Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143011.roa
File: AS143011.roa (raw, json)
Hash identifier: wa5kpMX1gTWvfY3lrMAtqHGLK+GaFYTRZyZOEzJ82ks=
Subject key identifier: D8:E9:42:9F:BC:46:C6:48:CC:4E:54:8B:46:43:84:67:86:60:A4:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43D84999389EAF675F4215401184CBE137BE0088
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143011.roa
Signing time: Fri 22 May 2026 07:32:16 +0000
ROA not before: Fri 22 May 2026 07:27:16 +0000
ROA not after: Fri 21 May 2027 07:32:16 +0000
asID: 143011
IP address blocks: 240a:a169::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d8:49:99:38:9e:af:67:5f:42:15:40:11:84:cb:e1:37:be:00:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:16 2026 GMT
Not After : May 21 07:32:16 2027 GMT
Subject: CN=D8E9429FBC46C648CC4E548B464384678660A42B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:d8:45:fc:52:26:64:04:98:d4:aa:1e:0c:
c4:2d:7b:30:26:de:c2:7d:93:0c:c6:f1:01:f6:68:
c7:80:80:1a:fb:17:d4:09:3f:36:fd:0a:af:dd:61:
a8:62:24:0c:a5:7f:8e:6c:d9:d0:a2:42:c9:a2:2f:
f2:ee:95:e5:3f:c6:a5:ab:a4:d7:a7:b9:8e:67:59:
36:f7:a2:c3:a9:0b:c6:fb:21:a2:36:70:35:7c:d4:
13:2c:35:6f:9e:c4:4e:d3:44:37:98:ea:5d:2a:e2:
a8:de:3a:eb:af:3d:72:9d:78:86:3c:9e:c2:75:94:
53:6a:57:7f:99:68:a8:4b:9c:63:ec:b1:ea:01:0e:
d5:96:6f:8c:5d:f9:ed:35:88:3d:ed:63:97:3c:84:
33:48:97:c2:09:5b:90:b1:ad:1b:6e:6b:d1:6e:04:
6b:2d:a1:54:fe:6a:4a:91:e1:b1:e7:48:7d:1b:db:
f4:71:1c:69:5e:96:fb:c8:03:ab:59:c9:62:22:a5:
47:b1:89:7e:d6:99:79:c7:86:c7:ed:46:02:2d:73:
80:83:42:c6:f9:8f:ac:cf:0d:b9:fd:84:f6:33:8f:
12:b0:48:5f:35:47:d9:76:ac:d1:ed:8f:6a:28:8e:
e9:8a:d9:81:65:17:28:09:20:92:a4:db:68:46:e8:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E9:42:9F:BC:46:C6:48:CC:4E:54:8B:46:43:84:67:86:60:A4:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143011.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a169::/32
Signature Algorithm: sha256WithRSAEncryption
b1:a7:89:af:87:66:78:8c:fc:8d:d1:62:01:65:33:f2:d1:e5:
65:d0:39:25:7f:38:08:ba:5d:d8:bd:44:d1:54:04:cd:46:dc:
39:d1:a0:58:a3:db:68:a5:63:5e:d5:c8:ae:35:6a:aa:07:9d:
0d:82:15:ad:3f:fe:82:75:fe:18:60:76:af:ee:42:e0:a9:23:
32:d6:a7:58:ac:d1:55:7a:65:18:23:8e:25:8c:1b:ae:2d:22:
50:41:15:36:9e:83:a7:79:58:bd:10:6c:3d:3e:38:fb:ba:04:
5f:2b:1f:69:26:3b:4c:d7:36:e3:ec:12:17:08:9e:c0:66:df:
2f:29:2d:c8:e5:91:2a:65:af:63:c6:40:55:66:d5:42:34:5e:
9a:06:7b:96:a8:c7:13:0c:5c:93:84:35:ce:3a:c3:8f:50:3d:
62:ab:92:f4:e2:1a:55:1a:ef:37:d4:9f:4d:b5:bd:cf:8f:d3:
8b:60:d8:8e:c2:f8:a5:8c:bf:3e:a0:62:fe:9d:3a:60:cc:09:
7f:fb:b9:88:4c:09:e0:17:d9:6e:b6:26:d5:ed:c9:86:cb:1a:
52:18:df:ea:29:3b:55:91:44:40:3f:82:82:00:b7:c3:50:a8:
da:38:e2:97:92:c5:36:f0:fb:19:57:46:cd:a6:3a:a2:40:f7:
1a:3e:d1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:01 2026 by rpki-client