Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143064.roa
File: AS143064.roa (raw, json)
Hash identifier: WsnEghHD8kBmmKW9KlJwHmBWll4YxJWabnO5gsUFabU=
Subject key identifier: F3:E9:8A:C2:79:6E:F8:80:0E:28:D7:89:2F:37:88:B5:AF:C9:06:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 44FE60FFD33EFA0ED28D0F4715E37A7FA30E1EEE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143064.roa
Signing time: Mon 25 May 2026 01:38:20 +0000
ROA not before: Mon 25 May 2026 01:33:20 +0000
ROA not after: Mon 24 May 2027 01:38:20 +0000
asID: 143064
IP address blocks: 240a:a19e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:fe:60:ff:d3:3e:fa:0e:d2:8d:0f:47:15:e3:7a:7f:a3:0e:1e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:20 2026 GMT
Not After : May 24 01:38:20 2027 GMT
Subject: CN=F3E98AC2796EF8800E28D7892F3788B5AFC90683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:53:ae:89:b8:62:ec:80:d4:08:d2:4c:f1:
31:5b:39:e8:cf:05:d8:96:8a:65:da:93:29:fc:43:
bf:3f:f4:b2:39:4a:32:0c:b2:27:5f:69:79:03:3d:
80:56:8e:84:7f:1b:b4:3f:35:dd:a3:38:f5:6e:65:
da:48:31:ee:4e:fc:1d:91:2d:b3:9b:fe:69:39:23:
66:f4:84:55:e0:01:62:88:fe:7b:fa:ca:6c:18:e5:
0c:88:d1:b7:f0:3e:5f:32:aa:78:09:b0:bd:51:b6:
e4:32:14:18:61:c4:57:9a:24:85:26:7a:c9:3b:14:
48:d0:17:b9:a6:68:a3:61:12:8d:9f:79:41:be:13:
93:1a:ed:59:2b:40:62:2c:9a:c8:39:95:f2:3e:c2:
56:0e:c6:08:b1:1b:4d:f1:17:ba:f7:41:19:3d:1e:
70:e7:10:75:63:1f:48:aa:2e:24:d6:f0:50:6b:c0:
ea:5c:78:9f:9a:e9:17:d0:56:6a:4e:80:f3:01:26:
8e:6f:ba:76:f7:a8:e8:bd:6d:dc:2d:cc:a7:5e:78:
b9:d7:34:69:8b:72:78:23:55:ea:9e:60:34:f5:42:
2e:29:93:d5:df:9e:80:66:dd:e1:2f:26:ef:5e:d0:
ad:3a:d3:06:72:5f:2d:de:30:b1:af:3a:db:bf:4d:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E9:8A:C2:79:6E:F8:80:0E:28:D7:89:2F:37:88:B5:AF:C9:06:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143064.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a19e::/32
Signature Algorithm: sha256WithRSAEncryption
56:c5:75:9e:84:f8:c0:fd:04:98:d8:ec:6c:09:2f:ff:f4:50:
86:dd:2a:9b:cb:14:e4:ae:23:f2:55:e5:8e:47:87:97:c4:96:
a7:a5:f6:ae:b8:35:9c:5e:1b:7e:6b:9a:4d:48:30:eb:f9:c1:
3f:79:55:df:92:68:3e:49:91:16:67:08:bf:26:ca:b7:1f:5c:
c4:39:8b:37:b1:dc:33:5e:c8:95:ea:0e:b3:1f:55:02:04:fd:
75:f9:83:05:59:3b:d2:79:6d:b3:bf:48:20:42:bf:bc:a1:dd:
d0:e0:50:c3:c2:e2:ab:30:2d:e9:41:5b:0c:77:76:3b:6b:ac:
26:15:c0:62:80:5d:87:a2:77:17:a7:8e:8e:65:7e:97:76:eb:
50:64:4e:c9:9c:f9:7d:c8:59:c6:81:f3:b8:a0:58:85:c8:ea:
c0:19:2e:38:c3:2b:38:b3:d8:62:89:e2:26:3b:58:3e:39:ba:
3c:c3:ee:27:90:dd:e0:72:24:2a:e5:de:0b:4b:a9:9f:16:fb:
1f:32:3d:00:78:f6:c5:d6:ed:ec:78:3c:17:ef:d1:05:5b:1e:
12:9b:5c:f5:23:44:bf:15:dc:48:b0:ce:12:e2:88:c8:f7:30:
01:e6:6c:46:b0:3f:3f:db:3b:1b:2e:d0:46:bf:c9:70:e0:9d:
c0:82:31:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:56 2026 by rpki-client