Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143036.roa
File: AS143036.roa (raw, json)
Hash identifier: 0gkHIGmtfogWNcolhW7KpKvKYWatTMLlSKaugP4fkXQ=
Subject key identifier: B3:30:B0:AE:62:53:E2:6F:AB:95:88:48:53:85:A0:62:59:D7:ED:21
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 313714ED0CBCFD4442317A6014F62D25A19C8F49
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143036.roa
Signing time: Mon 25 May 2026 01:20:32 +0000
ROA not before: Mon 25 May 2026 01:15:32 +0000
ROA not after: Mon 24 May 2027 01:20:32 +0000
asID: 143036
IP address blocks: 240a:a182::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:37:14:ed:0c:bc:fd:44:42:31:7a:60:14:f6:2d:25:a1:9c:8f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:32 2026 GMT
Not After : May 24 01:20:32 2027 GMT
Subject: CN=B330B0AE6253E26FAB9588485385A06259D7ED21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:31:59:a1:cd:0b:c7:c2:80:01:a2:b2:7a:
00:b1:a5:99:91:a5:6a:26:cf:9a:3b:27:69:98:91:
60:51:2e:7f:b4:ad:79:3e:31:75:47:35:60:cc:72:
b2:54:0e:46:3b:46:88:a3:7d:6c:e7:2a:79:8f:8a:
63:c7:86:5e:74:1a:a7:b3:5e:98:9d:e0:f1:cc:ed:
57:ab:3a:72:a1:2e:3c:26:47:24:a6:0b:c7:bd:19:
0d:1e:c2:da:40:c6:47:89:24:4c:2a:81:81:d3:7b:
57:91:e9:1d:32:46:8b:7d:33:51:bf:30:24:05:9f:
ed:d7:16:38:5c:de:e6:4b:43:22:92:64:c2:b8:4b:
5c:56:2b:5b:5a:83:1c:e8:f3:00:59:87:a7:c6:2a:
36:50:86:41:d6:40:e7:a5:1a:45:c9:5c:64:ca:54:
ca:75:00:35:22:e6:1c:97:9c:7d:33:50:b3:87:a8:
e4:cc:70:38:77:76:14:16:2a:ff:70:d7:d2:78:b9:
05:68:d2:c7:2a:e9:f9:d1:e3:53:07:aa:9c:01:69:
13:0a:5f:15:97:af:4f:ef:5d:6a:00:c1:6a:01:83:
84:ba:78:1e:f8:5a:d4:4a:3d:2c:22:47:5e:ce:45:
96:3c:c6:3c:d3:90:d0:23:b4:aa:c8:cf:db:d8:2c:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:30:B0:AE:62:53:E2:6F:AB:95:88:48:53:85:A0:62:59:D7:ED:21
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a182::/32
Signature Algorithm: sha256WithRSAEncryption
28:7f:de:20:83:de:ff:7b:d5:2b:b9:9a:8b:a4:ec:b2:1e:fc:
91:62:66:c0:6f:40:55:ca:8f:e5:7e:ec:e9:f8:b2:31:17:ee:
86:9f:b5:b5:09:8a:66:f7:6f:82:0f:73:24:df:ce:3f:b6:88:
16:c7:e9:d5:43:25:9f:52:ad:a4:f7:ba:46:ef:95:ad:b4:ef:
53:1a:21:49:2f:d7:e2:6b:7a:b8:30:4d:90:9a:41:69:c2:a2:
f8:71:51:95:eb:5a:1c:bd:de:46:e3:c0:69:13:36:2b:87:d6:
fd:e7:02:62:2a:a0:13:54:8c:5a:2c:65:50:62:9f:8a:3c:25:
e0:f5:ee:fe:13:08:6a:78:56:af:6e:10:ef:e3:03:8e:aa:7f:
0f:e0:4f:b7:52:57:de:ad:a9:21:3f:8a:a0:06:4d:82:eb:40:
b6:5c:bf:a8:03:c1:9a:b0:ba:b6:25:0d:45:1c:98:a4:92:1c:
e6:b0:f6:42:d3:b7:58:09:1a:16:15:ae:2c:b4:c6:ec:70:6d:
40:8d:c9:09:3f:8e:2c:9f:dc:68:97:9c:b5:b7:42:51:fa:81:
4b:6a:5f:e4:05:1d:b1:a9:82:e9:71:46:1d:10:5a:66:c7:7b:
5b:0a:33:dc:2c:44:81:a7:46:65:47:c2:f5:59:27:ed:71:7e:
24:24:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:29 2026 by rpki-client