Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143008.roa
File: AS143008.roa (raw, json)
Hash identifier: bH4TieBtiHyxYzqPgJFVpkyimWCPu2xJ7brfdbF/ucM=
Subject key identifier: AA:05:3D:78:77:D7:6A:30:02:DA:C4:FE:68:C2:98:ED:A1:47:3B:5E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5C3E1D48BE7CE3349443FB47A797E4B0C74231C4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143008.roa
Signing time: Mon 25 May 2026 02:22:40 +0000
ROA not before: Mon 25 May 2026 02:17:40 +0000
ROA not after: Mon 24 May 2027 02:22:40 +0000
asID: 143008
IP address blocks: 240a:a166::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:3e:1d:48:be:7c:e3:34:94:43:fb:47:a7:97:e4:b0:c7:42:31:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:40 2026 GMT
Not After : May 24 02:22:40 2027 GMT
Subject: CN=AA053D7877D76A3002DAC4FE68C298EDA1473B5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:66:a0:c4:44:89:36:be:76:ff:17:01:85:
af:00:45:59:e4:9d:b5:55:c5:fe:bb:88:77:9b:0b:
ba:03:7f:24:b8:87:30:15:9d:82:39:e5:85:66:c7:
40:e3:25:73:f3:e7:21:00:f3:19:0b:f0:e8:45:bd:
89:ae:3f:f2:87:36:70:df:91:b7:85:61:63:e5:ae:
19:ee:45:93:97:bb:f8:51:3c:ca:e0:d1:41:8a:a5:
70:be:a6:0a:87:54:ee:4c:10:f6:ec:e0:3e:fa:50:
9f:ac:76:56:23:d7:16:36:62:1e:91:51:c4:c5:f3:
7b:b1:c7:6f:32:e8:fe:ef:2f:db:f7:6f:9e:c0:46:
6a:78:cf:9e:d3:4b:c4:0b:76:ce:d8:04:f0:1f:3f:
05:6c:e5:76:02:11:37:80:4d:25:1e:26:63:d8:75:
ea:3b:22:28:07:2c:25:28:39:b7:93:7f:f3:24:81:
0c:d5:eb:ba:20:9b:48:56:e7:ca:cc:db:9d:82:a3:
b9:50:48:13:a3:7a:67:c5:8e:5e:c4:cd:2b:a4:e9:
a1:95:dc:3a:a4:3c:26:8e:ef:4a:e3:0c:6f:b4:04:
ce:51:82:fe:d3:b9:ce:00:a9:ba:a0:d9:44:b9:4d:
f8:30:7d:06:2b:68:a1:30:e1:96:2e:f7:51:e1:23:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:05:3D:78:77:D7:6A:30:02:DA:C4:FE:68:C2:98:ED:A1:47:3B:5E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143008.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a166::/32
Signature Algorithm: sha256WithRSAEncryption
55:19:98:89:86:45:44:d1:48:53:85:01:a4:34:de:8a:88:89:
ef:a0:40:c9:a2:57:c1:0f:75:05:f6:6b:21:10:82:84:1b:d7:
44:47:49:07:20:3c:c8:89:db:31:86:31:61:3f:03:01:88:e0:
fb:df:74:f4:35:b0:18:6d:f7:77:96:6d:62:4a:71:ee:ee:1d:
52:90:1f:78:04:f4:f0:b7:bb:96:41:5a:8a:31:36:81:b4:2b:
01:f6:1c:c0:50:ef:ce:a6:92:5d:80:93:b6:b2:ee:e7:7f:52:
2d:b0:5e:32:c2:40:03:f1:60:0a:22:97:b5:74:70:bb:76:68:
89:c6:8d:83:4b:ee:0f:6e:80:05:9d:ff:9c:c5:cc:40:24:ca:
14:33:c5:f3:28:b7:4f:3f:3a:f5:d1:68:82:6f:2b:82:4f:e5:
88:28:cc:38:69:57:95:d2:c9:31:3f:66:09:42:f2:37:56:9d:
a3:d9:a4:0b:93:72:24:20:76:6e:ca:77:5d:f9:fc:01:e2:08:
de:37:2a:17:f6:96:e5:da:cb:3e:b1:76:39:9c:3c:e2:55:ba:
ae:f7:d1:16:4d:7f:06:cf:04:ec:52:e9:4a:ad:63:01:2c:c0:
1a:ee:62:fc:8f:ac:c4:35:0b:f9:90:11:80:8e:35:e0:44:63:
38:a0:f0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:57 2026 by rpki-client