Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143075.roa
File: AS143075.roa (raw, json)
Hash identifier: jjwHcxyecta9L5jZpevyJR/qQMHkv7RyuifbGkv1f0U=
Subject key identifier: 08:EA:7B:D1:EE:DC:03:5F:2C:0B:7C:05:CB:0A:5D:4D:90:AC:C6:F3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6F05AA8C5C5734FA2EA92B35CADC42131DD96D85
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143075.roa
Signing time: Fri 22 May 2026 07:09:19 +0000
ROA not before: Fri 22 May 2026 07:04:19 +0000
ROA not after: Fri 21 May 2027 07:09:19 +0000
asID: 143075
IP address blocks: 240a:a1a9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:05:aa:8c:5c:57:34:fa:2e:a9:2b:35:ca:dc:42:13:1d:d9:6d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:19 2026 GMT
Not After : May 21 07:09:19 2027 GMT
Subject: CN=08EA7BD1EEDC035F2C0B7C05CB0A5D4D90ACC6F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ab:e4:79:53:60:06:60:90:c9:de:33:9c:af:
fc:8e:06:3f:c4:f5:19:3d:2b:e2:77:ac:35:17:9e:
77:b1:9d:d0:35:92:f6:a7:2b:9e:44:ee:b9:1e:76:
a1:b9:cc:41:b0:05:e1:d9:8c:81:0d:14:fe:94:89:
52:15:3a:ec:fa:d1:0c:14:19:49:77:2b:4d:9f:e5:
8b:ca:cd:af:4a:44:da:2f:29:01:3e:23:67:4f:be:
aa:5e:47:9d:32:1e:f0:25:19:03:96:28:d9:4f:5a:
6b:21:bc:bd:1f:43:07:e8:4d:6c:85:ba:71:3d:4d:
7a:ed:76:e1:47:9f:a2:bc:44:94:1a:d3:14:29:f3:
f8:13:f6:ca:39:4c:fd:01:b4:0e:2e:e7:27:e7:02:
cd:76:f8:2e:60:db:6c:10:51:cd:9e:16:cd:6b:78:
39:91:80:dc:b2:2f:05:d3:c9:50:b5:b3:ed:fc:d7:
59:e3:cb:82:af:5b:cc:5e:ec:a9:7f:ba:32:78:f8:
46:47:dc:2b:40:d7:7a:37:35:c6:ad:7d:2e:fb:d3:
60:15:6e:de:d8:e0:45:5a:24:9f:78:5a:a3:c3:d7:
0a:18:2b:47:a0:e0:54:b9:0c:f8:26:df:8c:4f:b8:
31:17:7b:e4:04:6a:83:6a:e0:ca:a4:12:55:46:9b:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EA:7B:D1:EE:DC:03:5F:2C:0B:7C:05:CB:0A:5D:4D:90:AC:C6:F3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1a9::/32
Signature Algorithm: sha256WithRSAEncryption
35:3d:fb:d3:20:76:84:0d:61:77:a3:11:4f:bc:04:b8:f5:15:
76:b5:cc:01:d8:5f:9b:af:b3:ee:8c:57:0e:c9:6b:fd:67:b5:
49:39:2b:6b:52:25:e8:ed:47:59:c4:c1:d5:0a:69:40:85:19:
e8:01:b4:d1:5f:cc:53:8b:4f:b4:fd:d5:55:ff:15:17:9b:bf:
7d:aa:d4:41:3e:19:a4:0e:12:06:c7:94:34:35:9e:c3:91:9c:
fa:83:aa:6d:e2:cd:16:c5:c6:0c:cb:25:b3:70:b7:02:6f:82:
9a:4a:46:4b:22:bd:95:e7:4b:dc:c8:2e:88:02:84:43:bf:a7:
15:d2:6d:1a:7a:b8:bc:64:cf:1b:b5:1c:3a:1d:06:60:7d:a2:
62:dc:a5:ea:b9:eb:e8:3f:e3:ec:07:8b:00:08:1e:08:0b:d4:
80:01:12:80:e1:01:4d:07:eb:92:ce:57:8a:fe:8e:4e:73:0b:
02:89:2c:e1:df:24:12:ae:93:21:42:65:e9:4f:a6:9b:0b:f1:
b2:e2:8f:f6:a1:21:45:3e:8a:2b:15:34:e3:de:fa:49:35:f8:
3b:80:f4:8e:8c:b8:5d:db:90:04:8c:94:78:16:5d:b7:89:c3:
11:df:cb:cc:9d:49:7b:df:86:e1:b0:74:5c:cc:fa:8f:b2:d9:
a0:6c:3d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:26 2026 by rpki-client