Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143007.roa
File: AS143007.roa (raw, json)
Hash identifier: POFHHLimRdIgU0jiS7TCrD/KtTK8hpDMCLz39r8WMsQ=
Subject key identifier: E6:36:F5:D5:E6:87:A6:C4:FD:06:E9:3E:42:01:F1:C2:AE:C2:2A:FE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 40E916312E019F7141C46AAB8E33616294175F37
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143007.roa
Signing time: Fri 22 May 2026 07:41:00 +0000
ROA not before: Fri 22 May 2026 07:36:00 +0000
ROA not after: Fri 21 May 2027 07:41:00 +0000
asID: 143007
IP address blocks: 240a:a165::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e9:16:31:2e:01:9f:71:41:c4:6a:ab:8e:33:61:62:94:17:5f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:00 2026 GMT
Not After : May 21 07:41:00 2027 GMT
Subject: CN=E636F5D5E687A6C4FD06E93E4201F1C2AEC22AFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:21:9b:01:d1:28:6d:82:0c:f6:9a:f9:fd:
06:e6:2a:99:17:96:62:27:5d:8a:17:02:e1:54:d6:
4a:63:fc:12:a5:a3:72:3b:a0:f8:8a:8f:11:fe:80:
e4:7a:fd:9c:18:b5:7f:83:a5:59:ba:5c:e7:fe:ef:
81:6c:4b:80:b4:68:5f:66:ac:60:5b:0c:38:b2:92:
7b:2c:3f:fa:01:df:7d:7f:31:c2:98:a2:b3:35:ca:
55:fe:bf:78:4e:aa:7f:38:83:4b:be:0b:1a:17:55:
ac:33:4a:04:17:7c:80:d0:62:7a:0c:8a:d7:fb:67:
24:a9:57:46:ee:e8:89:5b:f3:b8:7c:80:e4:46:19:
5c:46:88:a0:fa:a8:17:76:31:61:ee:e0:92:eb:f8:
04:43:68:7d:3c:23:c4:f0:eb:2e:e3:a6:67:ca:26:
ff:00:a9:94:f8:34:18:3f:fd:30:71:ca:da:3c:cd:
f2:3e:2c:26:ce:b3:b0:f6:8e:64:b8:d8:d2:c2:af:
37:cd:ff:0c:b5:e8:c4:45:07:3b:14:f5:cd:dc:0b:
6c:44:cb:c5:ca:9d:0d:db:29:ab:55:73:66:3c:21:
51:bf:98:a3:c8:ab:54:4e:68:12:69:d7:d5:90:1b:
ac:03:1a:78:49:28:37:28:72:04:3f:6b:47:d6:71:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:36:F5:D5:E6:87:A6:C4:FD:06:E9:3E:42:01:F1:C2:AE:C2:2A:FE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143007.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a165::/32
Signature Algorithm: sha256WithRSAEncryption
28:14:2f:40:04:5b:01:eb:20:ec:ee:b2:32:4f:da:53:c4:05:
bb:ad:21:90:22:94:28:1e:c9:8e:9b:4a:18:a8:f7:b8:9a:3f:
f4:a6:69:2f:8c:0c:24:56:38:e3:cf:6e:41:1c:a0:48:10:0f:
07:7a:9f:cc:f8:ac:eb:55:e9:c4:67:2e:71:68:d7:ba:45:57:
15:44:54:65:31:6c:87:03:fd:03:ce:35:eb:76:14:d3:8f:75:
d6:93:2c:0d:dd:6d:33:25:56:cb:b6:72:f4:23:ec:03:b4:33:
f8:8b:63:7a:8c:ac:23:5c:71:a1:1a:3d:0d:fb:be:ea:ff:b5:
7a:65:39:39:80:8e:e2:89:ad:e1:e2:05:19:73:f5:74:f3:f3:
0c:85:b8:8b:71:8c:ee:fb:99:18:11:c4:cf:1c:3b:79:a0:7f:
2f:e9:61:c6:dd:67:50:1a:77:1d:8f:f0:95:9e:85:63:60:b3:
f9:78:09:b9:b4:f4:ef:db:37:d5:27:e5:7b:bc:21:4f:ae:cd:
ca:6a:d0:50:2b:d7:66:20:4e:72:e8:59:a4:49:29:4d:74:0d:
dd:a5:59:8d:0e:4b:08:61:6e:44:35:37:db:55:ce:a3:2a:e3:
cb:0a:5d:08:b4:ac:90:63:8a:e9:b1:84:5b:12:84:22:12:32:
76:21:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:41 2026 by rpki-client