Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143100.roa
File: AS143100.roa (raw, json)
Hash identifier: znJarH0dm94hAioQwtKIgudepKWpiKFUjIIP8O/Uvnk=
Subject key identifier: AF:7B:EA:99:41:21:C8:C1:1F:1B:3A:96:D0:1D:F2:0D:48:4A:9E:DE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6489F8D0EEDD8A4F96FF505AE911178CC61F3D20
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143100.roa
Signing time: Fri 22 May 2026 04:08:00 +0000
ROA not before: Fri 22 May 2026 04:03:00 +0000
ROA not after: Fri 21 May 2027 04:08:00 +0000
asID: 143100
IP address blocks: 240a:a1c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:89:f8:d0:ee:dd:8a:4f:96:ff:50:5a:e9:11:17:8c:c6:1f:3d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:00 2026 GMT
Not After : May 21 04:08:00 2027 GMT
Subject: CN=AF7BEA994121C8C11F1B3A96D01DF20D484A9EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:76:55:82:af:79:b7:88:2b:f1:ab:ff:6a:
d4:51:83:a4:2e:29:ea:13:a8:78:ce:74:1c:7a:ea:
64:9f:a2:af:f7:30:59:7b:c5:15:9d:50:c7:52:ec:
ae:fd:3c:31:61:9b:4b:50:af:f2:cd:2e:26:1d:c7:
c7:59:99:5c:b3:ff:94:a3:18:63:f9:d4:97:4a:f4:
71:8e:07:41:fb:da:d5:f9:95:8e:60:b7:32:e7:e3:
8a:60:df:88:8c:f6:08:3b:47:2b:3e:a1:bc:8c:81:
58:3c:12:74:f5:63:21:72:90:4c:ed:27:cf:05:a9:
2d:8c:43:54:a4:40:d6:2a:d1:86:4e:07:84:57:0c:
09:66:87:0f:02:32:a9:1f:52:30:ee:60:20:f6:c2:
ca:d8:b3:35:1b:27:68:ba:f4:ba:43:cc:0d:01:6e:
96:80:17:ca:e4:9f:a5:da:f4:df:a2:41:98:6f:2a:
c4:e0:ff:e7:ac:ba:c7:87:1d:c4:f7:8e:a8:57:09:
86:38:2e:c0:ce:eb:c5:be:e1:9d:63:9e:90:72:e3:
2c:02:0b:ca:9f:77:45:17:3e:58:44:f5:d2:8f:c7:
85:58:97:ee:8c:47:80:78:f2:52:56:86:4f:05:8a:
ca:b5:9d:5d:7c:93:00:53:c8:be:00:67:fa:1e:3b:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7B:EA:99:41:21:C8:C1:1F:1B:3A:96:D0:1D:F2:0D:48:4A:9E:DE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1c2::/32
Signature Algorithm: sha256WithRSAEncryption
02:c8:87:12:73:86:de:df:4d:2c:75:fe:61:f8:a4:6b:ff:42:
03:87:3b:b5:28:30:d1:3e:13:c6:41:ae:57:57:0e:86:68:c2:
61:c5:7e:00:5e:ba:0e:b2:9e:bb:e6:19:2e:0b:f1:b6:e7:64:
b8:25:30:9b:c3:f3:f9:99:2a:15:27:8e:d8:cc:2b:21:a3:ef:
0d:83:0b:b5:68:1d:63:46:9e:4e:c4:d7:99:cc:0b:5e:64:06:
94:5f:e7:86:97:5c:0a:d2:72:8f:c0:7d:91:84:79:44:e1:7e:
64:5c:a1:2b:e0:fd:58:5b:d0:31:e4:bb:9c:79:34:31:bc:e4:
58:a5:8d:d2:2a:fb:a0:67:ef:54:f0:42:22:cb:12:77:13:ac:
8e:bb:c8:fb:08:e9:5a:75:fa:8c:58:fe:c5:8e:1d:1e:43:d5:
a8:7d:48:13:f4:75:25:d8:0a:96:f0:c2:dc:84:35:7d:e7:65:
dd:23:46:fb:c0:b5:67:9f:ec:f8:12:7d:06:6a:98:49:ed:c6:
9a:2f:9f:a8:a5:f7:cb:e2:41:8f:7b:3b:85:58:0e:98:c7:29:
a6:97:83:c8:2a:1d:b5:04:c4:a0:31:1f:e4:0c:ae:ac:42:7c:
e0:9a:39:6e:66:0b:5b:fe:a5:dc:1f:d5:11:fa:0c:10:1e:b0:
12:02:24:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:44 2026 by rpki-client