Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143116.roa
File: AS143116.roa (raw, json)
Hash identifier: NvrxLn18DBoNVCDJ5qbTt02EyTFg90KVt6TOgZj15to=
Subject key identifier: BF:7F:BA:E0:40:78:E3:B2:0C:8F:84:52:FB:00:F9:29:8B:78:0B:FF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6762BCD3BB90004C9143868649D517566C4ABD04
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143116.roa
Signing time: Mon 25 May 2026 03:19:42 +0000
ROA not before: Mon 25 May 2026 03:14:42 +0000
ROA not after: Mon 24 May 2027 03:19:42 +0000
asID: 143116
IP address blocks: 240a:a1d2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:62:bc:d3:bb:90:00:4c:91:43:86:86:49:d5:17:56:6c:4a:bd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:42 2026 GMT
Not After : May 24 03:19:42 2027 GMT
Subject: CN=BF7FBAE04078E3B20C8F8452FB00F9298B780BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f6:8b:d4:dc:2c:49:f9:13:89:85:37:81:21:
61:6a:dc:79:ab:e1:69:da:73:2d:a4:fe:56:c5:8d:
46:88:6d:ef:64:ac:63:27:e3:a9:f4:2d:f1:b4:21:
06:4d:6c:4f:86:49:e8:a1:d6:c2:c0:4e:8c:21:b8:
d9:ec:31:33:40:18:01:f2:42:5d:66:07:cd:a3:b3:
6e:ee:ba:c9:af:06:c4:0d:df:44:89:1b:c8:b8:f7:
ba:95:f8:11:90:51:e6:f3:b2:e2:88:51:60:ef:03:
46:fa:30:76:fa:ec:4b:a7:b8:72:7f:de:d6:f6:df:
1f:7c:6b:0c:bd:09:37:8d:13:b2:d4:14:48:0d:d8:
31:4b:ab:c5:74:7f:f7:04:f1:22:ed:9f:74:21:96:
b3:9a:2e:ca:a6:48:59:b3:60:dd:26:25:81:cd:c2:
5c:49:1d:a7:63:72:7e:3e:56:2e:aa:b5:5e:03:98:
a2:b2:e9:bd:0d:f1:40:fd:85:99:1c:aa:6d:31:c7:
2d:0d:ac:32:2b:f8:43:8a:51:e0:28:72:54:ce:5c:
b7:5f:48:50:8a:0d:c3:76:4f:ab:65:a1:4d:43:16:
1f:4c:a1:2e:7b:c6:e2:24:bb:1c:6b:ab:b6:f7:8f:
e0:1b:a0:12:1c:7b:dc:43:8b:59:ef:24:53:e0:df:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7F:BA:E0:40:78:E3:B2:0C:8F:84:52:FB:00:F9:29:8B:78:0B:FF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143116.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1d2::/32
Signature Algorithm: sha256WithRSAEncryption
84:32:5c:da:c3:9d:f0:28:34:02:10:44:67:60:5e:9a:47:93:
dd:2b:6e:59:8f:cc:1f:39:14:c2:5b:c8:a0:12:57:28:37:6a:
d5:4c:41:37:c1:f5:dd:c6:08:ca:81:f0:22:5e:41:f9:d6:3c:
ac:7c:0b:11:e1:ea:f0:6b:df:53:2a:64:d9:f7:11:3e:37:e2:
8d:87:e1:5b:00:8f:43:8e:8b:cf:58:a5:46:0a:9f:1e:58:a5:
91:ec:08:1c:cd:b2:07:80:b1:c6:c9:34:89:09:d3:e2:97:73:
aa:ba:ac:25:d0:86:08:35:a3:4c:56:bf:39:1e:25:8e:e9:ee:
2e:2c:59:24:1e:91:97:07:65:a6:3e:b8:5a:06:a8:77:10:6b:
62:09:b4:57:0d:20:04:89:fb:8f:33:35:7d:92:1b:ee:8e:0c:
83:5e:b3:bf:0f:23:25:4d:64:6d:cf:90:5f:89:1a:8c:6b:d5:
9c:d7:f0:23:f5:7f:07:12:d1:bc:0b:58:4d:1a:fe:9d:41:d5:
70:12:24:0f:8e:73:03:a8:74:ac:14:7d:94:95:34:84:09:81:
a5:39:8a:6f:f9:c0:ea:5d:3c:ed:f2:74:e4:4c:0d:87:e5:9e:
31:8e:1f:87:9c:6f:fb:e2:04:c6:7a:d2:8a:b8:3a:39:30:5a:
10:39:0a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:13 2026 by rpki-client