Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143090.roa
File: AS143090.roa (raw, json)
Hash identifier: Vo/t4QvTk75BAwzw9+e7GfJkPKopoB/JGC3f4RVxtHQ=
Subject key identifier: DB:D7:FD:8A:E9:A1:C6:1C:2C:B2:04:EF:6D:22:3D:3F:A9:26:F4:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5A9106252693812D08B011A0A5B340EA595C8C82
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143090.roa
Signing time: Mon 25 May 2026 01:20:35 +0000
ROA not before: Mon 25 May 2026 01:15:35 +0000
ROA not after: Mon 24 May 2027 01:20:35 +0000
asID: 143090
IP address blocks: 240a:a1b8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:91:06:25:26:93:81:2d:08:b0:11:a0:a5:b3:40:ea:59:5c:8c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:35 2026 GMT
Not After : May 24 01:20:35 2027 GMT
Subject: CN=DBD7FD8AE9A1C61C2CB204EF6D223D3FA926F42D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:a0:6a:d6:f7:8d:e4:84:eb:44:fa:cd:9a:
68:9e:3e:8e:84:40:a5:4f:65:5c:53:60:89:71:e6:
a9:ad:7b:47:2d:a7:91:39:71:61:33:a2:83:73:33:
8d:5a:0f:41:d5:d9:e6:d8:65:ce:ab:8e:35:df:49:
2b:d4:1c:13:83:23:fc:f7:11:3e:12:5f:95:98:f7:
b1:77:d2:9c:12:7c:d1:3b:c2:06:87:48:e0:db:50:
0b:d2:ed:8a:d0:42:78:ab:31:05:46:2a:cf:46:77:
8f:de:93:15:dd:1f:3a:83:2c:eb:ab:74:0b:f5:68:
d0:67:82:77:4e:3e:cc:4d:bb:1f:3a:c3:96:b9:2f:
9d:2c:3a:c3:c0:b4:fd:66:42:30:49:36:d5:db:39:
99:8e:b5:c4:e5:3f:0d:e4:68:dc:68:6c:06:99:01:
e2:b0:48:3f:4a:8f:d4:12:d6:e6:02:79:74:07:a8:
a9:9a:ff:97:5c:69:d9:65:8d:ed:74:a5:92:3d:b8:
2a:30:f4:e2:8b:82:ac:7f:fa:80:30:95:de:98:bb:
23:58:86:87:e6:03:74:93:ad:50:38:d5:d9:9f:68:
37:a6:90:e8:b6:c3:79:1f:2f:88:58:2f:4a:04:3d:
8b:b6:93:fe:5f:cf:ea:46:e9:77:d7:3f:ab:e7:e6:
cd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D7:FD:8A:E9:A1:C6:1C:2C:B2:04:EF:6D:22:3D:3F:A9:26:F4:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143090.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1b8::/32
Signature Algorithm: sha256WithRSAEncryption
2c:97:6c:bb:92:ae:a0:17:53:55:70:43:7f:45:1f:1f:20:39:
ec:8e:c8:10:b8:86:fa:a9:b2:37:12:89:27:9c:f3:e6:1c:eb:
d4:b8:52:43:12:e4:dd:d3:5d:d9:97:bf:76:1a:17:a5:70:4c:
11:0d:d7:76:60:33:c1:fa:7d:e3:70:59:c2:88:3b:8a:60:f6:
14:7d:5a:8d:ff:17:64:55:16:75:7d:fe:fe:43:e6:d4:cc:56:
74:1f:5e:fa:8e:28:56:00:30:19:59:db:5a:82:bc:d5:49:3d:
4a:a3:b8:82:aa:54:81:bc:da:c6:0b:1e:c3:08:a4:f9:0f:0d:
63:91:3b:08:4b:d7:6a:06:f1:74:17:6d:86:91:3b:2a:cd:29:
88:1d:ed:b4:65:71:24:fe:3e:99:1b:3e:f5:81:ca:a7:27:72:
6b:18:b1:51:a8:78:1c:ca:56:5c:ce:62:5a:3a:20:a2:06:97:
87:ac:f1:28:62:6c:54:5f:96:77:ab:fb:2d:04:d8:05:b9:c6:
8f:68:14:83:bd:a6:e1:f2:28:e7:66:a0:bb:29:5c:0b:c1:2a:
a6:60:e8:71:88:d2:00:69:1f:cd:10:59:fc:c1:7a:f8:a4:3e:
ce:54:0d:2c:f0:9f:9b:fd:7e:65:f3:68:bf:85:e7:51:23:e2:
83:6c:12:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:52 2026 by rpki-client