Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143044.roa
File: AS143044.roa (raw, json)
Hash identifier: 8s9rvhSFyR5BFsVRPkrbgMQIvtH1CJu1tzxelt2Ka2I=
Subject key identifier: B4:7F:8F:E8:DC:5E:75:75:61:29:E6:BC:A6:39:EA:00:7B:81:E1:40
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43C6FDEE0ABD73A22DEA8F8786C22B609E65679C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143044.roa
Signing time: Fri 22 May 2026 01:50:39 +0000
ROA not before: Fri 22 May 2026 01:45:39 +0000
ROA not after: Fri 21 May 2027 01:50:39 +0000
asID: 143044
IP address blocks: 240a:a18a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c6:fd:ee:0a:bd:73:a2:2d:ea:8f:87:86:c2:2b:60:9e:65:67:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:39 2026 GMT
Not After : May 21 01:50:39 2027 GMT
Subject: CN=B47F8FE8DC5E75756129E6BCA639EA007B81E140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:f8:97:6c:12:81:37:ee:2f:20:21:f5:13:
fa:8a:52:22:82:14:da:9f:25:90:a0:0a:88:bc:8e:
e5:31:11:35:4f:a3:30:04:d2:a9:eb:ab:10:35:bb:
fb:46:00:de:14:6e:38:65:18:99:3c:c5:c9:5d:b1:
52:6a:8c:f0:75:37:9f:df:41:2f:89:fa:d0:4f:91:
d7:a7:bf:00:21:06:89:41:c9:b4:63:03:3e:94:d6:
2d:4f:6d:1c:ca:57:60:3b:81:ac:b1:4f:f8:e2:0e:
69:99:09:09:25:6d:d3:b8:9a:a8:b3:79:2a:8e:c0:
09:79:9f:a5:e0:2e:a1:d1:40:22:81:df:ad:b9:cc:
77:ce:c9:91:fa:64:58:1c:a3:ab:62:63:c2:80:cc:
aa:ad:94:e2:eb:c7:0f:ee:a2:e0:99:37:c8:a6:c4:
f7:f6:31:90:a8:0d:32:9b:a4:5f:98:b0:59:40:10:
ec:77:19:c1:01:cb:e5:29:02:dc:fa:54:72:b8:39:
95:1b:19:ed:a9:84:d6:cc:bd:d1:48:c0:d8:51:74:
c5:7f:ee:8d:20:29:27:ab:da:5f:52:d3:e0:0e:da:
9f:73:71:a1:8f:62:1a:f6:88:8d:50:b8:f9:43:5e:
63:4f:be:17:4a:c1:d9:9f:68:c8:9c:0e:6f:43:ef:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7F:8F:E8:DC:5E:75:75:61:29:E6:BC:A6:39:EA:00:7B:81:E1:40
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143044.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a18a::/32
Signature Algorithm: sha256WithRSAEncryption
97:ac:84:e5:01:21:22:93:6f:1f:f7:d6:96:42:13:e3:bf:d8:
66:58:9a:ae:a3:bd:9f:29:21:3a:ac:71:8e:58:d8:2e:45:ca:
c3:35:89:38:85:ae:8e:e6:7f:f5:cc:ce:46:b6:02:3c:b8:64:
af:50:d8:ac:5d:82:04:40:d5:6b:78:4f:f8:a0:f8:63:62:8d:
82:73:3d:79:24:48:f8:de:e4:f0:cb:7b:59:82:27:cc:28:52:
fb:28:7f:5b:0f:ea:49:4a:e9:d6:ff:cc:16:5e:c5:ed:01:4a:
d9:b2:2f:24:94:e6:28:47:11:d4:60:5c:a7:30:6a:2c:c0:25:
42:49:57:19:5c:60:51:a2:c8:0b:26:66:3b:06:5b:54:b9:2a:
5c:1e:4e:a0:c8:8a:52:21:07:98:32:b0:8c:91:34:b8:19:ec:
5a:43:6d:86:87:4e:4f:02:f3:f5:6c:7b:c5:ce:93:6b:30:13:
9d:e0:71:ea:72:f7:7d:4f:9e:33:ac:75:a1:07:0c:c3:dd:2c:
e9:70:65:0f:8a:8b:d4:e3:f3:97:fa:7f:57:b3:b1:08:4e:bd:
e6:e2:d0:e3:3c:c4:9e:1b:b2:ff:05:51:2f:1d:2e:1e:64:7e:
26:f9:8b:1b:4a:64:3a:8e:d4:9e:07:15:7e:95:c7:f8:f2:04:
83:7f:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:49 2026 by rpki-client