Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143122.roa
File: AS143122.roa (raw, json)
Hash identifier: ZMokpXm00cXUTWtrsL83ylVEpTUCgApYkO/B/h5bsd8=
Subject key identifier: 11:2B:35:A6:F5:2C:96:D1:1D:DD:F1:C3:0B:51:FD:3D:10:5E:F6:6C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 77426F7D924C03849EB5C966206A17A636C7D033
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143122.roa
Signing time: Fri 22 May 2026 04:08:09 +0000
ROA not before: Fri 22 May 2026 04:03:09 +0000
ROA not after: Fri 21 May 2027 04:08:09 +0000
asID: 143122
IP address blocks: 240a:a1d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:42:6f:7d:92:4c:03:84:9e:b5:c9:66:20:6a:17:a6:36:c7:d0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:09 2026 GMT
Not After : May 21 04:08:09 2027 GMT
Subject: CN=112B35A6F52C96D11DDDF1C30B51FD3D105EF66C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:a0:6c:84:ea:b3:47:07:ce:2a:b5:b1:41:
13:bf:5c:46:be:0d:fa:e4:c9:0e:04:d9:a2:5c:22:
a4:60:bb:5f:9c:a5:24:51:12:05:4c:71:a8:1b:78:
14:33:9c:c6:aa:18:b3:34:c9:10:78:60:b1:7f:30:
c1:80:a5:b3:3c:f9:87:67:9a:60:4c:31:14:ff:6a:
1c:69:7d:af:13:53:4d:2d:7b:62:96:5f:fc:1d:d9:
1e:f3:a0:ea:8f:33:21:46:22:ba:c8:fd:38:50:ef:
4c:a1:55:3b:71:97:c7:9c:57:c7:94:03:43:80:25:
f6:da:ab:11:9e:ab:24:4a:87:cf:ce:19:b4:b5:03:
a0:65:b4:67:a4:2a:1c:64:da:0d:23:3b:e3:18:e1:
cf:64:d4:9a:7d:09:d6:0b:77:dc:2a:b7:d3:d8:72:
dd:52:f7:df:f1:14:3e:63:f0:52:59:f2:a5:e9:e4:
65:da:73:8a:fd:b8:b7:31:b6:99:9e:35:ba:4a:c6:
2a:d1:b8:d5:48:7e:33:7f:28:f8:9d:d1:5b:08:f7:
cc:b3:40:38:54:eb:43:35:05:59:9c:c3:be:e5:58:
46:09:6b:d9:17:07:37:0a:39:2f:86:7e:53:98:36:
ee:eb:e8:57:ee:9f:26:70:5e:0e:7e:65:04:df:5c:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:35:A6:F5:2C:96:D1:1D:DD:F1:C3:0B:51:FD:3D:10:5E:F6:6C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143122.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1d8::/32
Signature Algorithm: sha256WithRSAEncryption
6c:55:c3:51:e2:33:9b:fa:11:7c:4e:07:c2:8a:fa:e9:03:06:
cc:60:d3:68:71:15:9c:48:60:39:b3:81:2c:03:28:6f:39:55:
8c:93:1e:3a:b5:b5:d0:46:95:47:37:f9:15:f3:0f:c9:e2:43:
57:90:18:d2:02:cb:a6:7b:8d:c2:35:b6:30:2e:e8:bd:7b:59:
2e:37:4a:89:6a:29:70:b9:36:82:8e:67:bf:8a:f3:44:09:41:
bb:2f:cb:6e:b4:fd:18:e3:f4:dd:62:f4:43:08:6d:7c:d6:ea:
23:13:2e:d8:42:de:ca:d0:db:b8:fa:5a:02:3d:1e:ca:9e:38:
af:e5:50:4d:80:42:73:d9:c2:08:54:25:c0:b3:70:df:f6:d8:
05:4d:5a:1a:60:af:52:ca:49:ae:10:ed:7f:3a:c9:7a:23:18:
a2:dd:aa:f7:9b:a4:4f:6e:c0:cb:cd:4e:ce:a7:72:5c:ff:dd:
d2:77:99:19:8c:3d:7c:99:4e:23:bf:24:1a:b9:08:40:44:b1:
41:58:1f:ed:fe:9e:cf:d6:ce:ae:ac:3c:1f:3d:51:b3:18:e3:
be:0b:c2:1f:29:1c:e0:d0:f4:bd:d4:5c:8d:57:39:ef:df:00:
b7:40:98:c5:c8:c2:51:14:2a:35:b4:ba:eb:dd:de:9d:cb:84:
5a:5c:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:07 2026 by rpki-client