Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143071.roa
File: AS143071.roa (raw, json)
Hash identifier: njdnBHHF+ADYKAHZlY16zAHp+m9NmUHHwaWvICeuG/c=
Subject key identifier: 0C:B1:1F:94:BD:F1:C8:AE:DB:33:A7:F3:4F:A2:DD:B3:03:BE:5D:F2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43456823A628D3435AE5174C3E4B40433299A34B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143071.roa
Signing time: Fri 22 May 2026 04:08:05 +0000
ROA not before: Fri 22 May 2026 04:03:05 +0000
ROA not after: Fri 21 May 2027 04:08:05 +0000
asID: 143071
IP address blocks: 240a:a1a5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:45:68:23:a6:28:d3:43:5a:e5:17:4c:3e:4b:40:43:32:99:a3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:05 2026 GMT
Not After : May 21 04:08:05 2027 GMT
Subject: CN=0CB11F94BDF1C8AEDB33A7F34FA2DDB303BE5DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:ae:47:c8:2e:b1:c8:41:fa:47:04:9f:be:
5a:83:de:0a:01:30:03:aa:d2:ce:02:59:8d:4a:1a:
46:a3:89:e7:b0:d8:7b:f9:3c:34:30:88:65:3e:2e:
5d:eb:1f:4b:7d:95:ec:28:58:14:9e:be:65:e1:b4:
b1:11:7f:68:83:19:b8:8a:93:d7:ef:e1:50:a6:d1:
be:db:3f:49:4d:9f:42:0a:b9:3d:55:9f:93:db:ef:
9d:fc:96:93:fb:66:b2:11:6a:ce:03:95:67:3a:74:
93:9c:23:46:8a:cc:57:cd:d0:6f:d5:b2:82:cb:64:
a8:bd:cc:54:61:30:c9:3c:03:be:e5:dc:83:8e:ed:
74:e4:5b:59:fe:f1:05:57:9a:ec:34:a1:eb:d0:af:
15:39:2b:a6:c1:3c:18:ab:01:aa:36:96:c3:dd:7d:
04:e2:89:26:94:6f:b1:d3:eb:f9:8e:b2:e1:0a:9d:
35:75:52:1d:8d:03:96:6e:9b:71:09:af:9e:fe:a3:
98:07:eb:01:ec:82:22:24:2d:a1:5a:4c:52:08:71:
b7:3d:17:04:1e:02:15:88:f4:98:64:9a:8d:1f:1b:
a9:13:58:40:24:07:e9:f0:b6:01:13:d7:a5:fa:37:
70:96:80:b2:47:79:ad:1f:39:7c:24:ad:0a:b9:45:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B1:1F:94:BD:F1:C8:AE:DB:33:A7:F3:4F:A2:DD:B3:03:BE:5D:F2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1a5::/32
Signature Algorithm: sha256WithRSAEncryption
a1:ee:9f:66:13:ce:b1:e1:aa:4e:8a:17:0e:67:18:39:e7:41:
b5:2b:b6:98:34:f8:59:1a:d4:12:60:7e:0a:dc:9d:85:6f:de:
49:b3:f0:ea:8d:d7:4d:f4:5b:2a:3f:47:be:28:38:4d:6c:72:
df:d9:81:7f:a3:c7:f6:5e:43:72:46:b5:0b:9a:a3:31:26:b4:
62:7e:d9:60:ef:91:b5:ce:3b:01:1a:9b:e1:3c:68:04:42:b5:
ef:a7:60:37:6e:f1:e7:e0:d5:b7:fb:0b:73:33:9f:9c:8a:7c:
df:ad:6b:05:4b:bc:b6:18:c3:e4:8c:d0:e9:2d:cc:4d:1e:b9:
3d:87:e8:cd:d8:96:24:61:5c:65:d9:3a:26:ea:dc:da:ed:6f:
38:88:84:8a:b0:ec:20:8a:e8:86:f6:e2:95:07:13:03:72:a4:
e1:d6:ea:db:8f:40:dc:21:c3:52:c1:10:cd:b8:fc:f7:67:b0:
5b:78:7c:77:34:ce:26:80:bc:0f:dc:47:ed:21:f9:42:7a:f1:
6e:b7:73:96:c6:33:76:12:53:36:ac:b6:cd:45:05:43:88:bd:
05:8a:6d:0f:44:7e:32:03:ef:f8:75:55:2a:8b:81:6a:5e:d8:
fd:a2:03:43:69:34:0e:f9:63:7d:c7:68:a2:80:58:4a:d6:6d:
48:52:5f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:42 2026 by rpki-client