Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143111.roa
File: AS143111.roa (raw, json)
Hash identifier: Ippjrwru155Ar0xqwymIiYNNVFFc7xIwxHyKQYWsecA=
Subject key identifier: 4C:1F:99:E7:E1:A4:5E:31:89:92:24:26:10:04:9F:D8:51:4A:99:55
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 37A9F70E5F0CD9B510862CE826C9B656A54073B4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143111.roa
Signing time: Tue 26 May 2026 01:12:56 +0000
ROA not before: Tue 26 May 2026 01:07:56 +0000
ROA not after: Tue 25 May 2027 01:12:56 +0000
asID: 143111
IP address blocks: 240a:a1cd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a9:f7:0e:5f:0c:d9:b5:10:86:2c:e8:26:c9:b6:56:a5:40:73:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:07:56 2026 GMT
Not After : May 25 01:12:56 2027 GMT
Subject: CN=4C1F99E7E1A45E318992242610049FD8514A9955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:88:cc:df:a4:c1:7f:9a:0c:ec:1c:db:a3:25:
8e:49:49:94:02:70:02:38:14:74:b4:d6:16:40:c1:
82:c5:16:84:a6:a6:37:c2:1e:6a:df:53:1d:b1:cb:
1c:76:bb:94:01:19:34:2e:d8:69:54:46:56:81:a2:
bc:19:df:ed:56:17:15:9b:38:21:03:1c:14:3b:36:
91:3d:92:4d:f8:f8:16:42:5e:d3:56:b1:aa:87:fa:
42:a5:91:dc:94:50:db:ac:92:4f:e0:ef:a1:96:07:
9c:cc:f7:c0:e4:a7:1a:03:1c:d8:01:13:f2:ef:07:
69:f4:b6:4c:2e:4e:14:c8:5d:2d:81:93:b4:fd:55:
e2:fc:92:c8:37:99:4f:31:ce:ff:1b:49:f2:1a:71:
b1:89:42:62:33:a0:83:b0:78:c5:82:19:b3:16:b3:
fb:8c:e8:22:09:99:99:23:ce:97:d2:e9:a4:9b:de:
8d:ee:06:da:43:de:bf:7b:c9:8d:b7:6e:6e:03:58:
aa:fc:a4:c0:fd:06:e3:c1:cb:7e:f3:ad:08:51:93:
7f:84:f7:cc:d7:e8:ec:fb:85:d7:ce:f0:b9:89:12:
7a:d8:27:98:8c:2f:fa:ea:54:16:ba:bb:45:78:e1:
e5:80:e2:c4:42:58:9d:6b:0f:f6:b5:a5:37:f5:48:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1F:99:E7:E1:A4:5E:31:89:92:24:26:10:04:9F:D8:51:4A:99:55
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1cd::/32
Signature Algorithm: sha256WithRSAEncryption
85:d1:fb:fb:e7:c2:11:65:e8:ee:76:1f:02:40:03:07:c3:26:
f6:9b:5a:83:67:5b:04:b7:4f:72:ab:c7:60:59:85:35:83:2c:
11:ba:01:1c:7a:d5:51:35:92:a2:af:2a:d9:26:3f:84:16:da:
d6:ce:2d:aa:30:fd:78:04:57:0c:b1:19:83:58:3b:9b:fa:43:
b0:8d:be:d9:1f:0b:64:00:f8:cf:64:f9:8d:20:cf:dc:74:04:
a8:af:e6:eb:e0:39:35:fe:c5:7c:d0:7d:e3:e7:21:4f:93:24:
d5:51:ae:ae:3c:a9:79:ea:f2:c8:29:6a:6a:15:f1:1d:02:8d:
ef:56:4e:45:39:59:6f:51:f9:f3:31:f9:cb:18:e0:89:78:ac:
64:ac:9a:b5:ac:d6:35:b2:63:0d:9b:ac:70:1f:0b:c7:62:ac:
69:15:9c:f9:88:c9:ed:fc:24:8a:8a:20:f9:ad:74:03:98:2f:
7c:97:c2:04:2c:f7:68:85:31:ba:77:0b:8e:ff:07:68:df:33:
47:81:42:77:b3:b5:56:73:9f:f4:31:6e:16:1b:83:2a:af:56:
d0:c0:52:49:dd:4e:57:42:a0:c6:a7:84:6c:a9:05:6e:51:74:
7a:5b:5f:ce:69:6b:7a:22:9c:17:57:ac:7f:df:f1:12:06:ef:
61:50:75:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:30 2026 by rpki-client