Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143097.roa
File: AS143097.roa (raw, json)
Hash identifier: 1mMWFWY79DxTumIlLtBD8pZdsOJIu/7fiymN8EO6ThY=
Subject key identifier: B9:88:2F:B9:CE:EC:53:15:DC:B3:F7:5C:67:85:DA:A7:68:D1:82:DE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 73A320DDF3C91DD4CF64536738B2EC0CDC16A80C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143097.roa
Signing time: Mon 25 May 2026 01:38:31 +0000
ROA not before: Mon 25 May 2026 01:33:31 +0000
ROA not after: Mon 24 May 2027 01:38:31 +0000
asID: 143097
IP address blocks: 240a:a1bf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a3:20:dd:f3:c9:1d:d4:cf:64:53:67:38:b2:ec:0c:dc:16:a8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:31 2026 GMT
Not After : May 24 01:38:31 2027 GMT
Subject: CN=B9882FB9CEEC5315DCB3F75C6785DAA768D182DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:ac:92:51:64:71:65:2c:58:3f:59:f7:90:
c9:66:b4:20:0b:3d:2a:fb:29:9d:2b:07:38:b3:0b:
9a:cc:32:52:3c:0e:81:d0:9e:17:19:14:81:63:cc:
fd:32:e1:d8:38:6f:aa:d8:d7:5b:d4:ed:17:ad:da:
15:a0:ab:8a:41:62:61:36:90:3c:e6:33:21:7a:b3:
c0:9f:14:cb:bf:66:13:ef:a0:1a:1d:4e:f0:fb:fd:
c4:ee:e6:ad:9a:a6:45:c6:87:86:25:59:90:25:1a:
18:db:70:9a:47:20:42:7d:88:53:16:70:a7:5e:51:
c7:b7:2f:ad:ea:93:19:4e:cc:92:21:d6:4c:61:63:
52:d5:58:e2:bf:7a:3d:dd:97:67:6d:78:0b:a9:b3:
60:63:82:a6:16:a8:bf:cb:e4:0b:fc:71:00:ae:57:
c2:a7:53:25:5a:ce:e5:bf:d3:45:20:5e:d6:b4:f7:
bb:3b:77:e9:39:2e:12:61:79:ed:9b:7c:f3:4c:28:
d7:9e:45:8e:78:05:4c:eb:f5:b0:cb:d5:54:27:57:
94:4e:92:28:04:63:06:1a:ef:74:7b:d5:c4:ed:b5:
e5:f8:c2:cf:8f:5a:fb:39:01:0c:4c:2d:e2:cb:e0:
d2:57:20:6c:c0:5b:1e:c3:9a:f6:ea:d0:75:df:55:
24:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:88:2F:B9:CE:EC:53:15:DC:B3:F7:5C:67:85:DA:A7:68:D1:82:DE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143097.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1bf::/32
Signature Algorithm: sha256WithRSAEncryption
85:86:fe:70:56:25:49:dc:b0:96:05:3d:d9:ff:59:f3:38:9d:
bc:48:82:f0:3f:09:5c:8e:37:eb:05:22:8e:e3:7c:3a:8d:44:
06:4a:12:d8:76:78:63:fb:fa:b1:43:39:4c:df:02:9c:00:25:
a8:9a:7a:90:05:e4:86:58:33:85:0b:cf:a5:99:3a:75:a7:54:
06:5c:3d:58:e9:81:59:17:9f:e1:b3:c2:82:52:c0:ad:6c:17:
a6:6c:d4:08:59:0f:ca:5c:c9:e7:1d:19:dc:57:14:d0:08:94:
b6:07:00:79:92:11:1f:27:eb:78:15:74:d2:69:8b:37:f7:d3:
5a:8b:d9:93:2b:d5:72:5d:0e:bf:d0:81:c5:5d:17:11:d7:dd:
78:d6:92:58:53:87:29:be:7d:34:45:7d:bd:a0:bd:98:fe:ff:
73:44:8a:5a:5f:2f:4c:96:c7:15:30:58:06:54:e6:ef:6a:67:
3e:4a:64:ab:9f:5a:b3:79:b3:bf:4b:b5:fb:2f:6f:28:f2:e5:
6b:6a:14:7f:1d:90:9d:8b:75:5e:02:f7:9e:44:27:f7:b0:4b:
2c:23:aa:d3:86:e5:f0:b3:8d:7f:6a:e2:8d:e4:f4:1d:b0:09:
dc:54:54:31:e0:ab:53:ff:58:4e:e2:75:27:d1:0d:4f:55:df:
56:31:7a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:39 2026 by rpki-client