Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143009.roa
File: AS143009.roa (raw, json)
Hash identifier: GIXtVKQ8OwN9vFV6RkX4drJoXEdtqcguOosIQyGXU/U=
Subject key identifier: 89:71:DC:DA:2D:30:5D:69:FC:DD:86:8D:39:E0:94:66:88:A3:89:BE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0C10B1E4FEEA5860D3585E1ECE204D6A616E997A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143009.roa
Signing time: Mon 25 May 2026 06:28:39 +0000
ROA not before: Mon 25 May 2026 06:23:39 +0000
ROA not after: Mon 24 May 2027 06:28:39 +0000
asID: 143009
IP address blocks: 240a:a167::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:10:b1:e4:fe:ea:58:60:d3:58:5e:1e:ce:20:4d:6a:61:6e:99:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:39 2026 GMT
Not After : May 24 06:28:39 2027 GMT
Subject: CN=8971DCDA2D305D69FCDD868D39E0946688A389BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:19:36:98:81:3e:14:22:d5:2a:39:c4:2c:
74:88:c6:9d:e4:52:50:f1:5a:3c:f7:59:01:e0:5e:
a0:48:d8:1f:32:c8:ac:35:53:8a:07:80:59:1d:b4:
55:0d:0d:d9:5f:bb:a3:5f:33:24:9d:5f:94:75:8c:
25:fb:4e:6e:76:7f:a0:c1:f5:ee:d1:97:77:ab:10:
65:8a:af:94:9d:c7:29:a0:85:12:5f:04:98:bc:b1:
06:6b:10:71:3e:29:d8:17:bc:03:45:e5:d9:85:f0:
86:84:4a:86:e0:5a:65:99:db:0a:73:3c:9b:6d:bb:
bc:60:b3:49:9c:20:2a:65:bd:9b:d6:59:ee:9a:92:
fa:3d:59:d5:04:f1:c0:ff:cd:16:3b:c1:19:6b:87:
55:77:1f:50:a2:7b:0a:4c:e9:c2:22:8a:5f:11:89:
5c:32:b5:90:13:36:3b:ef:76:1d:46:89:af:e0:5a:
d2:a6:96:06:01:4f:1a:1d:df:13:55:94:75:3b:4c:
46:43:87:e4:ad:6e:03:95:b1:83:8a:49:64:7c:2d:
10:3d:37:1a:7a:f4:fe:39:f1:d2:1d:b6:7c:85:d9:
31:d3:25:cb:dd:b6:f2:6c:2f:a7:a8:4c:3e:0d:9b:
c4:48:1f:3d:14:34:09:0a:19:b0:c8:4d:85:bb:08:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:71:DC:DA:2D:30:5D:69:FC:DD:86:8D:39:E0:94:66:88:A3:89:BE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a167::/32
Signature Algorithm: sha256WithRSAEncryption
5c:af:a5:34:15:52:07:a9:93:17:05:8f:3f:41:82:56:d3:cc:
fa:42:39:f1:0f:c8:3a:72:b7:e0:aa:7a:77:02:26:5b:bc:e0:
3e:52:60:f2:d1:34:69:2c:5b:03:16:e3:b0:64:fb:b3:71:e6:
d9:43:b0:3f:cf:8f:4b:72:04:62:75:a6:2d:a0:31:46:47:2b:
73:f9:28:74:15:ad:6b:49:79:03:5d:f5:59:09:0f:31:09:22:
79:d4:cd:a0:64:10:4b:45:11:a8:d4:6e:b3:cc:84:7f:5f:24:
ab:00:02:1e:cd:7e:f2:af:62:f1:f8:b7:ab:d6:86:e8:ab:e5:
b1:da:45:af:79:6b:31:f4:71:dc:e3:ea:e0:8b:ea:24:fb:85:
0e:43:44:a3:57:93:d3:14:dc:37:d7:e3:de:9e:89:9b:17:ae:
22:f5:90:64:92:33:c2:fc:5c:fc:64:6c:2d:b5:b5:76:e1:14:
3c:54:72:71:71:86:71:23:10:27:d1:c1:7d:1e:d7:ec:e4:e4:
05:91:f3:61:4b:19:c5:0e:ee:33:c2:f1:28:f3:3e:98:36:1a:
b2:77:42:18:1a:9e:26:99:25:7f:91:c7:65:3f:1c:eb:f7:f6:
2c:3a:95:67:66:bb:58:60:f4:0f:92:99:0d:09:36:56:32:c2:
d3:14:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:29 2026 by rpki-client