Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143031.roa
File: AS143031.roa (raw, json)
Hash identifier: YF75CUWVMG+ivXgEWQGCPr3Hci1H2Kps/fnJWcTlkIc=
Subject key identifier: 58:BC:FB:D6:1F:84:32:C3:28:35:B1:B2:3C:EB:32:35:94:FE:40:73
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2EA621FB302C24EFEA3613E94005E9C5A415E292
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143031.roa
Signing time: Mon 25 May 2026 01:19:53 +0000
ROA not before: Mon 25 May 2026 01:14:53 +0000
ROA not after: Mon 24 May 2027 01:19:53 +0000
asID: 143031
IP address blocks: 240a:a17d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a6:21:fb:30:2c:24:ef:ea:36:13:e9:40:05:e9:c5:a4:15:e2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:53 2026 GMT
Not After : May 24 01:19:53 2027 GMT
Subject: CN=58BCFBD61F8432C32835B1B23CEB323594FE4073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:92:31:83:5a:87:4f:20:3c:84:cc:fa:b2:
66:8f:6f:b6:4a:7a:07:e5:ad:f4:1e:76:96:7a:3d:
e1:ed:30:7a:9b:8d:ee:6d:8b:21:a0:7d:84:5e:a9:
e0:da:86:46:db:13:51:e6:4d:d7:3c:8a:36:b6:42:
7f:94:2c:29:29:40:d9:e1:14:9e:16:75:33:73:b9:
06:72:29:c7:90:32:4f:35:cb:dc:f0:b2:60:ef:43:
4a:42:65:08:cf:bc:b1:3a:86:c5:ea:fa:43:48:2d:
3f:a4:ed:0e:cd:5c:84:54:9f:8d:9a:9f:3a:3a:80:
49:1c:3a:d8:02:61:da:39:0f:93:57:36:d6:9d:ea:
0c:d5:9c:9b:4b:c7:32:c2:23:2e:6e:b1:1d:74:24:
88:11:f6:48:e9:c0:d5:13:05:d4:fb:f2:88:6e:83:
b9:09:70:32:3c:ab:d6:f8:e9:7c:de:4d:2c:f3:50:
c7:55:cb:78:99:36:58:f8:e5:fa:67:3a:08:65:57:
1d:a2:0e:07:f8:3f:71:17:ae:72:23:b0:a2:ba:19:
50:50:48:8d:73:be:10:73:e4:e0:7d:8b:d8:f4:4a:
f7:70:b7:b1:40:8f:11:4e:01:a3:0f:02:54:30:f9:
a9:41:e2:5d:24:02:20:4e:94:db:69:d5:88:33:68:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BC:FB:D6:1F:84:32:C3:28:35:B1:B2:3C:EB:32:35:94:FE:40:73
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a17d::/32
Signature Algorithm: sha256WithRSAEncryption
47:55:74:f0:5b:fb:8e:ca:68:64:cc:e0:8f:2e:b3:99:92:a9:
b9:cb:6d:d2:da:00:27:c0:46:13:6f:6f:1f:0e:b2:ad:93:94:
d5:37:41:52:68:83:d5:73:62:b8:2a:65:28:57:40:2e:39:16:
6a:15:03:9f:d7:42:cf:dc:5e:b6:a0:f3:4b:cb:63:20:88:f9:
2c:20:b6:38:21:31:da:86:08:ce:f2:8f:80:9f:83:4d:4a:37:
7b:dd:e9:25:c7:0a:a0:e5:17:d3:98:66:72:49:79:7a:6d:d2:
47:89:64:e1:78:cf:b6:83:35:64:9c:78:e8:95:db:5e:a8:ae:
b8:66:d9:6e:aa:9c:0e:99:db:e8:16:05:9d:85:49:e7:1d:1b:
3a:85:d4:7f:9f:42:a5:a2:21:9b:ba:ef:bb:51:d3:a3:26:01:
d7:f9:c6:f4:e4:58:e5:4b:c1:d4:36:02:95:5c:9a:bf:23:20:
10:80:86:08:7e:c6:97:5c:35:e2:89:68:14:66:3b:63:c7:b3:
2a:94:ed:b7:10:2d:97:fe:7e:c3:4b:17:55:b6:b6:e3:32:3b:
e4:40:13:c3:10:07:f4:fe:bb:69:6e:36:ea:35:a6:37:e3:98:
d1:d4:b3:a0:ee:c3:e3:75:92:36:51:e4:a1:08:e1:08:9f:56:
fb:c2:f1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:30 2026 by rpki-client