Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143013.roa
File: AS143013.roa (raw, json)
Hash identifier: zajdHW1Y3foN7U7NRn105fPjFcF/j1ipvUo3Mp0eZIo=
Subject key identifier: DB:01:E0:7F:CB:C0:07:56:29:1A:91:AA:86:EF:0C:38:D4:D8:F9:2A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5BC2272144B1190521274BA0E2472ACEEA035258
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143013.roa
Signing time: Fri 22 May 2026 04:26:40 +0000
ROA not before: Fri 22 May 2026 04:21:40 +0000
ROA not after: Fri 21 May 2027 04:26:40 +0000
asID: 143013
IP address blocks: 240a:a16b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c2:27:21:44:b1:19:05:21:27:4b:a0:e2:47:2a:ce:ea:03:52:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:40 2026 GMT
Not After : May 21 04:26:40 2027 GMT
Subject: CN=DB01E07FCBC00756291A91AA86EF0C38D4D8F92A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:f8:dc:7a:9c:0b:08:8a:69:0f:ec:c8:e8:
87:0a:f5:cc:c6:3a:07:89:2f:2f:46:dc:6c:73:34:
b7:aa:7a:a1:14:ad:7c:9e:04:a2:ed:23:be:a1:97:
63:0e:62:bf:12:77:0e:d7:9a:1f:21:4f:8f:d5:8f:
2c:d3:f5:a3:9f:8f:c5:33:e4:e6:a4:b4:42:ff:5c:
c4:93:94:60:5b:04:b3:a3:d2:35:45:0c:85:04:c3:
49:22:17:41:24:10:e0:a7:e0:ab:f0:7a:f3:e7:a2:
45:88:42:0f:2e:aa:ec:6e:5d:bd:92:e4:8a:aa:a4:
67:cd:29:bc:7e:05:46:d1:2e:3e:97:52:96:15:9d:
80:5d:7d:a1:64:a2:5d:2d:35:8f:18:bc:5c:91:36:
da:41:0a:b1:b7:9e:14:d8:67:d0:1f:54:23:c3:8e:
84:76:74:19:8c:bd:6f:1d:8f:2a:cc:59:17:f3:ba:
4e:01:2b:90:55:79:2e:82:9a:68:a0:18:14:74:9f:
6d:80:06:79:91:2d:22:fc:b0:cb:19:cf:61:84:92:
70:f6:85:ca:03:d9:5e:87:55:6c:77:df:04:7b:91:
6e:7d:5e:63:ab:7f:3a:55:04:5b:d9:1a:e5:44:8f:
b0:91:10:45:b8:24:5b:4a:da:30:63:a1:22:84:7e:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:01:E0:7F:CB:C0:07:56:29:1A:91:AA:86:EF:0C:38:D4:D8:F9:2A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143013.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a16b::/32
Signature Algorithm: sha256WithRSAEncryption
40:98:f2:3b:2f:e7:1c:9e:6f:14:96:6e:7f:7d:cb:d6:e7:67:
23:88:21:ed:a4:30:d9:84:3d:a5:b3:f1:f3:29:2f:cb:81:6f:
32:34:99:76:9f:ab:67:72:74:01:ae:14:71:cc:5f:c9:24:a3:
c4:36:48:72:c6:f7:7e:7f:4d:c9:d9:1e:5e:60:42:c7:72:f9:
ed:f5:21:41:41:dc:8b:68:70:a4:b1:45:ec:27:a5:07:a4:54:
32:17:7f:76:e6:23:b4:62:1f:aa:09:87:5c:84:e0:29:02:7e:
98:e0:0c:0a:8e:cf:e5:16:ae:31:57:65:1a:ad:cc:7e:98:ce:
c5:a3:f4:91:ee:8d:9e:41:64:f9:7e:7d:56:f1:93:60:62:f6:
63:42:92:ea:81:10:18:5d:5d:86:64:7d:92:51:aa:97:ba:3f:
68:26:b5:10:49:ae:cc:70:2f:6c:84:9a:15:d1:e3:0c:4e:cf:
1a:8f:c4:1a:98:e4:75:e3:ea:96:9c:e4:ed:1d:40:ba:9f:5d:
77:d8:58:c8:c4:4d:86:17:43:9a:13:c2:3b:ab:46:01:96:1f:
09:2a:0c:26:89:04:af:c3:5d:65:5d:78:51:66:32:f0:34:12:
51:de:91:c6:46:62:6a:21:e0:48:30:ea:d8:5b:74:94:68:9f:
59:19:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:38 2026 by rpki-client