Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143103.roa
File: AS143103.roa (raw, json)
Hash identifier: j4vrgUdYmdRyyKfSc5lZ7q1l+s8Sw236kokrGPXH+bw=
Subject key identifier: 42:E3:2E:56:AC:3F:F5:62:46:82:2D:66:5A:FE:DF:C6:D3:22:2D:01
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1BD5AD0CA2923C448BD26EF50BE53AC6F84E812A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143103.roa
Signing time: Fri 22 May 2026 04:27:00 +0000
ROA not before: Fri 22 May 2026 04:22:00 +0000
ROA not after: Fri 21 May 2027 04:27:00 +0000
asID: 143103
IP address blocks: 240a:a1c5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d5:ad:0c:a2:92:3c:44:8b:d2:6e:f5:0b:e5:3a:c6:f8:4e:81:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:00 2026 GMT
Not After : May 21 04:27:00 2027 GMT
Subject: CN=42E32E56AC3FF56246822D665AFEDFC6D3222D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fe:11:9c:ca:1f:c6:3b:ad:7c:45:89:74:15:
38:cc:ca:0b:ac:79:5a:f1:40:5b:50:28:d2:2b:6b:
18:38:13:11:dd:cd:a4:9d:9c:8d:51:7c:0e:50:a5:
35:1f:42:8e:a9:04:35:e2:48:a9:e3:fd:f2:01:ee:
bd:68:d5:6f:f8:45:7d:cb:29:80:d4:e9:5f:57:7e:
bb:56:e7:c4:3d:4e:99:68:f3:eb:65:f5:5c:bb:89:
6d:f8:57:bf:4b:0e:1f:4e:04:86:e4:60:89:a0:eb:
29:f3:be:56:35:4d:e3:56:b3:e0:8d:64:bc:bd:a1:
68:5a:7b:02:a7:0e:60:64:8c:d3:6a:6b:d5:6b:bc:
fd:36:15:68:8b:12:ea:0d:25:10:bc:37:ff:85:ac:
13:0c:eb:13:e4:83:3f:6c:bc:da:18:58:e5:5f:9f:
be:cf:3d:36:01:bd:e0:bd:e3:78:30:44:42:60:34:
34:fc:66:93:fc:3d:b7:90:ea:55:da:95:6f:f0:58:
1e:78:e3:a4:b0:b6:33:d2:21:a0:15:83:5c:43:1a:
b7:be:ef:77:a9:67:26:4a:74:b2:29:5b:a4:d3:d0:
e2:f6:0a:70:af:cf:9c:88:ce:26:d8:44:1e:40:9a:
91:2f:54:6b:ff:a5:37:cf:01:56:9b:f7:5a:d0:2a:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E3:2E:56:AC:3F:F5:62:46:82:2D:66:5A:FE:DF:C6:D3:22:2D:01
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1c5::/32
Signature Algorithm: sha256WithRSAEncryption
5c:c0:bf:5a:30:46:2a:e5:af:b3:03:f7:74:5f:b3:92:83:29:
0f:77:f6:65:73:0d:1c:a4:fb:43:52:ab:4b:86:3b:0e:db:c6:
fd:b1:94:2a:79:18:93:e7:37:bb:b1:c3:bf:c7:92:8c:59:00:
7d:96:45:e0:3f:8b:30:b7:c7:00:c1:75:f5:00:c3:cc:c3:9e:
ef:94:95:39:a5:68:15:f7:53:ca:ea:c8:ce:6a:8c:b2:d5:50:
b4:1c:a2:90:98:83:eb:a3:bb:2f:1f:2a:e5:8a:ad:90:06:dd:
c7:21:6c:bf:93:e4:40:84:bb:f7:b4:dc:49:e6:9a:51:91:cc:
4c:34:0a:7c:43:bb:10:c6:d9:ce:58:63:14:46:84:f0:83:8b:
8e:52:0c:77:e5:4a:31:a7:e1:4a:c4:8e:76:76:ec:22:8f:67:
46:d7:a7:27:d1:e5:ff:a1:17:9f:8e:ae:4b:04:c4:b1:e8:65:
10:0c:5b:50:8a:aa:1d:fa:9f:0a:9d:32:47:c4:c1:d1:03:85:
06:31:a1:59:1a:c2:db:3e:74:f1:c2:28:c0:a6:bf:1f:04:49:
50:45:b3:8f:5a:42:ce:d5:ee:6b:8f:9a:01:a2:d3:18:22:2a:
cd:cd:3c:8f:da:3b:ce:b1:cc:c0:d2:91:c5:68:24:40:59:f7:
06:67:b7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:50 2026 by rpki-client