Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143025.roa
File: AS143025.roa (raw, json)
Hash identifier: MtXsVcxu62kT9LCSIlpeFhSePCVJv0Vsetciz2WOStM=
Subject key identifier: 51:22:9A:CD:B2:EB:39:BE:69:49:14:7F:A5:87:8B:95:CB:1C:D2:9A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5BDFFB08E078AE6D8A763131164773C8A7EF1D24
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143025.roa
Signing time: Mon 25 May 2026 06:49:14 +0000
ROA not before: Mon 25 May 2026 06:44:14 +0000
ROA not after: Mon 24 May 2027 06:49:14 +0000
asID: 143025
IP address blocks: 240a:a177::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:df:fb:08:e0:78:ae:6d:8a:76:31:31:16:47:73:c8:a7:ef:1d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:14 2026 GMT
Not After : May 24 06:49:14 2027 GMT
Subject: CN=51229ACDB2EB39BE6949147FA5878B95CB1CD29A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:57:a6:c4:a3:69:fb:e9:5d:c4:7e:e9:9b:
19:cb:6f:fb:45:e3:8e:a3:41:5e:3e:96:cc:93:53:
cf:f5:11:a1:8a:5d:c0:03:9e:32:f0:eb:04:18:e9:
c8:f0:e1:2f:e1:bf:92:e7:dc:e2:25:4e:64:1b:4a:
9c:f7:a2:ab:f2:39:33:c8:41:f0:99:84:16:e6:7c:
fe:70:d1:b0:e9:36:55:4f:2f:f6:f3:37:9f:ba:bc:
5e:2c:a5:de:34:5f:38:22:5b:25:da:2e:f1:d0:c4:
61:53:2c:a9:62:4d:79:dd:cb:0b:2d:91:16:0c:2d:
f2:36:a4:3c:6d:aa:6a:2a:2e:b4:02:97:49:0c:5a:
ad:9a:98:32:01:4d:e4:b5:c5:a7:07:92:e7:66:47:
54:72:be:01:cc:66:2c:c6:bd:c4:c8:fa:60:6b:ef:
ba:c6:23:ce:f5:91:50:e3:97:97:12:d6:dc:12:54:
57:21:fb:aa:9b:fa:ec:28:8d:61:9c:17:1a:58:e3:
a8:bf:45:e4:7a:85:37:33:64:56:e6:1b:2a:74:17:
a0:c4:e5:f2:32:6b:c0:4b:92:9e:02:2a:1d:dc:b6:
94:dd:62:b3:a6:8f:b1:93:a8:9f:25:22:b2:f2:e9:
86:aa:c7:d4:f4:27:05:79:4f:19:e4:80:31:72:90:
35:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:22:9A:CD:B2:EB:39:BE:69:49:14:7F:A5:87:8B:95:CB:1C:D2:9A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a177::/32
Signature Algorithm: sha256WithRSAEncryption
8e:1b:73:e1:96:34:3f:15:76:cb:59:7a:36:eb:61:24:65:6c:
58:ae:fa:5a:5f:be:55:b0:68:b0:3f:55:c0:98:7d:27:42:d5:
58:d8:e7:46:00:8d:eb:14:52:36:dc:15:c3:49:d0:e8:b8:20:
27:0f:39:c4:f4:43:b9:a2:fe:21:6c:5a:01:e9:1e:db:ec:c2:
d6:39:5a:84:e3:a7:69:b3:5a:e9:41:b0:45:0f:39:41:49:22:
4b:b6:e9:9d:51:9f:fd:90:98:52:2a:31:55:5d:49:02:fb:74:
ca:bc:87:2d:70:4f:a2:5a:a5:fd:53:4a:f3:62:55:fc:34:cb:
9a:5a:9b:82:52:42:41:21:80:1e:d9:3b:01:27:31:ff:04:04:
ee:a8:4e:21:73:46:2e:50:32:95:08:4d:54:ea:64:a6:41:83:
69:28:1e:12:75:39:ef:bc:fb:9c:53:7c:ac:0f:b7:e3:fd:14:
50:fe:27:7a:7b:64:f4:5a:f7:e4:48:41:53:de:30:d8:44:ef:
9d:c9:0b:76:16:a9:3f:c0:aa:6d:99:bb:1f:77:7d:f7:e7:4d:
5d:e4:17:62:27:0e:08:e1:7e:8d:58:ac:d6:47:8e:0c:42:d6:
0f:48:a2:8f:20:8f:b1:42:68:a6:8f:e1:4d:ec:45:34:fa:ba:
70:d1:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:32 2026 by rpki-client