44:ad:6c:cc:5f:a0:ec:91:93:01:f5:
42:1f:dc:fc:c3:a5:bf:23:17:02:84:4c:d9:1d:68:
17:21:31:62:06:f7:c5:11:54:5e:90:8f:fc:ae:4c:
1c:ec:9b:96:79:7a:59:06:3c:64:70:1d:da:00:01:
5a:29:d6:9f:8d:1c:f0:07:2c:b2:f7:9e:ea:0a:57:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:83:CA:A6:C8:CA:AC:A0:76:77:62:33:0F:9C:D7:F8:EF:A5:09:9B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143001.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a15f::/32
Signature Algorithm: sha256WithRSAEncryption
4e:6d:51:71:dd:fa:5f:b3:d0:97:2d:dc:49:7c:47:29:3d:63:
55:c4:c0:e5:95:fa:5f:a1:0d:21:4a:08:f4:6d:56:b8:63:c6:
1c:a8:81:be:c2:4c:71:24:fe:5a:7f:c3:e0:de:b1:23:92:fe:
b5:70:db:d5:26:36:ab:74:f9:32:a7:aa:25:e5:19:36:52:c8:
49:5e:9d:31:cd:4d:cf:b9:3b:4c:45:78:72:6c:5b:74:4b:11:
d3:c5:6a:e3:63:dd:ad:53:77:9a:39:d1:c4:a8:23:54:bd:c9:
0f:f1:cd:2c:88:20:b1:1c:70:04:a1:50:46:dc:96:0c:c3:de:
05:e8:a1:ae:d0:c4:26:78:71:01:08:a4:ed:a2:25:46:7d:73:
25:14:69:d6:62:ce:8a:36:54:6c:45:1a:c5:46:d1:37:13:cb:
e3:f7:f2:d3:82:68:fc:55:b1:85:ef:23:ff:b9:c3:b6:d1:e3:
c6:ab:c0:cb:39:66:c6:20:94:02:46:7c:3a:ae:53:af:ed:20:
16:52:fc:89:ec:43:4b:ae:6a:fd:c8:c4:ac:3a:74:52:35:95:
f0:45:b4:c0:4c:0d:3c:17:16:eb:52:99:dc:e7:8e:d8:53:31:
82:6a:72:32:29:26:2d:75:94:27:2d:5e:d7:87:9b:90:31:0e:
8c:f6:e3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:54 2026 by rpki-client