Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143086.roa
File: AS143086.roa (raw, json)
Hash identifier: HCKD6VAKfSZncP0spWnZzWCGGDuaCb5dDYRC0LFGGBA=
Subject key identifier: FB:6F:4D:F1:42:FA:F6:22:30:A1:42:C9:DF:E8:93:CC:3B:BC:69:B0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 394E6C061E59531321EF8BE7C8860E2DB618F44F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143086.roa
Signing time: Fri 22 May 2026 01:50:15 +0000
ROA not before: Fri 22 May 2026 01:45:15 +0000
ROA not after: Fri 21 May 2027 01:50:15 +0000
asID: 143086
IP address blocks: 240a:a1b4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:4e:6c:06:1e:59:53:13:21:ef:8b:e7:c8:86:0e:2d:b6:18:f4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:15 2026 GMT
Not After : May 21 01:50:15 2027 GMT
Subject: CN=FB6F4DF142FAF62230A142C9DFE893CC3BBC69B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:39:d0:1d:01:f1:01:6d:41:1a:25:a5:2d:
ed:0b:99:a5:8b:f7:64:cc:40:db:5a:ed:6c:63:a1:
0d:fb:73:a7:0e:ef:89:40:36:66:46:92:b7:12:85:
97:e5:de:4f:da:8b:78:33:5b:e6:00:2c:03:cf:3a:
c3:09:4c:a3:88:60:8b:d0:b5:89:6c:9b:3e:ad:6f:
59:a4:4d:f6:51:82:ef:fb:ea:11:84:a0:92:40:b7:
3e:79:58:70:e3:17:f2:2a:e6:63:9b:3d:c7:ab:10:
52:8f:21:8c:74:cd:37:90:6f:d5:2f:65:d5:34:0d:
8f:78:9c:07:db:f2:6a:a3:f2:20:5e:4b:49:10:e6:
32:d3:74:20:97:f6:6a:b6:66:1b:77:87:90:2a:07:
ff:89:60:4d:6d:92:48:c2:75:57:92:1b:3c:94:7f:
05:a2:8d:1b:6b:95:56:73:d2:5f:64:65:ec:06:82:
52:6f:6d:04:dc:59:8f:d1:8d:c3:a7:39:c4:30:4b:
dd:fb:94:3b:69:c2:87:d3:ea:81:c0:79:e0:64:17:
25:e3:91:9e:96:8e:cd:dd:0b:eb:46:5b:3d:80:1f:
a7:5b:f8:37:9e:f2:6d:bd:3b:b3:ca:d3:24:ae:37:
6b:b9:b7:fe:5e:b9:99:ef:c4:a5:20:16:a2:fe:3d:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6F:4D:F1:42:FA:F6:22:30:A1:42:C9:DF:E8:93:CC:3B:BC:69:B0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143086.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1b4::/32
Signature Algorithm: sha256WithRSAEncryption
55:cb:08:d9:0d:36:d4:ad:c7:61:4b:37:88:99:04:c9:7f:3f:
a1:21:a8:a1:94:37:9d:2e:5f:2f:c1:eb:55:eb:fb:c4:f9:8e:
b0:6d:a7:f0:3f:07:5a:e0:24:cf:91:0f:b3:cd:00:9b:d0:de:
85:7d:37:7d:5e:48:d8:b3:b9:6e:af:ff:55:68:28:4f:df:47:
0f:9a:85:a0:b1:b0:2a:18:02:76:f0:fa:56:a6:e0:76:13:65:
6f:0e:04:ff:ef:23:ce:ac:c2:85:c9:08:14:2a:c8:e8:c8:60:
af:32:77:36:3c:a3:a3:94:40:03:52:08:7e:30:9d:81:78:03:
52:25:a1:1b:c2:a1:50:83:83:22:13:d3:21:12:77:14:1d:ed:
1d:7c:9e:61:bd:b7:3c:97:da:84:4b:98:4c:08:50:94:8b:23:
d8:24:cd:c9:e7:be:4f:82:3d:58:a4:8e:db:6e:44:7a:7d:d0:
ad:ff:d4:00:9c:ad:76:b1:74:ca:7b:49:75:1c:1e:28:90:e7:
0f:92:23:0d:ba:86:8a:87:08:94:ef:45:58:a8:1b:49:cc:a2:
eb:8b:f6:da:a2:c9:6f:27:bd:e2:9f:10:53:f9:c5:24:03:00:
00:a0:53:75:f9:07:60:30:38:4c:5d:82:7f:38:ad:e8:fb:6b:
98:fb:d6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:48 2026 by rpki-client