Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143065.roa
File: AS143065.roa (raw, json)
Hash identifier: GZJrRd61gfoYxOmI9tXZxH4jIxqqmNXV4r/HRq+e8oo=
Subject key identifier: 9C:85:C9:B8:EA:40:80:9A:E1:E9:74:88:AF:1D:26:C3:55:AB:F2:8D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 30F2097560352BD9BAB69AF5A6B19961CDF4C8FA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143065.roa
Signing time: Tue 26 May 2026 01:13:14 +0000
ROA not before: Tue 26 May 2026 01:08:14 +0000
ROA not after: Tue 25 May 2027 01:13:14 +0000
asID: 143065
IP address blocks: 240a:a19f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f2:09:75:60:35:2b:d9:ba:b6:9a:f5:a6:b1:99:61:cd:f4:c8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:14 2026 GMT
Not After : May 25 01:13:14 2027 GMT
Subject: CN=9C85C9B8EA40809AE1E97488AF1D26C355ABF28D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e1:17:52:cf:cc:a4:40:24:a2:5f:0f:8b:41:
a1:da:d0:9f:ea:3a:d3:7b:3e:d9:60:e4:e9:ee:70:
53:b1:19:70:03:54:7c:b5:d7:e2:f7:71:ff:26:a6:
11:73:06:02:81:9d:20:97:35:ba:65:2c:c8:1a:13:
aa:dd:44:64:0f:88:98:c0:2b:a1:14:47:b3:f6:68:
81:12:e3:c2:10:d4:1a:31:df:39:6d:d1:1d:5b:27:
24:1e:b8:f2:c4:8a:86:84:39:6d:ec:42:97:84:74:
ea:23:f3:da:66:6c:e4:0b:dc:4b:f6:90:53:c6:e0:
ed:35:64:2d:fb:29:12:f0:bf:45:da:ca:89:15:a8:
4f:a6:84:fb:fb:a0:eb:62:21:1c:5f:a3:66:fd:00:
55:35:f0:02:9b:db:59:66:50:6c:84:6f:a6:0f:4a:
1b:ab:78:ea:90:fd:6a:3a:e7:11:10:44:29:08:89:
a3:8f:ef:30:e1:6e:5d:f4:9f:b4:91:c6:be:1b:86:
85:f6:08:4b:0f:89:6c:99:04:a6:f1:86:80:1e:64:
f5:56:4d:c9:4f:64:23:e4:f4:1b:a7:19:b3:a9:38:
89:19:04:d3:1f:be:3d:d6:eb:0b:14:c3:bb:7a:8e:
6a:99:82:02:c7:37:8c:2d:cc:55:58:2a:14:46:08:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:85:C9:B8:EA:40:80:9A:E1:E9:74:88:AF:1D:26:C3:55:AB:F2:8D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a19f::/32
Signature Algorithm: sha256WithRSAEncryption
85:4d:80:04:f8:fc:10:03:44:70:3d:d0:58:2e:1b:95:e9:5c:
85:30:cf:0d:96:d9:7a:53:3e:c0:06:6d:33:4c:94:cc:67:41:
50:a1:fa:95:a9:fa:1b:91:87:b1:cf:39:8f:6c:24:72:9a:c6:
71:65:4c:02:1e:4a:42:07:7d:e5:fc:dd:7b:b6:2d:65:a3:4f:
fa:6a:d2:16:1f:a2:33:c8:99:e4:3b:8d:1a:1c:72:61:ef:be:
30:89:86:41:54:f5:cd:28:6f:34:6f:e2:e4:1b:4f:a1:b5:7e:
81:f5:d7:cd:9d:01:a6:6e:1b:45:a4:0b:5f:a2:df:82:10:e5:
c8:1f:f2:54:73:de:36:f7:4c:13:20:20:b7:62:41:a2:a9:01:
e5:6a:75:4b:2d:e5:a5:a0:b1:f7:3e:ee:61:0d:f8:0b:63:ea:
14:58:49:52:9e:9e:aa:3c:d3:0e:25:22:f4:2f:fc:d1:e9:69:
8a:c8:70:33:26:ec:60:1a:92:8c:93:fa:eb:26:a5:75:b8:71:
4e:5d:b7:1d:1e:87:b7:97:28:a8:b8:52:f1:c5:0f:09:c9:72:
ab:c4:3d:77:0b:b7:a0:c6:63:e6:a1:eb:87:8f:3c:1d:98:c3:
0b:46:3e:ce:52:b7:2f:5f:fe:f8:f2:2a:20:05:1f:da:08:ce:
a9:88:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:22 2026 by rpki-client