Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143089.roa
File: AS143089.roa (raw, json)
Hash identifier: je+rIPatNy7a/QTYORvW7CyrVzPUVd+tmtV9OeKy57s=
Subject key identifier: CE:BB:7D:03:8C:B3:32:D3:68:0D:11:D8:F0:6F:A6:F1:6F:A2:DF:53
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5B869CADA06926963DB9E2C3A4D0E61A17196A94
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143089.roa
Signing time: Mon 25 May 2026 01:51:12 +0000
ROA not before: Mon 25 May 2026 01:46:12 +0000
ROA not after: Mon 24 May 2027 01:51:12 +0000
asID: 143089
IP address blocks: 240a:a1b7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:86:9c:ad:a0:69:26:96:3d:b9:e2:c3:a4:d0:e6:1a:17:19:6a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:12 2026 GMT
Not After : May 24 01:51:12 2027 GMT
Subject: CN=CEBB7D038CB332D3680D11D8F06FA6F16FA2DF53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:7d:00:ea:82:2e:83:6b:dd:ac:cf:ab:06:
12:9e:cf:c4:aa:95:c7:b2:28:8a:bf:ba:6c:08:5f:
c2:2a:f2:03:98:21:de:87:be:24:e7:b2:fe:25:54:
7b:4c:fa:8e:a8:76:68:dd:c0:e6:00:71:34:44:7a:
a2:cc:27:9e:77:16:80:6e:4e:68:77:cd:e9:0e:cf:
65:df:d5:97:23:97:ee:15:83:39:86:31:df:7a:41:
26:6c:20:47:ca:7c:03:8a:95:93:cb:a7:b8:70:6a:
1d:67:d0:9a:4c:71:5e:3f:b3:79:d6:d7:0a:c7:6b:
b1:13:6d:99:57:2e:fa:9d:36:48:45:8b:d3:48:e6:
03:a4:46:fe:2c:58:e2:80:48:bb:39:d8:d2:db:70:
3e:42:52:5b:d3:8c:97:7a:f4:7b:a9:27:c0:58:fd:
7f:57:15:88:6d:fc:4b:c2:fd:5c:42:d9:48:1b:0d:
8d:58:23:30:68:cb:ae:55:17:71:88:cb:ce:14:a8:
51:d4:99:ed:8f:12:a7:ef:6a:af:58:c8:1a:ea:72:
6c:d7:04:0d:b3:1d:ba:59:e9:6d:96:77:ba:d2:15:
98:90:3d:1a:dc:7a:92:f8:66:0e:b9:9d:19:ec:74:
26:7e:ce:f9:1a:7b:67:c4:be:8f:ee:54:8b:aa:99:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BB:7D:03:8C:B3:32:D3:68:0D:11:D8:F0:6F:A6:F1:6F:A2:DF:53
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143089.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1b7::/32
Signature Algorithm: sha256WithRSAEncryption
28:b2:c4:bb:a0:17:53:b4:f3:b8:a1:cb:74:45:ab:31:b1:e3:
3f:17:34:c2:24:92:2e:f9:2f:3b:cd:ed:4c:cf:09:6c:3e:42:
3a:75:30:0f:9b:b3:de:c7:c7:4a:2b:67:ef:c4:e1:05:fd:07:
7b:cc:8b:fd:d0:19:56:14:6c:9a:3d:71:14:31:2b:f5:d6:5f:
e7:3b:d9:f1:cf:e1:2d:2e:1d:fd:20:90:ff:5b:64:ca:df:7d:
1b:b3:b2:40:b8:2f:04:23:82:d4:f9:9f:62:ed:98:78:00:17:
69:62:23:5a:35:d8:c6:96:9c:05:70:f8:3b:c8:ef:c0:05:e2:
f4:c6:0c:5d:99:f6:95:a5:05:7a:80:f4:6e:99:71:bf:31:7d:
8a:cf:62:00:b7:36:7a:3b:cb:48:42:9c:14:4e:e1:c1:a3:8a:
dc:90:43:ea:54:d4:26:0e:89:81:8d:9f:17:9a:fb:86:41:0b:
58:79:36:f1:89:c0:6d:15:0d:4d:ef:d0:da:f4:ef:69:b3:7a:
03:2a:9c:a6:d7:7f:8c:18:27:7a:16:f0:31:2b:8d:e8:31:29:
c2:87:44:21:48:57:c2:b4:b9:db:09:f0:83:02:fa:cb:10:c0:
03:a8:4c:61:ed:d5:73:a2:4a:fe:73:a5:d8:d8:27:64:f1:71:
48:87:3d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:49 2026 by rpki-client