Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143051.roa
File: AS143051.roa (raw, json)
Hash identifier: Dd4mXZKrlxaE9g/YN/zCgF7Kf5Fnq17oeP1Mjwb9EOc=
Subject key identifier: 24:2B:D5:EA:F6:CC:16:3E:C1:CE:A0:26:A6:6C:04:2A:2A:87:22:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 285A1D1CCD31CE87509239DB9C9FF6D2F222C5C0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143051.roa
Signing time: Mon 25 May 2026 06:49:06 +0000
ROA not before: Mon 25 May 2026 06:44:06 +0000
ROA not after: Mon 24 May 2027 06:49:06 +0000
asID: 143051
IP address blocks: 240a:a191::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:5a:1d:1c:cd:31:ce:87:50:92:39:db:9c:9f:f6:d2:f2:22:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:06 2026 GMT
Not After : May 24 06:49:06 2027 GMT
Subject: CN=242BD5EAF6CC163EC1CEA026A66C042A2A8722E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:b3:60:ec:df:3c:64:43:f8:78:8e:59:da:
79:70:6a:a5:a7:a8:7f:bd:71:c7:35:ce:1e:5a:ce:
bf:f7:51:ba:a3:02:0a:24:ba:84:55:3b:3d:f2:35:
2a:6d:7f:56:18:fc:22:23:18:a9:77:db:9f:1d:e7:
e0:38:8d:65:0c:3d:ea:23:ea:f5:8b:76:0b:80:cc:
28:4f:51:9b:c7:ca:d2:4a:5e:fb:4a:e8:8c:64:3f:
0a:71:df:0d:85:49:83:c9:e6:da:64:52:4b:31:8a:
28:01:36:ae:20:17:90:96:ee:f6:2d:9d:8f:d5:6c:
e3:c0:25:b8:3d:cc:d8:e8:08:6e:f0:33:27:a5:94:
4e:e3:c9:0c:43:4d:8d:58:55:d8:39:f1:04:06:a2:
45:b3:c0:fb:94:e6:f3:e8:3d:3a:a8:ef:2c:e6:b7:
90:30:4a:d2:c3:f0:5a:80:4f:3c:17:5b:bf:4e:42:
14:64:62:fa:69:54:94:a7:d0:0d:08:85:7b:f7:0d:
4d:dc:51:f6:42:48:5b:91:6d:00:79:46:01:f2:37:
85:19:ac:3a:14:31:43:ee:1a:60:a0:c5:4e:06:b6:
11:3a:fc:3a:0a:ab:61:02:4f:2e:f2:1f:a1:50:c0:
90:32:95:61:94:12:6e:cd:ea:9b:b8:86:52:96:c4:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:D5:EA:F6:CC:16:3E:C1:CE:A0:26:A6:6C:04:2A:2A:87:22:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143051.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a191::/32
Signature Algorithm: sha256WithRSAEncryption
49:44:cb:c8:50:e0:55:f7:5e:9f:7c:64:7a:03:5a:61:8a:5b:
6a:9c:21:d2:bf:3e:94:c8:ac:09:2b:62:d0:2e:12:25:0e:b1:
7a:da:c4:12:91:ce:79:ef:76:8b:00:8c:db:a3:7c:99:4f:b7:
0d:86:27:1b:34:5f:2d:d4:37:1a:37:46:14:a3:78:18:ab:e1:
17:fb:f8:51:55:d3:21:c9:37:06:ef:12:81:1e:ee:71:81:72:
5a:76:95:03:e0:12:71:6e:cc:57:a7:16:5d:21:99:e6:5a:bd:
6e:d2:b4:9c:6f:91:50:cd:d8:66:ad:fa:e7:fe:3f:7b:24:0e:
25:59:54:00:6a:a7:24:4c:35:16:b7:15:59:b9:f7:75:af:2e:
62:2f:63:7e:48:04:ad:5a:d7:9a:dc:cd:d3:31:bb:29:ad:a5:
eb:a6:4c:f5:1b:17:05:e1:4c:5f:f8:94:5e:12:e4:4d:b2:21:
63:5b:c0:22:40:0f:f6:d7:78:d7:df:34:21:34:d0:d3:5d:9f:
a2:e4:51:93:0e:3b:1d:9c:b7:d4:63:ca:e0:e9:ab:1a:00:f3:
25:5a:17:94:df:3c:24:7c:21:d9:1f:a1:9a:6f:52:78:15:ff:
7f:21:de:0e:33:3f:a8:6e:50:5a:ff:01:d4:bb:8a:76:d3:45:
d1:3e:e5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:24 2026 by rpki-client