Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143098.roa
File: AS143098.roa (raw, json)
Hash identifier: S3NJ8jtx8C7vX1R8/+TZ/uQAnPqIMA4m1ZqZ7Hqa/J8=
Subject key identifier: 85:B2:CF:E2:FA:C0:37:9A:28:0C:42:30:23:CC:4A:AE:B2:FB:DF:72
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 68F014ABDA468F48DA8724A4FDFFE7E872D855A2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143098.roa
Signing time: Mon 25 May 2026 06:49:09 +0000
ROA not before: Mon 25 May 2026 06:44:09 +0000
ROA not after: Mon 24 May 2027 06:49:09 +0000
asID: 143098
IP address blocks: 240a:a1c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f0:14:ab:da:46:8f:48:da:87:24:a4:fd:ff:e7:e8:72:d8:55:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:09 2026 GMT
Not After : May 24 06:49:09 2027 GMT
Subject: CN=85B2CFE2FAC0379A280C423023CC4AAEB2FBDF72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:96:c9:3d:da:8b:98:ee:7c:03:10:47:3b:
46:92:2c:53:16:de:af:bd:f2:d7:7b:02:bb:41:23:
7f:e1:00:62:c0:1c:4c:70:83:d1:3a:eb:68:5c:13:
ba:ff:08:fc:11:af:d0:27:ee:d5:d2:db:04:b4:08:
b5:c2:31:6e:14:03:ef:e3:54:99:14:73:7e:29:c0:
f8:2d:8d:c5:61:d4:05:cf:06:f4:90:38:f3:ec:a8:
04:02:65:71:9f:e1:f5:3f:f7:51:ae:fc:74:01:25:
43:8c:11:6f:58:45:eb:6a:60:e5:c2:15:45:7a:44:
be:ab:29:34:3c:b6:91:55:80:6c:a0:fe:14:be:9d:
cf:96:20:26:26:e6:83:03:bf:7d:39:f1:14:4a:39:
07:a9:69:aa:e3:63:79:aa:46:14:3c:77:68:85:4f:
6f:c7:8c:80:d5:14:52:3d:fe:b5:51:43:cc:c4:95:
b3:44:3f:e9:82:9f:23:2e:81:a3:4c:8d:ef:0e:0a:
99:91:70:cc:99:42:32:36:32:55:5d:72:b5:f4:54:
64:60:ca:b9:86:a1:a9:ce:27:83:59:17:93:8e:d0:
74:69:fa:6b:a4:ba:99:b9:98:dc:bf:7f:c8:16:03:
08:20:fb:2c:2e:f3:28:04:09:23:2f:4e:0b:14:8d:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B2:CF:E2:FA:C0:37:9A:28:0C:42:30:23:CC:4A:AE:B2:FB:DF:72
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143098.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1c0::/32
Signature Algorithm: sha256WithRSAEncryption
41:dc:b5:39:6d:2a:ce:a4:6f:c7:97:74:29:7e:6e:82:b7:07:
17:b5:34:f9:0b:30:43:dd:3d:43:1a:95:fe:f1:02:d0:88:74:
51:14:43:32:ce:7d:00:d2:76:ea:3c:77:46:8d:23:25:82:a6:
66:c1:e1:1c:e5:06:a4:d3:2d:4c:51:0d:1e:e8:bf:80:79:8e:
aa:69:d8:dd:a9:35:15:b4:23:de:db:f0:28:19:d5:d6:c3:03:
bb:f7:7b:1d:de:c7:b0:90:f6:a7:dc:7a:2c:3d:b5:f3:4d:86:
9b:68:12:d9:a6:2c:9f:9c:fd:9f:8a:0d:99:02:9b:56:9c:0d:
51:62:25:a8:91:c7:70:c4:13:de:1d:79:b9:93:72:15:6f:33:
f3:b0:a6:ac:5d:9d:04:c1:3a:eb:94:f9:bb:ca:d5:88:55:c5:
7f:39:d3:5e:15:81:17:c9:67:18:cd:cf:c3:d7:5b:db:14:ca:
62:25:90:e7:0f:58:4b:e7:3b:b5:d6:a2:5a:15:b2:b6:b6:3c:
95:bf:5e:9b:29:0e:45:d8:95:6f:ca:18:91:a6:3b:31:80:04:
1a:fd:49:af:c5:22:f8:de:b8:43:33:52:48:75:41:46:16:01:
1c:73:25:b3:5e:e9:91:07:22:53:07:c2:a2:db:62:fb:51:10:
41:ae:55:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:22 2026 by rpki-client