Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143041.roa
File: AS143041.roa (raw, json)
Hash identifier: OikaQk4g0t31eHlsLfRuCAuowHwfYEWqAc12MFlrj78=
Subject key identifier: 08:76:4E:15:D1:F6:CD:63:0B:6A:17:F8:BD:C9:15:6F:C6:52:23:11
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1EFD937F2C378D5D1FD63AC8FFC68119D63BEA0F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143041.roa
Signing time: Mon 25 May 2026 03:19:19 +0000
ROA not before: Mon 25 May 2026 03:14:19 +0000
ROA not after: Mon 24 May 2027 03:19:19 +0000
asID: 143041
IP address blocks: 240a:a187::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:fd:93:7f:2c:37:8d:5d:1f:d6:3a:c8:ff:c6:81:19:d6:3b:ea:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:19 2026 GMT
Not After : May 24 03:19:19 2027 GMT
Subject: CN=08764E15D1F6CD630B6A17F8BDC9156FC6522311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:da:40:91:c7:64:95:5e:b0:77:ba:02:63:
3f:82:2e:8a:2d:f9:51:55:bd:35:ff:0e:25:f8:c0:
c6:de:3d:e8:94:df:89:7a:b2:74:1e:47:8b:7b:92:
90:14:bc:1e:12:7c:e4:63:18:ea:9c:b8:5c:14:f3:
f0:43:a4:c7:73:9d:cb:6b:c1:08:58:be:f1:e9:07:
04:40:f5:29:b6:d3:c8:06:d8:ea:14:99:5d:4c:57:
50:a0:fc:32:9d:2f:60:a0:71:df:a9:d3:c2:a2:6d:
d2:d0:5c:d4:a9:85:5b:5d:97:81:d4:fd:f5:97:1b:
79:cc:3a:21:c6:75:40:bd:69:fa:c9:6d:00:17:f8:
28:da:18:df:0d:1d:29:bb:d4:c3:de:43:78:cd:ac:
e0:fb:57:ea:ab:df:96:46:4c:eb:80:f2:f7:a9:42:
df:2d:1d:d2:31:71:fe:13:19:5f:29:f6:ac:fe:7a:
ed:89:b7:dc:5e:6a:63:f2:5e:d7:b6:ca:e2:19:25:
28:e1:e8:33:dd:c7:a9:f3:0d:bf:94:31:9f:e8:d1:
db:9f:cb:0f:31:65:fa:3c:d8:73:f7:2a:a5:ee:c5:
65:cf:ca:a3:71:62:e9:e4:ab:64:4e:f8:4b:25:fa:
53:ce:d7:8b:fb:24:4c:c9:f8:b4:23:7e:80:a2:cf:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:76:4E:15:D1:F6:CD:63:0B:6A:17:F8:BD:C9:15:6F:C6:52:23:11
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143041.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a187::/32
Signature Algorithm: sha256WithRSAEncryption
a2:fd:16:4d:9a:80:cf:ab:5c:be:47:ca:d3:1e:69:6d:08:21:
a7:41:4d:61:85:d2:75:8e:bb:5a:eb:27:d5:4a:10:73:bd:38:
3b:56:47:25:93:ba:c6:24:86:3f:13:1c:78:c8:1f:14:4b:60:
d4:d7:02:8d:16:33:46:53:b7:f8:90:30:f9:1f:e1:c9:01:ef:
f9:3e:2f:ab:ad:7c:70:71:4a:a5:9b:63:9a:ad:3a:b7:77:d3:
6b:32:97:15:9e:d8:c3:4e:68:dc:7a:fc:b8:63:75:d6:0c:99:
79:5a:23:c2:88:60:a4:64:35:91:e3:6e:ff:90:ea:5e:55:fc:
9f:08:7e:a0:f4:e7:21:99:5f:9f:05:de:d7:b6:95:b5:2b:b4:
9c:67:0d:35:aa:1a:06:18:e4:65:ba:d4:4a:46:06:8e:68:bc:
57:90:7f:44:de:b1:5f:59:69:e6:cf:62:7a:7e:3b:59:0c:3e:
93:80:94:d8:a7:c2:56:23:1a:73:df:89:8f:72:98:98:74:31:
58:e6:d9:7c:74:f4:fe:2e:01:9b:fe:46:0f:2c:ca:8d:ce:91:
7d:f3:cc:37:90:6e:4e:6f:c0:57:69:78:1a:b1:35:0c:66:5a:
d4:ba:83:ee:49:6e:5b:2a:5a:55:1d:2b:08:68:6c:78:f9:eb:
cf:a4:32:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:58 2026 by rpki-client