Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143128.roa
File: AS143128.roa (raw, json)
Hash identifier: pvUSJLBnuS30PYgeY4DHOZ/lZpIvsWMUCtxdxb9LQjc=
Subject key identifier: EF:B4:00:5C:EB:5B:17:5D:4A:17:22:DA:87:D2:68:63:65:FF:CF:5B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 44B4F7D825B8D0E0F10A7C76C30D13906936F1AA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143128.roa
Signing time: Mon 25 May 2026 02:22:15 +0000
ROA not before: Mon 25 May 2026 02:17:15 +0000
ROA not after: Mon 24 May 2027 02:22:15 +0000
asID: 143128
IP address blocks: 240a:a1de::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b4:f7:d8:25:b8:d0:e0:f1:0a:7c:76:c3:0d:13:90:69:36:f1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:15 2026 GMT
Not After : May 24 02:22:15 2027 GMT
Subject: CN=EFB4005CEB5B175D4A1722DA87D2686365FFCF5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:cc:d3:1c:3b:53:66:7e:06:99:57:bd:8d:
3c:e7:60:95:c8:a2:6c:3e:ff:03:5d:d8:e0:98:69:
55:75:38:eb:8c:98:18:9a:8f:0e:e4:95:48:92:95:
63:4d:2a:97:bc:6e:08:80:b4:7b:97:89:ec:97:56:
74:9b:b5:c3:6b:e0:2d:93:6b:2d:c1:6b:2a:a2:1a:
89:72:d4:59:a8:81:bf:22:8d:55:63:2e:16:68:28:
b8:e9:b2:7b:29:88:50:6c:7e:a7:d9:24:d0:02:4a:
f7:ca:6a:ca:ed:b1:ca:ef:3b:2c:ab:ad:9d:ec:dc:
7a:c5:66:31:31:05:ab:85:5a:8f:9b:fb:f6:ba:11:
0e:7e:48:0e:d0:5d:13:f4:a9:6f:4d:e7:00:6a:dd:
28:80:22:ca:10:16:7f:1e:68:6e:3d:e9:3e:9b:5d:
5f:5e:ff:75:59:21:10:ba:d7:74:2e:c6:d1:83:0e:
db:ea:5c:fa:73:b7:df:0a:63:d0:e8:ac:31:de:08:
04:7f:3a:d9:18:49:95:f9:5d:30:a8:5f:16:85:08:
c2:7c:67:fb:9e:ed:cd:5d:07:01:78:8d:ed:0f:63:
30:7a:c8:42:35:c0:57:74:3c:37:0b:83:d4:ae:83:
db:37:25:d3:e0:d4:bc:fa:65:94:0e:20:e9:31:24:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B4:00:5C:EB:5B:17:5D:4A:17:22:DA:87:D2:68:63:65:FF:CF:5B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143128.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1de::/32
Signature Algorithm: sha256WithRSAEncryption
8e:f3:73:9b:8c:c2:22:df:78:19:ec:2b:df:c5:3e:71:a2:53:
54:ae:0b:fe:ff:36:11:6f:cd:6b:93:c6:c8:a3:4f:02:d1:6c:
96:21:37:a2:54:d1:d6:66:58:cd:f3:ac:f7:82:83:9b:9b:63:
c4:41:4c:7a:86:51:70:cc:ad:e0:b2:58:bd:00:71:b8:86:22:
63:68:bb:66:97:96:88:67:6f:93:04:fd:f3:28:7b:6a:53:14:
94:9e:2b:91:93:b5:86:c3:6c:8a:02:4c:2b:82:96:fa:54:1f:
b4:e5:c0:b1:1b:22:38:74:bb:f9:11:62:6a:e3:47:20:06:38:
ec:d2:d1:46:ee:4e:f1:88:71:a6:b8:57:56:52:60:f1:86:cf:
a0:6f:18:88:64:a4:0c:00:c0:13:86:de:d9:47:83:60:3b:ea:
d8:99:00:c9:b8:cd:a0:91:a7:74:91:91:c0:d3:2d:ae:8e:09:
f6:63:f7:d3:ed:f0:54:cf:17:a0:a1:06:a5:82:9a:c0:68:3d:
21:ed:56:f4:1b:23:93:b2:1a:e0:ab:57:e2:ab:2c:5c:5c:14:
6b:5b:ce:b1:70:b2:7d:4f:94:25:8a:07:57:69:e9:45:e5:79:
35:e2:84:9f:4e:bc:ab:04:cf:f6:35:bf:e8:db:4b:0b:c4:0f:
b0:24:cb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:09 2026 by rpki-client