Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143048.roa
File: AS143048.roa (raw, json)
Hash identifier: l+r2Uz5/mkLWxWWvSzgH2YG3xrzlXLQq2L7+0d0eT84=
Subject key identifier: 72:F9:A2:18:80:28:7B:53:AA:03:2D:32:10:2A:C2:E2:C6:E5:A6:34
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1AA715CBE0948CD027640ED2983EB37347970E2A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143048.roa
Signing time: Mon 25 May 2026 01:38:12 +0000
ROA not before: Mon 25 May 2026 01:33:12 +0000
ROA not after: Mon 24 May 2027 01:38:12 +0000
asID: 143048
IP address blocks: 240a:a18e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a7:15:cb:e0:94:8c:d0:27:64:0e:d2:98:3e:b3:73:47:97:0e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:12 2026 GMT
Not After : May 24 01:38:12 2027 GMT
Subject: CN=72F9A21880287B53AA032D32102AC2E2C6E5A634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:15:00:73:e8:a3:34:02:2d:85:f5:88:bd:af:
eb:8f:df:de:b0:79:af:f1:8f:27:bf:d7:d3:dc:d0:
2c:d8:92:c4:a0:65:f8:34:3f:ae:af:b4:ca:2a:54:
67:d9:15:fb:a8:d3:92:53:33:f4:2c:a4:66:80:03:
c4:2e:ec:27:a2:b2:1d:82:8d:05:92:1c:4a:cc:9d:
8a:91:b3:e5:de:50:11:a2:63:96:3a:f9:5f:73:a9:
e0:52:c3:18:07:4c:32:55:e5:81:2b:57:7b:e3:57:
25:4f:a7:37:60:cf:4a:e9:e2:69:26:87:bb:af:7d:
42:df:ad:ba:42:ab:c7:c2:08:2b:42:d8:3f:8b:4c:
2a:17:1b:b9:d6:05:95:3e:76:19:ba:57:65:4c:2f:
36:7a:22:65:5a:3a:2c:3f:25:04:50:bb:e5:cf:5c:
f4:06:5a:a5:37:37:09:38:b8:24:0e:36:ab:ab:4f:
31:6e:79:25:cd:40:99:74:13:79:71:d4:04:05:cb:
3d:27:3b:75:38:1c:d4:77:e5:05:14:34:93:fb:24:
af:48:d5:61:37:0f:96:71:a6:c2:d6:80:8b:ea:6a:
58:e5:be:40:6e:06:05:c7:5f:ca:9e:75:09:06:98:
a0:c9:9b:4d:94:74:93:bd:4f:e5:bb:84:50:1c:c6:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F9:A2:18:80:28:7B:53:AA:03:2D:32:10:2A:C2:E2:C6:E5:A6:34
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a18e::/32
Signature Algorithm: sha256WithRSAEncryption
12:b6:f5:42:0a:a6:49:52:16:7e:64:9f:96:d1:11:47:36:4c:
65:75:d4:74:d4:e7:9c:6e:35:cc:8a:2c:f2:53:cb:b9:6c:6e:
46:6d:95:13:d0:d5:82:09:7b:b4:1c:f1:bc:bc:37:6a:09:0d:
61:17:43:78:b6:5c:07:8b:82:cb:b2:64:62:ce:e2:05:12:3f:
ea:0c:a4:8b:2e:73:1f:3a:a8:ed:64:6a:ca:ee:00:04:37:a9:
76:6a:8d:6c:89:c8:ea:42:26:d2:92:e5:d7:aa:2b:4e:80:1b:
04:16:8e:83:d0:b0:3c:e5:24:19:ae:c8:df:d7:3f:58:a3:a4:
72:7d:bc:fe:23:9c:4a:c9:4f:1a:33:45:97:8f:11:c4:d6:c4:
52:83:df:e6:2c:0c:61:f6:f3:3a:bc:bb:b4:46:46:0d:45:46:
9e:69:0d:b8:d0:b9:1f:0e:f8:ad:07:e2:ac:af:05:70:0b:d9:
00:c8:81:ea:9d:27:0c:9b:dd:33:86:29:05:6a:22:f2:6d:0d:
4c:09:54:f0:e5:19:0e:4a:11:1f:b6:15:3d:2d:9d:68:43:06:
72:80:8b:68:33:cb:c9:00:28:68:33:8c:c0:23:25:a0:f3:0b:
1b:cc:04:25:bc:14:d8:5a:43:c4:a6:c4:d9:c2:9e:32:fd:d1:
cb:8c:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:44 2026 by rpki-client