Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143043.roa
File: AS143043.roa (raw, json)
Hash identifier: s/YuK8j7E2/HIBs1v1HfX3Pk6aVHknYk63bAxIrLa9A=
Subject key identifier: 7E:2A:15:EA:45:A7:4E:46:3F:8F:5F:A2:F6:E9:D6:C1:38:26:90:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 09F1BAEA859A7ACA4E547EE0B98E8D68692D8828
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143043.roa
Signing time: Mon 25 May 2026 02:22:44 +0000
ROA not before: Mon 25 May 2026 02:17:44 +0000
ROA not after: Mon 24 May 2027 02:22:44 +0000
asID: 143043
IP address blocks: 240a:a189::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f1:ba:ea:85:9a:7a:ca:4e:54:7e:e0:b9:8e:8d:68:69:2d:88:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:44 2026 GMT
Not After : May 24 02:22:44 2027 GMT
Subject: CN=7E2A15EA45A74E463F8F5FA2F6E9D6C138269085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:47:f1:51:dc:5d:68:6c:03:7b:cd:4d:9a:
85:87:41:d2:87:59:af:52:c2:9a:3c:b4:ca:70:10:
c2:76:35:b6:5f:d0:0a:0b:00:08:dd:8a:b2:95:d5:
92:e2:c0:41:ac:78:88:75:a6:f1:b4:f0:29:db:f7:
0a:de:67:48:32:c0:bd:94:8f:20:a7:49:ed:e1:e0:
eb:a1:cf:ab:cc:15:96:57:8e:47:64:bd:a6:c1:b5:
8e:7d:4d:77:ff:01:70:bf:12:5a:1e:e8:57:e5:17:
c0:28:14:89:4f:a5:e2:38:b7:c9:7b:c4:73:27:ad:
9e:50:c4:c6:0e:17:54:8b:55:84:a6:55:89:0b:7f:
4f:10:c5:90:ac:c3:25:a9:22:a4:35:0f:6f:dc:20:
32:de:67:f3:f8:a4:8c:e4:d7:b5:fd:15:63:f8:56:
6b:8a:36:cc:f3:ff:c6:ea:02:7b:10:37:6f:a3:98:
0d:ab:28:8b:f9:06:97:a3:64:9b:da:e0:4f:94:72:
78:a7:06:89:ef:e5:13:d7:cc:cf:a3:15:5e:b6:57:
90:08:15:70:be:a0:36:cf:48:0a:e8:7d:b4:34:9d:
26:38:fa:31:1b:e6:ca:cc:2d:21:16:75:70:c1:95:
39:d5:b5:1c:d8:22:3e:ab:09:d3:3a:5d:65:49:26:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2A:15:EA:45:A7:4E:46:3F:8F:5F:A2:F6:E9:D6:C1:38:26:90:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a189::/32
Signature Algorithm: sha256WithRSAEncryption
0a:c4:00:a3:de:da:4f:52:a8:76:45:82:13:e4:a3:3b:8c:0e:
ff:96:e9:f1:e6:65:26:33:e8:8f:35:9e:8b:64:40:89:6a:d9:
0d:0a:e4:de:85:be:b9:f1:c7:cf:90:9d:b4:67:c2:4c:50:0b:
6f:df:a7:72:dd:70:6e:07:98:58:ae:e4:ae:f2:74:f0:e7:93:
2a:13:0c:00:33:61:bf:e7:33:c7:45:c7:bc:de:f9:b6:d5:13:
e6:9d:20:f5:e5:d6:90:52:43:ff:35:0c:5e:54:90:9e:6b:6c:
f9:86:08:6b:21:2b:56:eb:71:4e:e6:f1:55:97:7e:94:61:c7:
8d:45:9a:b5:9e:48:9c:8b:48:31:bb:80:47:ba:c5:da:ed:ea:
01:a0:89:71:1f:56:67:2a:5b:3e:58:6c:f4:ec:5e:e6:b0:f3:
91:a8:77:38:9f:dd:53:ef:31:78:30:ac:0c:b9:5e:73:ec:ef:
72:a3:2b:88:2f:eb:3c:01:d0:63:c6:20:74:40:d0:48:38:f3:
14:e4:ee:cc:a3:69:e1:ea:2d:30:66:1d:b3:4d:70:c0:95:5f:
d8:f1:dd:ba:b8:57:55:8f:4e:6e:e1:08:e7:a3:ec:0a:1d:b8:
9e:4b:81:23:b3:de:49:57:e9:3f:40:31:a2:7b:21:06:64:eb:
b3:5a:0f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:52 2026 by rpki-client