Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143002.roa
File: AS143002.roa (raw, json)
Hash identifier: RW/Jsx55GqONlNLTbcHG5K29OQAQq0oE3BssZTHJBXo=
Subject key identifier: 7A:FC:E9:AF:E5:33:5F:CE:28:21:6A:3B:F9:4E:4D:FD:90:E6:03:AD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 570CC4A864EB92EB4A28397F26844ADB9FC7ED84
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143002.roa
Signing time: Fri 22 May 2026 06:27:54 +0000
ROA not before: Fri 22 May 2026 06:22:54 +0000
ROA not after: Fri 21 May 2027 06:27:54 +0000
asID: 143002
IP address blocks: 240a:a160::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:0c:c4:a8:64:eb:92:eb:4a:28:39:7f:26:84:4a:db:9f:c7:ed:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:54 2026 GMT
Not After : May 21 06:27:54 2027 GMT
Subject: CN=7AFCE9AFE5335FCE28216A3BF94E4DFD90E603AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:2c:f3:18:b3:93:30:ed:ce:12:ab:2b:0b:
ab:6b:18:c0:92:4d:3b:aa:37:bd:47:ff:ab:c7:58:
65:0d:b6:74:b0:d6:35:d5:2f:94:70:79:c8:2b:75:
4e:d6:56:ea:bd:df:e8:fd:a5:65:88:0b:eb:e7:74:
c0:64:fd:cb:db:14:68:ad:1f:24:f5:90:fb:1d:8f:
7a:d7:12:91:da:52:b4:86:03:a3:de:b4:2b:0a:38:
fb:31:1d:8d:a8:75:c1:0e:36:f3:b5:da:bb:f5:e9:
6c:44:74:9d:84:ea:ba:5d:0c:e2:9d:ad:de:9b:57:
1d:1e:4e:05:e4:9c:95:15:a3:b5:a1:ef:cc:ac:6f:
65:67:a5:0a:30:54:6e:d2:5c:78:a2:77:42:9f:ea:
35:09:a4:f5:43:76:ea:32:2d:b4:eb:d1:a0:18:43:
79:a1:06:ee:93:75:ca:28:52:ce:4d:91:86:b4:44:
e6:8d:fc:81:89:5b:01:16:0e:87:a2:69:40:da:2c:
81:d8:8c:03:3c:5b:0a:c6:d5:b4:47:f7:76:16:20:
ba:d7:a0:d7:3e:f2:25:54:8f:db:a3:19:c9:af:ba:
d4:11:ea:f5:35:ec:b3:59:33:91:c2:1d:97:3b:ab:
9a:51:ff:b4:26:2c:b0:ce:36:d1:6a:9c:ed:f2:61:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FC:E9:AF:E5:33:5F:CE:28:21:6A:3B:F9:4E:4D:FD:90:E6:03:AD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143002.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a160::/32
Signature Algorithm: sha256WithRSAEncryption
1d:b4:61:60:67:bd:0a:71:63:63:82:d6:3d:d0:5e:aa:41:3e:
2f:9e:ab:fd:fc:86:b8:ce:9c:ca:b0:2b:e3:25:af:79:ee:1c:
75:2c:c2:fb:cc:0c:f2:df:c1:91:a9:30:18:9c:f1:36:56:77:
f4:a6:c2:49:fb:98:e8:c1:3d:74:29:48:66:20:43:e5:52:71:
6e:d1:07:be:5c:12:59:ce:e9:f7:3b:ed:55:d4:f8:82:7a:43:
c0:eb:3e:1e:6a:0b:c2:cf:a6:52:3a:55:e9:75:1f:e7:41:fd:
0d:a8:96:85:bd:c0:56:6b:80:6f:a4:00:a9:d3:62:5b:0b:26:
18:d6:18:87:61:58:46:65:93:45:e4:35:cc:c7:6d:38:67:33:
36:66:41:21:09:a9:53:0f:50:f7:d1:8a:c3:2d:76:d0:e3:a4:
33:3a:9a:ae:60:fa:de:3c:a6:a7:4b:33:ac:57:3f:87:da:80:
9a:a9:c6:31:54:c2:46:2c:99:65:ff:df:92:af:d8:01:de:ab:
36:6f:72:51:9c:db:bd:2c:81:45:28:56:36:c8:03:bc:5a:c5:
35:81:fe:ec:98:5d:4c:6f:66:33:d1:0c:94:04:05:34:0e:10:
89:41:f0:16:8f:9c:ec:b9:07:4d:46:5d:8d:12:e6:3d:e3:06:
14:78:c0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:42 2026 by rpki-client