Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143127.roa
File: AS143127.roa (raw, json)
Hash identifier: efZbMA91rpe3Tyxhw58iiSOZZ9+FME/J7AuDzhUw5wM=
Subject key identifier: 2E:0F:6B:E7:0F:F9:39:6D:0A:9E:F3:7D:FE:D0:12:0D:D9:F4:4B:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 738E59F429345A72E5A8B72AD746472180FF57D9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143127.roa
Signing time: Fri 22 May 2026 04:26:55 +0000
ROA not before: Fri 22 May 2026 04:21:55 +0000
ROA not after: Fri 21 May 2027 04:26:55 +0000
asID: 143127
IP address blocks: 240a:a1dd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:8e:59:f4:29:34:5a:72:e5:a8:b7:2a:d7:46:47:21:80:ff:57:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:55 2026 GMT
Not After : May 21 04:26:55 2027 GMT
Subject: CN=2E0F6BE70FF9396D0A9EF37DFED0120DD9F44B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:bf:45:9f:fd:3d:ac:eb:e0:af:89:d2:b0:
5a:91:45:49:51:5b:95:ca:76:69:60:97:ff:93:ba:
fa:37:dc:ef:8d:39:87:69:6d:31:a9:3a:57:49:22:
31:75:79:49:77:d1:7d:a4:a8:69:b2:88:90:57:1e:
10:39:d3:9d:b8:05:dd:2a:e6:81:c6:67:27:61:eb:
14:71:d1:d6:d1:4f:c8:fd:46:59:0b:71:99:5e:0f:
76:79:34:0b:17:11:04:35:ec:d2:06:95:0f:9a:40:
83:7d:41:97:9b:49:f5:1a:bb:c3:77:f6:77:21:58:
0f:0d:f4:e7:e2:f3:33:41:cc:2e:96:79:cf:51:58:
b4:48:63:be:15:7c:16:20:83:4c:c4:cd:c2:03:73:
0e:c6:e8:f0:dc:6a:e7:0b:e0:3b:24:e5:26:b9:48:
c9:de:d5:6c:bd:99:e4:99:4a:f1:ce:52:cd:18:36:
33:64:d3:65:a9:8d:00:a8:cd:07:66:ab:22:23:f4:
ee:ed:f8:3d:ed:59:70:38:6f:dd:67:d7:f4:5e:1d:
ad:98:be:3a:6e:2c:8e:5d:4d:80:fe:ce:74:63:c0:
f2:ff:27:91:6b:64:b0:c5:1b:14:d6:96:24:6c:14:
4c:21:bf:3c:5b:68:a7:92:86:13:70:25:ff:47:8f:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0F:6B:E7:0F:F9:39:6D:0A:9E:F3:7D:FE:D0:12:0D:D9:F4:4B:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143127.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1dd::/32
Signature Algorithm: sha256WithRSAEncryption
7a:61:18:c4:d4:a3:27:e9:5d:b6:15:29:15:b9:c3:b8:07:74:
57:34:ce:4a:56:3f:52:f1:36:f9:6b:e3:c0:2f:da:92:69:c4:
3f:4a:50:7a:6e:d4:2c:88:9a:39:3f:bc:eb:a0:b9:a4:9b:7b:
1e:ae:55:f1:2c:8a:5d:52:42:4a:f4:e8:66:be:c7:23:8d:22:
d2:8c:8d:f9:42:13:d6:99:5a:40:cb:2c:d2:13:a2:db:33:07:
fa:e8:0f:60:1f:cc:04:16:1c:5f:b6:56:14:d4:8d:9a:1a:f6:
dc:0d:0e:1d:b0:30:57:b9:78:d5:b3:96:d6:8b:f4:5b:21:95:
81:56:bf:58:16:e4:89:69:dc:1a:c3:cf:56:87:ff:8b:7e:05:
8e:56:30:47:26:0b:b8:6c:30:37:6e:d7:43:73:9c:47:79:9e:
19:ae:af:5d:f0:30:9d:48:3c:85:79:1d:40:a5:c0:31:b4:d6:
31:9a:6d:62:85:25:f6:4a:5b:c9:f6:cc:da:0e:24:2e:5b:dd:
7f:5f:dc:75:3b:66:ef:c4:0e:ca:7b:cc:c5:3f:1f:64:f6:41:
bb:4c:28:65:4b:ff:80:9c:3d:7e:30:bd:4a:b8:c5:33:b7:89:
3c:9e:23:b0:de:72:0c:79:46:6c:15:5c:07:1b:05:ab:b0:18:
44:63:56:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:39 2026 by rpki-client