Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143083.roa
File: AS143083.roa (raw, json)
Hash identifier: Pk95S/IA5CWL3OZF1w0ouH15oYq6DHEyhP2H+94DpzM=
Subject key identifier: FB:99:BF:64:FF:05:92:1D:1B:AE:68:0D:44:B5:85:57:7A:DD:3F:4A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 420DF66C4E8615697CF0AF2615ED749B91A848A8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143083.roa
Signing time: Tue 26 May 2026 02:35:20 +0000
ROA not before: Tue 26 May 2026 02:30:20 +0000
ROA not after: Tue 25 May 2027 02:35:20 +0000
asID: 143083
IP address blocks: 240a:a1b1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:0d:f6:6c:4e:86:15:69:7c:f0:af:26:15:ed:74:9b:91:a8:48:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:20 2026 GMT
Not After : May 25 02:35:20 2027 GMT
Subject: CN=FB99BF64FF05921D1BAE680D44B585577ADD3F4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:90:96:51:d7:48:4a:20:cd:0b:3b:51:11:
bd:30:b7:4f:82:cc:55:17:45:66:ec:20:b6:03:3d:
52:95:e9:18:55:da:79:c6:24:af:71:54:9a:e0:ec:
32:39:a6:07:a7:fd:be:bb:8d:e2:40:c9:3e:63:b3:
66:d6:dd:f6:44:00:be:44:71:9e:6c:5f:5a:74:f0:
df:8c:a0:fe:ed:b2:65:4f:b9:1d:9c:10:9c:a7:ae:
77:79:54:c9:16:83:ac:d2:9a:76:4f:f8:1f:b6:71:
de:f3:bb:17:8a:cf:07:2d:e4:99:20:9a:f3:6b:06:
c6:ce:2d:c7:4f:00:8b:a4:34:17:7d:fc:9b:0d:6d:
f6:c1:bc:30:28:1a:ed:50:7c:ae:3f:b2:26:eb:21:
4f:99:15:f0:4a:9f:7b:33:62:21:32:0c:32:ca:36:
f8:25:49:97:c3:16:78:a2:a5:fe:56:7b:55:de:c7:
a2:e8:78:f4:11:7e:30:63:58:15:dc:db:77:cf:cd:
eb:f1:1e:ce:34:34:b0:f5:eb:8f:8e:b4:db:6d:e1:
93:0b:b3:59:15:21:d1:46:35:39:44:5c:23:cb:f6:
3e:11:9b:bc:e0:fd:8e:f5:a3:6b:60:de:56:c6:51:
33:7c:62:bb:1b:4d:e8:b5:28:5b:46:e8:dd:98:88:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:BF:64:FF:05:92:1D:1B:AE:68:0D:44:B5:85:57:7A:DD:3F:4A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1b1::/32
Signature Algorithm: sha256WithRSAEncryption
36:3a:f2:b3:a2:52:5d:d3:95:9b:61:c8:7b:fe:96:7c:05:62:
66:86:c1:e7:f6:4f:ec:c7:2f:7c:3d:9f:21:7d:c4:dd:56:79:
66:60:f0:eb:ee:20:24:7d:bd:31:df:a8:53:b6:9c:50:57:43:
e0:c4:fe:eb:56:14:6d:79:b8:86:31:0e:c8:9f:06:11:f6:1c:
4a:dd:07:63:de:04:6f:63:ec:8f:15:06:4e:df:e2:5e:a6:8d:
ec:e5:f2:8a:9d:3f:fe:3d:3b:dc:b7:32:f1:fc:d9:f1:b1:1e:
b5:2f:08:fa:e5:3b:ef:8f:1e:2c:3b:b4:36:1e:81:ff:b6:62:
d8:d8:ed:54:30:15:e0:ef:73:40:e6:d6:c0:c3:90:e2:e2:91:
a0:df:e1:5b:e3:30:8d:d4:02:19:d5:eb:77:8a:96:c8:9c:a2:
f7:04:d1:5e:f0:04:23:6b:1a:8e:e9:12:ef:91:98:be:5f:d7:
5c:78:32:20:39:29:af:ef:22:47:0e:2c:a7:80:3b:0f:99:7a:
a5:66:e7:cf:d3:15:be:46:d8:4f:6e:80:22:66:7c:6e:df:59:
56:bd:51:3c:9c:db:6c:50:3f:bd:44:8b:41:41:43:55:ef:fb:
25:17:6d:89:d2:d9:7f:dc:85:be:5f:40:ef:d2:96:2a:db:bd:
76:c3:58:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:03 2026 by rpki-client