Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143068.roa
File: AS143068.roa (raw, json)
Hash identifier: AIjjjArJ5FWZc5FoKDWBIRX2UYtMITPZuzAk39UwAXU=
Subject key identifier: 94:2B:49:92:42:79:CB:65:91:CB:8A:AA:D9:40:89:87:85:6D:00:5A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0AC18B285066D0A7FA9DDA930E183768E83701F7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143068.roa
Signing time: Mon 25 May 2026 01:20:27 +0000
ROA not before: Mon 25 May 2026 01:15:27 +0000
ROA not after: Mon 24 May 2027 01:20:27 +0000
asID: 143068
IP address blocks: 240a:a1a2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:c1:8b:28:50:66:d0:a7:fa:9d:da:93:0e:18:37:68:e8:37:01:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:27 2026 GMT
Not After : May 24 01:20:27 2027 GMT
Subject: CN=942B49924279CB6591CB8AAAD9408987856D005A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:74:7f:d8:74:5f:91:09:6a:8c:b3:8c:6d:8e:
cd:4e:f0:43:07:4b:b2:24:fe:9e:76:5d:38:42:d8:
f5:34:94:1f:a8:40:de:08:c2:68:09:4b:81:e9:60:
48:4a:02:48:78:8a:de:7e:df:bf:b2:cd:68:0d:1b:
8d:eb:31:ae:22:98:21:d2:55:b6:73:97:74:dc:b7:
46:a0:ca:c0:f3:a4:ff:63:cb:f2:a9:f4:a1:90:0f:
4b:f7:39:b4:f1:f5:4c:63:00:2c:ab:fb:1e:6f:e5:
4e:c2:c3:f0:80:3c:d3:26:d8:ee:fc:5e:49:96:fa:
1d:ca:6c:31:0e:2b:08:b2:db:88:37:22:0a:30:38:
68:c2:17:84:ad:d8:51:36:20:fc:39:98:c7:d6:a6:
7b:fb:d5:15:19:de:a0:60:5b:1d:b4:53:5e:99:73:
62:8a:1f:96:83:fb:8c:1d:8a:0c:b2:53:f4:74:51:
7f:c3:cb:ed:64:38:a5:60:3e:9d:6c:0f:69:9c:19:
3b:9a:e2:15:c4:33:5f:0a:27:d6:59:c0:1f:ce:e8:
33:3a:a9:ee:a9:6a:5f:36:52:dd:0b:9e:c3:12:90:
c4:e9:20:bb:e8:c4:ba:d6:7d:40:8f:6e:e4:bf:39:
5f:94:cc:7a:ab:1f:b8:95:d8:d2:a6:4f:7d:2e:94:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2B:49:92:42:79:CB:65:91:CB:8A:AA:D9:40:89:87:85:6D:00:5A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1a2::/32
Signature Algorithm: sha256WithRSAEncryption
73:4d:b3:f8:ed:cc:3f:39:bf:26:e2:c0:3c:c6:30:23:1a:b2:
a9:a0:9c:c2:7a:eb:6d:6e:f3:dc:9a:3c:5e:87:9a:e3:80:e3:
c6:11:ea:6e:d0:9e:6e:e8:44:b8:e8:d3:07:ad:cf:e0:6c:97:
55:90:ca:75:78:99:80:07:12:1f:ba:35:44:9c:3b:8e:7f:b4:
af:b8:45:45:aa:32:c4:16:77:b0:e8:cf:81:ff:00:ea:6a:93:
bb:d3:11:ae:23:6d:30:26:ce:13:c4:ac:65:68:26:9e:f6:bb:
5e:ce:65:2b:27:bf:ec:12:36:ec:0e:bc:59:a8:2d:eb:7d:e2:
23:5c:d5:38:8f:b4:e8:48:42:44:19:07:12:7d:72:35:d6:77:
3e:f7:cb:c1:7e:23:9f:2c:5c:94:9d:b7:f6:bc:36:db:a0:3f:
06:bd:22:87:73:66:40:a9:82:75:0d:29:d7:98:f5:fc:bb:b3:
2f:b1:c6:9a:5b:7e:fe:5b:aa:5d:b5:11:81:99:15:f0:c0:49:
03:fb:11:bb:39:88:8f:53:50:56:05:e2:0a:4d:e6:a1:4e:e1:
bb:dd:73:28:b3:89:d4:53:16:92:71:b7:4e:61:46:7c:25:f1:
7b:23:d3:8c:21:61:eb:38:14:33:6a:f1:e8:40:f9:f7:07:86:
42:98:4f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:01 2026 by rpki-client