Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143136.roa
File: AS143136.roa (raw, json)
Hash identifier: KuEJY6UClrkLuB7yjhFSo1y8+8IW1eh5WHgvC44Ul8w=
Subject key identifier: 0B:0D:B3:CB:F6:70:93:93:A2:0A:D1:37:45:0F:EE:DC:21:1D:92:AA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3795E8D7C05F93A902B7587E82576D9070CD116A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143136.roa
Signing time: Tue 26 May 2026 01:13:27 +0000
ROA not before: Tue 26 May 2026 01:08:27 +0000
ROA not after: Tue 25 May 2027 01:13:27 +0000
asID: 143136
IP address blocks: 240a:a1e6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:95:e8:d7:c0:5f:93:a9:02:b7:58:7e:82:57:6d:90:70:cd:11:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:27 2026 GMT
Not After : May 25 01:13:27 2027 GMT
Subject: CN=0B0DB3CBF6709393A20AD137450FEEDC211D92AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:3a:df:3c:8b:ec:61:e9:de:24:da:d8:ac:
4b:79:f8:01:84:40:5f:98:18:9e:9c:38:cf:92:c6:
12:43:f1:ee:69:5e:02:a9:cb:9d:22:5f:de:38:e6:
24:83:2e:ce:49:a5:32:10:69:67:7c:2f:b9:e2:2a:
d2:dc:5b:d8:fa:90:e0:c3:43:1d:95:a5:d4:b9:0e:
78:91:d6:30:96:18:6b:56:a7:1a:47:51:90:24:b6:
c0:ba:96:09:d2:d4:0f:11:72:a0:75:79:65:1a:5f:
99:1f:70:47:01:3d:d6:05:39:9d:2c:67:c5:c1:df:
0c:66:54:bd:66:b7:73:50:fa:af:72:5a:7d:46:53:
08:c1:95:ac:7e:12:4e:49:73:d4:99:7d:5d:ec:99:
ac:1c:d7:68:a6:e1:83:02:0b:e0:43:b5:67:b3:76:
23:e2:5b:43:62:2a:51:ad:c5:54:44:87:e2:f2:aa:
1d:d4:51:c4:04:5e:ca:3c:aa:e4:5c:65:c4:88:5a:
07:5a:34:ec:af:01:cb:8a:d3:89:a8:4c:bc:81:49:
37:17:1f:5b:2a:6c:68:5f:79:11:59:63:49:be:55:
0a:62:23:5e:46:21:df:4d:f3:bb:0e:03:8d:c6:57:
8e:23:08:6b:2b:4f:e2:92:60:38:89:88:43:b2:85:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0D:B3:CB:F6:70:93:93:A2:0A:D1:37:45:0F:EE:DC:21:1D:92:AA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1e6::/32
Signature Algorithm: sha256WithRSAEncryption
82:8c:a0:62:5c:59:cc:02:ba:67:04:a1:69:6f:32:fd:4f:2c:
4c:b3:1c:77:28:ee:8f:70:10:9c:99:c5:e9:9d:83:f8:2f:12:
99:6b:6e:b1:f4:bb:a9:bb:04:55:d4:91:8c:f7:55:73:a5:ca:
76:ca:f9:fc:7a:1f:7b:ff:66:f9:34:a3:65:e0:9f:6e:28:bb:
c0:7a:32:2c:63:8a:6c:27:34:27:be:5f:b5:87:57:10:d6:e0:
93:eb:3f:54:a2:f4:2c:d4:ec:97:56:e8:0e:bc:1b:8a:fb:b6:
a4:01:13:70:01:6d:f8:1a:20:54:19:a0:7b:f4:d1:f6:c9:e4:
a8:16:18:63:89:db:66:1d:39:af:f8:b7:e8:09:53:b0:17:ea:
c2:60:b7:43:fa:aa:f6:e6:14:84:c4:1f:99:f8:68:81:b3:c5:
53:d9:34:d6:cc:a0:1a:30:25:7b:f6:23:9d:df:50:25:7a:15:
f2:db:4b:5d:1d:8e:3f:bc:4f:c5:a2:fe:55:89:4a:aa:4c:9a:
b8:2c:08:46:7d:d5:6f:77:86:76:1f:28:bb:70:ff:08:b4:b5:
2a:92:45:96:3c:d2:58:b6:9e:3a:b5:32:49:6d:61:fa:2f:de:
34:f4:dd:f2:4e:c7:4d:51:ba:65:20:af:9e:51:a6:8e:29:01:
77:f8:43:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:42 2026 by rpki-client