Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143133.roa
File: AS143133.roa (raw, json)
Hash identifier: l1dFbSrwXE8xTYk/A5imDffJIXzugSIEs+ng3PRtZBk=
Subject key identifier: 5E:5D:2F:B3:CB:9D:BA:28:13:53:11:74:5B:2B:6B:41:61:85:8D:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4972807B61CC3E7F79F0383E16FB4C631E069BFD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143133.roa
Signing time: Mon 25 May 2026 06:48:55 +0000
ROA not before: Mon 25 May 2026 06:43:55 +0000
ROA not after: Mon 24 May 2027 06:48:55 +0000
asID: 143133
IP address blocks: 240a:a1e3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:72:80:7b:61:cc:3e:7f:79:f0:38:3e:16:fb:4c:63:1e:06:9b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:55 2026 GMT
Not After : May 24 06:48:55 2027 GMT
Subject: CN=5E5D2FB3CB9DBA28135311745B2B6B4161858D70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:b4:a8:6a:4a:97:87:ce:ee:52:af:41:63:
20:1c:c2:30:29:12:47:0a:43:ef:87:15:92:11:3c:
9d:99:5c:6d:a0:2f:b9:1e:d5:c6:0c:04:c2:66:e9:
28:87:4b:ac:c3:b5:3b:17:fd:be:89:46:9a:be:b5:
26:e7:74:2b:ba:04:ad:6e:db:7f:48:4e:f0:d3:9b:
f7:6d:a2:85:cc:3c:71:6a:17:28:22:e3:68:bf:23:
a6:05:de:5b:71:0a:75:0e:6d:9c:8d:2e:b1:13:62:
61:2a:d4:82:61:51:93:12:94:9a:d3:40:06:3a:a3:
b8:fc:bf:f9:53:e4:63:bd:3e:72:03:13:58:db:1a:
84:b9:95:ad:01:81:28:3a:0a:bc:df:80:6f:94:bf:
c8:73:5d:f0:55:62:66:e0:0a:34:3d:3b:a4:92:26:
ca:05:0f:eb:e0:ba:0d:fd:fc:85:7d:9a:d7:88:43:
0d:c1:f3:7f:8f:a4:2c:88:81:92:44:20:c7:0d:e1:
19:ec:b0:39:c4:90:c1:65:99:33:46:a6:2b:d3:4b:
58:a7:47:b8:a9:ad:f1:49:33:2b:66:85:9a:f2:ac:
e3:6b:67:39:d4:11:c9:6c:0d:4e:d0:50:49:cc:8a:
98:34:44:d8:2b:f3:fb:0f:81:0c:fb:41:d7:93:09:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5D:2F:B3:CB:9D:BA:28:13:53:11:74:5B:2B:6B:41:61:85:8D:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1e3::/32
Signature Algorithm: sha256WithRSAEncryption
18:54:93:68:97:c4:27:02:ea:9f:63:6d:bf:bb:a9:31:60:31:
28:0b:67:56:cd:38:1d:45:12:ab:01:cf:22:19:13:9b:f4:2f:
36:50:bc:75:68:ae:d4:98:ce:fc:eb:25:f5:f8:cd:fb:b3:90:
66:e4:f4:4a:55:2a:4b:c9:6f:c1:23:bf:6b:75:ce:43:3c:ff:
b2:1e:bd:b6:3c:36:48:5a:12:12:8e:9e:bd:0e:8f:22:a7:03:
15:34:69:da:1b:5c:37:83:34:e0:20:1a:ae:06:42:5a:1f:98:
a9:91:d1:92:b1:13:c9:b6:1d:b2:6c:01:2d:75:de:3b:09:5e:
2d:86:41:ed:b5:05:19:19:83:83:80:10:26:9f:8c:0b:75:54:
f3:98:35:32:fe:f4:7b:2d:c8:0c:5a:8e:5d:21:1b:ff:cf:c4:
67:61:f0:5a:61:e8:a6:33:ce:39:53:a8:0a:c6:3c:e4:fc:8e:
86:83:a6:33:0a:b1:8e:2b:0f:d6:54:ae:2b:99:72:a9:50:c2:
db:56:6c:99:11:7f:ac:c5:c0:5c:e3:b8:11:c7:d9:4b:c0:a6:
e9:47:58:ad:09:35:75:ed:53:ac:6a:fe:a1:68:3f:89:2e:38:
fa:0d:a5:d6:ef:65:b8:bd:4b:ba:6c:e5:56:0b:1e:83:04:a9:
27:fd:67:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:21 2026 by rpki-client