Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143040.roa
File: AS143040.roa (raw, json)
Hash identifier: jM5IvRiy+7SMxGZV74gJtJ9DEq+plA5fJhXRRWhNAHY=
Subject key identifier: 45:F6:AC:38:18:C5:72:68:9F:5C:CF:70:BE:55:F3:84:55:24:96:DA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 26E5E54F1463F7B088A8B3F929DF2B9B7D6DC015
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143040.roa
Signing time: Fri 22 May 2026 07:25:01 +0000
ROA not before: Fri 22 May 2026 07:20:01 +0000
ROA not after: Fri 21 May 2027 07:25:01 +0000
asID: 143040
IP address blocks: 240a:a186::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e5:e5:4f:14:63:f7:b0:88:a8:b3:f9:29:df:2b:9b:7d:6d:c0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:01 2026 GMT
Not After : May 21 07:25:01 2027 GMT
Subject: CN=45F6AC3818C572689F5CCF70BE55F384552496DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:4b:dc:1e:fa:44:aa:21:b1:13:b7:64:a3:
62:26:fb:5a:6d:70:f4:68:f8:96:a4:75:e6:9d:09:
38:de:b7:e1:bf:4c:05:9b:58:b9:e6:7e:eb:d0:f6:
6d:00:ee:c5:87:c6:0c:be:d0:8b:83:13:44:3e:5d:
b4:af:db:97:a7:29:a9:87:ca:fd:66:4e:af:a8:70:
24:02:41:7a:0f:d7:77:bc:57:4b:df:6f:56:31:3d:
5e:d4:99:78:31:24:a5:b4:8f:6f:23:58:14:d2:15:
5d:d0:62:5b:5b:e7:f7:24:9a:15:9e:91:0e:a4:18:
f4:a9:69:9d:f6:e4:19:66:da:a5:ac:6f:09:99:e7:
4b:f3:18:94:0f:0c:47:c7:ab:91:9c:6a:10:9a:0a:
f8:f6:f2:e6:12:41:d5:f2:86:a5:e0:b7:31:4b:cb:
d5:a6:fd:ab:18:1a:23:ef:67:03:a1:bd:14:a0:e8:
c6:ba:2f:d3:c9:4c:8f:35:d4:bc:a9:fa:5a:ef:e0:
59:dc:62:d0:9e:08:c8:49:05:2c:ca:35:cf:3a:86:
dc:2a:c9:51:25:42:4b:b9:c3:46:50:ee:c2:9c:b6:
55:36:e7:35:d7:8a:b0:bf:d5:c3:db:5d:94:f7:e3:
55:3f:05:46:94:e1:5a:7e:09:c7:a9:37:b2:fb:b3:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F6:AC:38:18:C5:72:68:9F:5C:CF:70:BE:55:F3:84:55:24:96:DA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a186::/32
Signature Algorithm: sha256WithRSAEncryption
06:ea:13:5e:89:40:6a:de:f8:24:9d:d5:05:25:9f:e1:eb:cc:
63:3f:5c:81:88:40:40:20:55:97:3a:35:22:5a:e6:0f:24:de:
fe:d6:9b:31:87:53:51:b9:64:89:aa:7f:a0:82:85:7a:fe:41:
76:74:5f:b7:bf:19:21:c1:c3:3f:ab:5e:41:53:ef:49:1e:20:
f3:0c:51:fe:c9:cf:4e:c6:da:21:93:36:f7:72:56:0b:80:9c:
2c:11:22:15:86:e7:a6:9f:70:a4:18:55:1e:85:6b:5c:8e:4d:
28:d8:f5:a1:e8:2e:bd:69:35:33:ea:43:69:59:c0:7c:28:bf:
2b:1e:bc:c8:f7:7a:b3:db:b7:54:52:f6:34:ce:9c:14:cb:23:
e1:3b:62:54:2e:33:2c:a9:f6:8e:55:ca:d3:39:68:9f:05:c1:
19:9e:c2:5e:5a:d8:1f:50:fa:d4:c5:6e:aa:ad:22:b4:fb:77:
e6:51:97:8a:bf:b5:fb:64:69:07:54:f9:77:73:f4:63:7a:45:
1e:30:bc:9e:e8:3d:b2:57:6f:7e:76:08:ef:a8:90:6e:07:b9:
52:6b:29:44:5f:7e:86:95:f5:49:ba:13:60:36:1a:40:3e:1a:
52:7b:fb:1a:ad:5f:db:b0:e2:c9:bc:a4:4d:c8:b2:e4:27:35:
3f:13:44:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:50 2026 by rpki-client