Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143123.roa
File: AS143123.roa (raw, json)
Hash identifier: SXpKswu3E1WZeS3CkmhA5y3LpVGGvnrub49yEnAKgtU=
Subject key identifier: 36:0E:51:B1:AF:50:74:B1:4C:F2:DD:4F:8F:FB:A6:5C:A4:5F:62:05
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 73C620D003ADF387DA1A8E5BE2EAEA1F3A701068
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143123.roa
Signing time: Fri 22 May 2026 07:08:42 +0000
ROA not before: Fri 22 May 2026 07:03:42 +0000
ROA not after: Fri 21 May 2027 07:08:42 +0000
asID: 143123
IP address blocks: 240a:a1d9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c6:20:d0:03:ad:f3:87:da:1a:8e:5b:e2:ea:ea:1f:3a:70:10:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:42 2026 GMT
Not After : May 21 07:08:42 2027 GMT
Subject: CN=360E51B1AF5074B14CF2DD4F8FFBA65CA45F6205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:b1:92:4a:4e:70:9c:63:26:39:0f:77:b5:
60:7d:78:c5:d2:b0:18:52:8b:8a:a8:17:1b:86:41:
db:f3:8f:11:7a:2c:16:9d:b8:17:46:48:8f:0a:81:
29:66:87:2b:2c:c2:53:f1:88:6a:8b:b0:3d:7c:0d:
14:a1:13:9c:21:f5:2a:41:d5:42:64:f5:32:13:41:
b8:35:10:69:65:e9:df:fc:4f:e8:f6:5a:9d:33:bd:
3c:cf:cb:61:63:59:e4:db:14:bd:23:97:6f:0c:45:
1c:6d:ed:51:9f:ec:e0:d1:e9:ee:55:26:13:6f:3b:
36:e7:3e:84:79:12:c7:70:4b:1d:82:71:f4:b6:9b:
c4:fd:10:37:7d:e1:48:6b:22:f3:cc:81:56:49:7b:
0e:af:41:ab:fb:80:0d:f1:91:97:68:56:2d:cb:94:
32:41:96:f0:31:6d:9f:c8:9a:ea:37:e2:89:9f:e4:
85:6e:91:5a:92:41:62:59:c9:2b:9e:c4:fe:2d:32:
29:48:78:17:95:66:94:14:01:e1:87:36:bd:c9:fc:
af:16:35:fb:9f:46:9c:51:58:0a:7f:3c:27:2c:e7:
5d:a6:93:27:ef:ea:76:95:73:3a:68:c6:a4:f2:f0:
8f:57:2d:2b:41:2a:43:5a:45:c0:be:72:a4:e4:78:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0E:51:B1:AF:50:74:B1:4C:F2:DD:4F:8F:FB:A6:5C:A4:5F:62:05
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143123.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1d9::/32
Signature Algorithm: sha256WithRSAEncryption
b8:18:e4:7d:0e:87:f3:da:dc:29:bf:42:a2:cc:16:d0:4e:e2:
de:96:b9:9f:1b:2b:ba:41:79:bd:f4:ca:1b:cd:ae:58:a4:0d:
5f:45:4a:f7:8c:2a:cb:1e:8f:4d:95:b7:74:52:db:60:b9:d9:
25:9b:f3:45:70:81:91:6f:f4:47:78:92:b1:c4:e2:d3:1f:c8:
47:90:71:86:4a:cb:87:f4:c6:b5:3f:9e:b8:8c:c1:19:5a:a2:
85:54:3b:b2:6f:b9:80:38:4f:38:ad:6e:2f:67:aa:fd:55:95:
bc:0b:8f:52:82:90:75:26:e6:26:13:b3:be:56:0f:ad:ab:02:
93:a8:47:a9:09:2f:a6:01:2c:18:bb:e8:1e:8d:cf:17:f5:6c:
61:2e:0c:4d:f7:92:fb:d5:28:66:94:b1:3f:83:90:21:7b:c1:
f5:98:44:87:36:e2:55:59:d0:da:1b:84:0e:36:d3:24:15:94:
4d:ea:65:e9:e4:b1:fe:96:8f:48:49:25:6a:23:5b:87:59:0a:
d8:82:b7:d0:63:59:72:3c:b2:89:6a:49:5f:02:e6:02:a1:b0:
65:15:8e:ae:48:7c:74:59:81:d5:b7:da:f9:b2:c6:9f:91:89:
5c:77:64:66:e4:7c:3f:20:6c:ea:a4:a6:70:60:5e:ca:37:31:
af:70:44:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:39 2026 by rpki-client