Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143110.roa
File: AS143110.roa (raw, json)
Hash identifier: W6OWFUpYXIe6ujIFK4E/SgZzAwoBA9TjEV3JfuFW/EE=
Subject key identifier: 9F:02:8D:F2:94:1B:26:23:FE:19:A7:32:5A:9D:A9:84:BD:88:33:FF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 422F37EE1200FBBD9A0D8AF12B40D3B5D90DE6B1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143110.roa
Signing time: Fri 22 May 2026 07:32:29 +0000
ROA not before: Fri 22 May 2026 07:27:29 +0000
ROA not after: Fri 21 May 2027 07:32:29 +0000
asID: 143110
IP address blocks: 240a:a1cc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2f:37:ee:12:00:fb:bd:9a:0d:8a:f1:2b:40:d3:b5:d9:0d:e6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:29 2026 GMT
Not After : May 21 07:32:29 2027 GMT
Subject: CN=9F028DF2941B2623FE19A7325A9DA984BD8833FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:8a:78:1e:c9:25:0e:90:ce:d7:87:a7:bc:
50:7b:6e:2f:b4:e9:e7:53:a3:52:85:60:0b:98:b6:
83:3c:d4:23:11:57:11:3e:f7:db:9b:e8:dc:43:7b:
fa:28:5e:0b:d9:65:f7:f2:c0:60:15:09:2f:ae:21:
f9:54:d6:0e:a7:ed:60:99:11:07:29:52:74:2d:41:
27:11:d0:fd:17:e5:b7:f9:44:9a:a5:70:a7:72:c1:
c0:27:3d:26:49:2f:02:4c:dd:14:02:c4:6e:a7:b0:
05:d9:39:05:9b:5c:97:b2:b0:f4:12:d1:d3:91:db:
07:c4:a3:d3:ac:0e:35:64:5e:03:63:fe:54:ac:1c:
ca:fa:a0:13:a8:2e:e9:82:20:25:06:1c:1b:06:ed:
96:25:23:82:ff:25:e4:ac:c8:b9:4c:9f:00:28:53:
7a:08:5e:2b:57:38:60:0e:0e:43:2e:b3:26:76:aa:
f9:34:ca:7d:d7:59:d0:29:f7:cb:b7:b4:fe:40:bf:
60:ae:e5:19:a1:13:35:0f:a9:a0:a4:ae:0d:67:6e:
d6:e7:90:8f:80:28:1e:2d:7f:32:9e:c9:61:d8:01:
7b:e2:45:d2:5f:99:c4:60:42:c0:0e:2f:1c:e7:8d:
d8:e8:b3:36:be:5f:1e:ed:86:6d:b3:78:60:13:24:
00:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:02:8D:F2:94:1B:26:23:FE:19:A7:32:5A:9D:A9:84:BD:88:33:FF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143110.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1cc::/32
Signature Algorithm: sha256WithRSAEncryption
6f:b4:9b:e1:af:02:09:08:8c:e6:14:22:d6:8a:21:59:1b:14:
db:9c:96:19:15:51:38:63:cf:5b:3c:5c:12:54:3c:a5:91:ac:
6e:50:f3:cb:3a:db:bf:92:99:64:5c:92:db:a5:c7:69:cd:39:
8a:53:29:6d:47:0e:82:5a:03:71:ec:7f:e2:c9:1f:97:85:34:
32:6a:ad:ea:90:fe:34:93:2d:c4:13:09:e8:35:31:ff:de:0c:
b4:69:39:b3:b9:ad:e8:11:ba:4d:ad:d0:d7:8d:e9:6e:f3:4b:
14:eb:82:9e:2f:d8:42:9a:d5:7a:51:04:fd:25:2a:50:bd:54:
bd:14:85:0c:f9:4a:7c:48:aa:58:92:cf:c3:d1:8c:33:85:cf:
4c:25:21:f0:c6:0e:0c:a0:0b:23:e1:4d:27:53:6a:df:1f:25:
34:33:b0:08:b6:36:e1:a2:63:c8:82:4d:eb:1b:df:2f:9a:4c:
78:e1:85:48:0f:df:c5:4e:6b:e1:df:78:c4:2c:26:35:48:0e:
b1:51:25:b0:fe:21:35:5e:9a:c5:ae:ba:26:00:aa:e8:60:88:
45:b6:a4:cd:af:8a:f8:09:d6:b3:6c:8e:c1:0c:a3:d7:43:1f:
23:44:83:96:96:1a:77:0e:8d:6b:e4:63:d0:66:13:17:4e:06:
9f:80:06:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:08 2026 by rpki-client