Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143022.roa
File: AS143022.roa (raw, json)
Hash identifier: angzoxDbgChhsTv/9zm9ClrpYdFIP/riy+pBd5qrxzg=
Subject key identifier: 44:60:27:AB:A5:D6:43:0F:D5:1B:88:31:F3:4B:1C:8C:A5:BB:FF:77
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4C8A1594FD186AC435E6E2CA2E8ACC41D77DB133
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143022.roa
Signing time: Mon 25 May 2026 06:49:13 +0000
ROA not before: Mon 25 May 2026 06:44:13 +0000
ROA not after: Mon 24 May 2027 06:49:13 +0000
asID: 143022
IP address blocks: 240a:a174::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:8a:15:94:fd:18:6a:c4:35:e6:e2:ca:2e:8a:cc:41:d7:7d:b1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:13 2026 GMT
Not After : May 24 06:49:13 2027 GMT
Subject: CN=446027ABA5D6430FD51B8831F34B1C8CA5BBFF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:78:7f:6c:ba:a5:66:9a:cb:83:54:a2:50:
7f:67:98:a9:ad:78:a9:b5:91:32:59:a4:d0:41:1e:
c0:62:74:af:0a:f5:d2:2f:f6:63:d6:c5:9e:c6:f9:
d0:1d:68:18:f3:00:a9:97:06:49:db:36:5e:f0:c0:
83:be:b0:54:7d:a5:a9:9b:68:51:62:1d:b7:26:30:
a8:87:93:ba:0f:28:16:c0:96:5b:02:19:70:4c:0d:
86:fc:fd:40:b4:20:97:bb:d9:84:72:71:f9:32:87:
5f:26:7b:a1:99:39:f4:40:68:6c:74:7e:95:50:28:
39:6b:98:cc:76:2c:fa:6a:ae:9a:1b:5b:5d:2d:03:
73:b6:6c:c5:6c:8b:24:e0:e4:38:22:b6:8d:d9:a0:
66:ca:94:7d:f1:5e:4c:e4:df:f8:8e:08:7c:28:37:
5a:02:8c:66:ee:6f:7a:f4:de:3a:26:a5:73:c7:41:
cd:c2:c4:3a:5e:a7:04:20:1e:6b:82:00:6d:c0:92:
89:21:ca:94:30:bd:60:5f:bf:49:62:bf:c7:a9:e4:
12:4a:55:ea:87:af:38:16:3d:e3:47:05:61:c9:c0:
3d:32:48:16:b5:f6:73:e4:cc:91:d6:e4:23:b8:de:
15:99:79:13:33:bb:2f:fa:63:66:61:28:d9:f6:85:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:60:27:AB:A5:D6:43:0F:D5:1B:88:31:F3:4B:1C:8C:A5:BB:FF:77
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143022.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a174::/32
Signature Algorithm: sha256WithRSAEncryption
9b:6e:ab:98:84:cd:21:43:e9:4b:b9:2e:4c:6f:83:cd:d4:a6:
64:25:00:7b:05:f1:c9:85:ae:44:ba:bf:a2:0e:ca:c3:70:66:
6b:e0:f1:fe:90:5a:52:b8:eb:9c:80:7e:5d:76:7a:2d:fe:47:
3b:6e:93:bc:89:57:16:59:cb:32:36:32:24:ff:6a:88:40:2f:
59:80:f5:4d:a9:77:dd:7b:12:57:2a:b9:a2:60:74:bb:ee:cd:
08:af:c0:f8:94:cb:cd:40:da:1a:cd:1e:74:d3:73:00:7c:bc:
b6:40:e0:f6:c4:68:fd:e1:37:4a:0e:28:f8:7a:7c:63:80:8e:
91:53:ec:99:2f:1e:be:f3:3d:4d:c9:81:5f:13:b3:7d:c1:71:
23:3b:7b:ea:6b:b8:d9:ce:c4:85:7f:74:df:83:98:1f:f5:c4:
24:ea:15:39:fc:82:8c:0c:98:a6:7b:9d:a1:c8:8e:d0:aa:b0:
38:53:d9:ed:8d:a9:21:58:df:dc:f7:9d:e4:66:db:db:c0:6e:
2a:8d:d8:81:20:e9:54:c7:64:f3:bf:d2:0f:23:41:cb:7c:34:
90:e3:72:b0:21:3e:71:85:04:50:3d:85:bb:b4:b6:8f:a2:41:
04:b1:5b:33:06:b7:d2:25:e1:69:57:6e:68:41:57:03:b5:e9:
c6:a6:a0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:10 2026 by rpki-client