Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143079.roa
File: AS143079.roa (raw, json)
Hash identifier: yHCjnWZu0sA0E7aL4lYLXA2C55Q81IM0JQQli5gGLOE=
Subject key identifier: 0D:F3:18:C5:29:B6:5D:ED:67:A3:93:AE:5D:AA:38:94:CC:36:0B:31
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 220BF9EEBCD97556EBD002B13C12D381D14EC0A1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143079.roa
Signing time: Fri 22 May 2026 01:50:28 +0000
ROA not before: Fri 22 May 2026 01:45:28 +0000
ROA not after: Fri 21 May 2027 01:50:28 +0000
asID: 143079
IP address blocks: 240a:a1ad::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0b:f9:ee:bc:d9:75:56:eb:d0:02:b1:3c:12:d3:81:d1:4e:c0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:28 2026 GMT
Not After : May 21 01:50:28 2027 GMT
Subject: CN=0DF318C529B65DED67A393AE5DAA3894CC360B31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:19:8c:65:da:0a:80:9c:75:46:23:21:ad:54:
da:f5:4c:b4:d7:45:a3:1e:29:af:fd:eb:e6:3e:1b:
92:36:b7:49:96:21:cf:b6:33:70:09:5a:f6:e2:ef:
9a:af:c0:c8:7a:61:91:f6:00:6b:8a:10:fb:1d:ca:
60:86:9b:7a:61:f1:a6:9b:68:16:82:ed:2a:97:13:
13:81:36:74:60:72:b8:19:0a:32:ec:94:fd:3c:de:
37:e7:a2:1c:ae:7f:8b:45:0f:d0:0b:02:41:24:6a:
5a:40:f4:95:f3:10:58:2e:87:59:ae:a9:f6:d5:7b:
e5:79:f8:42:d2:d7:32:f7:aa:b0:fe:f8:44:f9:af:
2d:d0:76:4c:1a:fc:ee:6f:5e:93:02:1f:39:29:ae:
27:f0:9b:f4:34:3e:31:9e:6c:78:f3:e6:a5:d6:ac:
b5:54:61:23:b0:47:36:c8:76:93:86:7d:09:cf:df:
1f:a4:d7:0e:d1:c6:bc:58:38:34:c2:01:5f:53:d0:
ab:9b:d7:c6:97:5e:81:1a:dc:5d:5c:b0:08:69:b9:
15:0a:b7:a0:99:f4:a2:f6:91:ae:27:69:72:49:84:
8e:2f:25:ed:0f:85:c6:85:88:db:e6:cd:71:cc:8e:
f9:23:7c:37:f3:37:16:22:b6:23:f1:32:81:06:22:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F3:18:C5:29:B6:5D:ED:67:A3:93:AE:5D:AA:38:94:CC:36:0B:31
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1ad::/32
Signature Algorithm: sha256WithRSAEncryption
37:0d:d4:26:da:73:c3:57:46:5d:e6:db:8d:af:2b:e6:6a:cb:
d1:d9:51:f5:fc:71:98:08:91:87:85:69:b5:9b:77:51:1d:ce:
00:1d:59:22:0a:fd:a4:01:eb:ca:99:7a:cb:f0:a4:c8:f3:a2:
b0:bb:3e:53:c6:8e:fa:d3:57:07:7c:36:78:ac:83:d1:4d:26:
b4:40:05:2b:99:d3:d7:c3:b3:20:f9:e5:7f:47:d3:3d:9e:a9:
2b:b2:83:34:e6:d1:50:4b:d4:81:43:e5:76:ac:7c:ff:61:ac:
e2:6c:32:86:22:ea:a1:83:e1:da:e5:be:a7:ce:8e:3c:20:ab:
d6:4c:51:e9:45:a6:1d:f5:78:b2:c1:66:f1:64:6e:79:71:c8:
51:ed:7a:05:03:cb:09:40:13:84:3a:1d:04:5b:57:bf:38:89:
a3:94:45:d0:61:ef:4a:4e:0c:3b:22:b6:c8:8f:ce:06:f0:50:
8f:ad:97:65:72:34:0d:fc:f0:fc:ee:97:20:8c:1e:50:6e:eb:
d3:b2:f0:72:df:9e:ab:eb:2f:19:da:8a:8b:38:a0:40:06:00:
eb:62:16:de:b8:1f:6a:e5:ad:81:9e:71:9a:db:42:0f:79:08:
48:6c:82:d0:68:fd:8e:c4:0b:af:fb:2d:00:c8:01:d6:b1:ae:
69:b6:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:20 2026 by rpki-client