Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143073.roa
File: AS143073.roa (raw, json)
Hash identifier: luQeagA+j0McsDNE7OPUeKpdIlg/bikcALP2LTlVuV8=
Subject key identifier: 56:71:15:DE:93:C0:27:87:3F:22:AB:11:1D:AA:67:6C:51:35:06:A0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 50E99E2AD00807F3582A72A6B1D7F05E23313EDF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143073.roa
Signing time: Fri 22 May 2026 02:47:55 +0000
ROA not before: Fri 22 May 2026 02:42:55 +0000
ROA not after: Fri 21 May 2027 02:47:55 +0000
asID: 143073
IP address blocks: 240a:a1a7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e9:9e:2a:d0:08:07:f3:58:2a:72:a6:b1:d7:f0:5e:23:31:3e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:55 2026 GMT
Not After : May 21 02:47:55 2027 GMT
Subject: CN=567115DE93C027873F22AB111DAA676C513506A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:02:b0:52:6a:8f:70:97:54:c1:a3:f9:b3:
b4:8e:97:8d:de:3f:17:39:ab:cd:cf:f5:d2:b0:9f:
35:ca:c0:d9:aa:ab:4b:59:f8:c9:be:a0:ad:79:76:
b7:98:72:24:79:ba:8a:fa:d2:9d:7b:9f:1a:a3:01:
f5:71:40:ba:3f:ca:ff:fb:10:cf:7f:d4:e0:8a:a4:
57:ec:70:d2:6a:71:20:54:68:da:eb:64:57:5f:a1:
f0:cb:e3:a9:f9:20:97:f9:20:2f:9c:d7:36:3e:c9:
88:94:9c:3e:00:c0:63:b8:a2:9c:c0:9f:04:20:1b:
a6:3a:b0:9f:12:2c:18:98:e6:83:27:5b:49:a8:d4:
d7:3f:25:39:7f:ce:aa:3f:26:09:d3:ce:6f:16:f5:
af:5a:51:92:dc:8c:de:c8:8f:3e:ab:e0:f3:a0:c4:
b0:e2:3a:24:cd:c3:4a:d8:6e:ed:9d:21:ef:8a:19:
7c:9e:d1:c2:e3:12:29:3e:98:b3:d1:ac:0a:7c:a5:
b3:93:ab:a1:c9:69:2c:10:c1:e1:81:9e:09:5a:17:
8f:33:06:bd:51:46:5b:73:71:9c:fc:02:3b:bd:14:
97:b9:f6:2e:a0:0d:c9:4f:c4:5d:88:d3:64:f8:70:
40:04:16:e5:2a:fd:e7:96:5d:40:24:ec:03:83:8e:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:71:15:DE:93:C0:27:87:3F:22:AB:11:1D:AA:67:6C:51:35:06:A0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1a7::/32
Signature Algorithm: sha256WithRSAEncryption
9a:90:57:af:84:c1:a9:73:b0:53:47:34:e4:d3:16:5d:65:b0:
7e:f3:1a:37:d7:27:15:84:6f:68:9e:d3:b8:d6:76:92:af:06:
b2:fb:29:e7:ea:d3:36:d9:8c:be:ad:7e:51:37:2a:47:26:85:
9c:e7:af:5b:3c:e6:f9:a3:e5:40:f5:17:86:1e:2c:9a:59:fa:
ed:4d:ef:2c:6c:16:2d:a7:ed:b5:30:eb:2a:03:e8:92:22:c3:
6b:8e:37:20:85:dd:ee:0a:35:54:ee:e5:b2:7d:09:14:0d:5d:
6f:49:fa:d9:2e:80:b1:33:dc:c4:79:97:69:b8:94:94:b8:97:
b4:af:d0:af:49:29:2d:7c:8e:3d:d9:26:5a:54:a7:cd:8e:74:
48:c9:02:cf:78:68:a1:c0:7d:1c:22:f1:c1:87:38:64:e2:88:
bf:db:0b:58:35:b3:ff:07:08:d8:cc:35:7a:12:a5:4a:ac:25:
3c:f1:bd:ae:f9:c2:8b:bc:8e:76:cd:c1:96:f9:71:45:c6:40:
59:27:41:88:33:e9:06:69:cd:b0:11:ed:3c:14:de:25:92:5b:
fd:44:ed:ac:41:d1:45:a9:54:33:c8:84:4e:a5:d6:7d:e8:d7:
ba:57:c2:ac:15:50:a8:e8:61:90:e9:53:9b:ec:87:79:d7:09:
96:d5:09:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:19 2026 by rpki-client