Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143091.roa
File: AS143091.roa (raw, json)
Hash identifier: k34DsFRP6c15HBhuH2hNiINJ06LYx7m6smO+R+TCeJQ=
Subject key identifier: A5:8A:F0:C5:CE:E4:98:5A:93:35:20:9E:31:86:6E:38:1A:CC:33:4F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 641D1F3648FAA705049A9A2B9343F5B2BF9A2048
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143091.roa
Signing time: Fri 22 May 2026 02:47:44 +0000
ROA not before: Fri 22 May 2026 02:42:44 +0000
ROA not after: Fri 21 May 2027 02:47:44 +0000
asID: 143091
IP address blocks: 240a:a1b9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:1d:1f:36:48:fa:a7:05:04:9a:9a:2b:93:43:f5:b2:bf:9a:20:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:44 2026 GMT
Not After : May 21 02:47:44 2027 GMT
Subject: CN=A58AF0C5CEE4985A9335209E31866E381ACC334F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:07:e2:fe:5b:39:8a:b4:57:68:6d:e4:e5:4a:
d4:5f:ba:c2:d5:c0:e6:0c:2d:50:0d:aa:ce:b5:e9:
f7:8a:f7:88:c3:81:5e:27:c2:56:ca:10:1a:0e:88:
12:7a:10:37:04:7f:9f:20:1b:1e:63:26:93:3a:05:
df:98:68:29:d5:a2:2d:6a:0c:e2:25:95:d4:3f:38:
c7:a3:76:00:bf:73:bc:35:fd:4e:56:f2:90:0b:81:
c0:b9:b8:af:ae:69:e9:c2:04:01:4b:43:03:58:4c:
41:a7:1f:3e:57:7a:8d:56:3c:c4:10:1c:d0:2f:57:
fa:6f:42:ab:05:64:ac:ce:04:45:a0:19:e7:c0:9e:
a2:b6:cd:d0:58:1c:6a:15:86:ad:f8:b4:61:a9:4e:
a9:a7:7c:f8:40:99:56:e1:79:4e:ba:18:3d:bb:7c:
bb:d9:65:26:1d:68:82:9d:d8:db:ec:72:71:b8:0c:
ed:3d:fe:5a:8e:b6:43:f6:de:ca:0a:8a:f1:81:22:
4c:5d:f5:75:b1:ed:18:c7:a5:ca:8b:c5:bc:ce:ac:
1f:29:66:ec:28:8a:f8:8f:c4:e6:85:fa:7e:f5:d2:
44:5f:52:ba:29:95:4a:3b:ae:a8:5b:4a:b4:e9:42:
ff:ae:bb:aa:d3:a5:c0:64:41:24:0a:ec:a7:ba:c5:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8A:F0:C5:CE:E4:98:5A:93:35:20:9E:31:86:6E:38:1A:CC:33:4F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143091.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1b9::/32
Signature Algorithm: sha256WithRSAEncryption
9f:cc:91:c0:61:55:5b:11:99:0a:fb:13:a9:c6:8b:d6:24:52:
aa:cb:c6:b1:0e:84:be:61:7b:22:44:db:27:1e:d7:a4:cd:bd:
9f:2f:84:22:30:28:7f:d6:ca:4b:c5:c5:e4:d5:61:dd:ba:28:
4e:75:e8:3c:59:ac:0f:54:c2:99:af:9f:88:67:55:a4:94:de:
22:20:fe:80:aa:d9:4f:35:ea:48:40:4d:41:0d:47:a0:ce:4d:
2a:90:3b:73:2e:2d:73:f2:26:09:fd:6c:ec:9f:05:e5:1c:c8:
96:85:5b:ba:e3:4b:95:09:cf:63:6b:d6:05:4d:db:8d:45:af:
db:f3:31:50:19:0b:44:d1:25:28:0b:1c:c4:cb:e9:d7:e7:32:
89:97:d9:4a:5d:1e:a0:e8:3e:5b:ed:9e:98:76:f7:80:16:25:
51:dc:bf:e0:f6:b4:e1:f4:ee:ff:31:2b:9f:f4:02:74:23:fa:
a0:93:60:6d:30:85:7f:cf:e2:f4:c0:42:8d:50:5f:7a:d1:09:
2f:0a:72:81:0c:06:12:46:38:2a:1c:2a:11:4e:35:8a:53:bb:
62:cf:a2:62:56:de:91:c3:71:46:c9:a7:bb:4f:a2:bd:b9:bc:
3e:ba:32:d0:c7:80:24:55:54:f7:db:69:06:93:cb:14:dc:49:
7f:ac:86:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:34 2026 by rpki-client