Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143017.roa
File: AS143017.roa (raw, json)
Hash identifier: 0hhmcqqflzFc3Zy2jaN8k2+fgUiBLE67YXHiflPIaZI=
Subject key identifier: A8:FD:C4:EF:A5:77:65:4D:F7:38:78:35:88:1E:98:88:79:D6:21:38
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7E6CED43A935CBCC5FF2D79F98FAE3F33D6ED975
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143017.roa
Signing time: Fri 22 May 2026 06:27:53 +0000
ROA not before: Fri 22 May 2026 06:22:53 +0000
ROA not after: Fri 21 May 2027 06:27:53 +0000
asID: 143017
IP address blocks: 240a:a16f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:6c:ed:43:a9:35:cb:cc:5f:f2:d7:9f:98:fa:e3:f3:3d:6e:d9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:53 2026 GMT
Not After : May 21 06:27:53 2027 GMT
Subject: CN=A8FDC4EFA577654DF7387835881E988879D62138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:af:bb:52:9e:cc:d7:70:1b:a7:14:60:d4:31:
1e:02:a8:83:34:0f:30:70:b8:84:cf:9a:ba:f6:b9:
c5:64:4c:db:11:b0:9d:99:5a:6f:c2:45:63:ed:79:
71:f9:53:69:26:86:84:eb:65:a8:1a:2b:4a:e3:9a:
b7:0d:ea:de:7a:76:ec:3b:72:17:df:ab:c5:f4:01:
3b:c1:c7:f6:cd:3f:cb:3f:6c:3c:10:fe:46:49:2e:
89:01:c1:05:61:27:cb:c4:8d:e9:0e:0b:26:00:5a:
8c:d3:7b:0b:82:1f:f3:16:57:b5:6e:40:e4:a9:53:
0b:6c:de:e1:48:39:33:54:0c:bb:68:e6:c1:b2:32:
48:b6:51:ea:fc:19:d6:54:30:61:24:66:4f:ce:7b:
9a:88:97:89:5a:fb:2d:43:ae:56:1e:23:70:fc:9d:
d3:35:ca:b1:27:08:e1:d5:b2:ef:ef:24:6b:19:07:
07:87:24:3d:8c:9a:17:c6:27:91:6c:9e:cd:a7:e9:
7d:a7:d1:b2:d2:44:ee:7a:f1:41:85:de:b5:ba:a3:
1f:66:24:9f:ff:c2:e4:e1:f1:3a:e2:67:5e:9f:5c:
b0:c9:e4:9c:5c:f1:67:d4:41:4d:fb:fe:24:56:ce:
29:a0:e3:0c:f4:ae:40:0e:32:d6:ef:2b:7b:ca:27:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FD:C4:EF:A5:77:65:4D:F7:38:78:35:88:1E:98:88:79:D6:21:38
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143017.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a16f::/32
Signature Algorithm: sha256WithRSAEncryption
9b:b7:02:87:e1:83:69:fb:43:72:bf:fb:0a:4e:83:9b:89:05:
6b:c7:a8:6c:64:e8:eb:63:49:aa:81:54:9e:16:32:08:7d:2b:
05:cc:e4:c0:c6:42:65:a6:6c:c0:10:ec:48:61:87:54:67:46:
5a:65:ae:85:e1:e4:eb:05:a6:44:8f:3b:f5:44:5a:04:59:c3:
0b:e7:cf:4d:df:db:06:21:37:a4:4c:0a:06:80:d5:9f:0e:d9:
25:bd:25:17:83:fc:7a:3b:03:87:69:d3:92:93:0b:95:e6:b0:
29:36:48:b8:31:fa:ee:5c:63:c3:93:ef:92:7d:28:02:b0:66:
a8:d4:dc:90:85:0e:36:95:7a:cb:fc:9c:f0:53:55:ec:cf:23:
1f:e5:7a:2f:9b:65:df:df:c2:9c:9a:3a:f0:f0:6f:c0:3a:29:
aa:77:21:d3:03:77:48:38:df:02:9b:d7:9d:5d:9a:7e:26:a0:
6e:4b:7f:d3:8a:d4:5d:7d:34:c1:da:15:b3:89:89:a3:9d:de:
c6:9c:bc:2d:55:eb:ba:2b:11:bd:4f:57:c7:3a:fd:0b:6e:d2:
0c:df:4f:ce:30:00:a8:2d:ed:80:23:c4:66:09:ee:15:c1:60:
13:d5:88:f4:ff:2d:ff:cd:4b:2d:9d:e3:47:04:89:4f:b1:cd:
d3:66:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:05 2026 by rpki-client