Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143056.roa
File: AS143056.roa (raw, json)
Hash identifier: QJhzATxLmtqq2+E9Wf1yQhPBYht2nFLrCMkz6887X4g=
Subject key identifier: 37:DF:34:C8:8B:EB:EB:80:DD:C9:8A:D5:47:1F:8F:C2:C4:64:4A:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6AC48D4AB76F579EF6D5F732B9473840FDB86CD6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143056.roa
Signing time: Mon 25 May 2026 01:38:10 +0000
ROA not before: Mon 25 May 2026 01:33:10 +0000
ROA not after: Mon 24 May 2027 01:38:10 +0000
asID: 143056
IP address blocks: 240a:a196::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c4:8d:4a:b7:6f:57:9e:f6:d5:f7:32:b9:47:38:40:fd:b8:6c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:10 2026 GMT
Not After : May 24 01:38:10 2027 GMT
Subject: CN=37DF34C88BEBEB80DDC98AD5471F8FC2C4644A8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:24:f0:80:c8:94:96:bc:31:69:0d:d5:5c:3c:
f7:1e:32:47:fa:70:a1:b8:c8:c9:a6:7b:25:e4:74:
32:6f:c7:0a:84:4a:ef:b6:35:2e:b3:c4:a2:66:86:
3e:8d:5f:3b:a2:46:62:7c:47:3c:6c:68:43:55:d8:
e9:62:23:c7:a2:4b:5c:e3:b6:16:7f:0f:cb:88:d2:
c6:fe:1a:4f:35:ad:1b:10:57:b9:f4:a3:03:23:21:
52:32:df:e6:28:e0:2f:66:34:ee:57:76:fa:05:36:
da:c0:04:46:ec:3d:ad:e6:bd:bd:10:03:1c:a4:fa:
6e:94:78:2f:44:75:06:a4:e8:b7:74:82:e8:15:0d:
4b:55:a7:22:ea:ac:4c:82:82:af:93:c8:80:d0:45:
64:b7:4e:a0:54:32:13:d6:94:92:55:4e:0b:67:b8:
c9:cd:97:e3:f8:e0:03:37:02:be:62:66:2c:6c:d6:
30:c8:cd:6b:f2:2e:59:6d:65:bc:d0:29:78:e1:93:
6f:b3:78:4f:72:0d:5f:1f:0d:a0:d4:c9:3b:92:41:
65:d0:6b:5a:d2:d7:13:2f:15:dc:c8:b4:db:6d:57:
2a:ee:d2:f8:25:c1:f0:e6:1d:23:cb:d2:56:62:ae:
3d:f0:a8:03:33:cd:20:5a:f8:98:01:4f:cd:60:fa:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DF:34:C8:8B:EB:EB:80:DD:C9:8A:D5:47:1F:8F:C2:C4:64:4A:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143056.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a196::/32
Signature Algorithm: sha256WithRSAEncryption
9f:3f:1f:f6:28:57:86:c8:d5:52:52:37:01:d6:1a:21:24:c1:
5d:23:22:fa:74:2f:b8:a8:6e:85:f1:5c:bf:21:e0:2c:64:5a:
25:ce:40:46:6e:17:c5:29:09:b6:91:71:19:96:24:bb:b3:aa:
b8:92:79:2d:71:92:5a:a7:b2:cd:fc:9e:1d:0a:bf:fa:38:b2:
b5:69:cc:c2:97:6f:68:a0:79:3c:ca:ea:7a:c7:61:5e:73:4e:
7c:6f:15:09:83:a3:5e:ec:03:3f:75:58:47:2d:b4:71:80:55:
db:79:b7:3d:1d:a6:71:b0:15:61:29:1c:4c:55:97:fd:5c:99:
5d:8f:63:40:98:82:e9:63:d0:f7:00:c4:73:48:fc:b8:ae:a2:
6b:5d:0a:95:7e:29:55:d2:be:67:c9:7b:bb:0c:bf:b1:d8:73:
e8:e2:62:6c:be:42:d9:d1:99:eb:19:97:09:0b:fb:97:57:e7:
5e:44:27:8a:20:c4:3d:d1:7e:43:67:27:3e:61:81:b9:56:42:
58:82:de:21:19:ce:d4:95:ce:4c:f1:72:64:ad:da:89:18:e9:
6b:36:05:67:ff:4d:de:4b:17:81:24:cb:93:34:4f:37:58:5c:
c6:8d:fe:8b:a0:94:8a:a5:8b:28:bf:3f:79:e7:ef:b6:f5:52:
55:09:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:46 2026 by rpki-client