Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143144.roa
File: AS143144.roa (raw, json)
Hash identifier: YLQ+65OHo3u5uPG/GuG6XjPICvs31I+WsoFj2DyQMBc=
Subject key identifier: D0:3F:12:A2:EC:15:7F:E8:5A:08:FB:3E:CC:C0:FC:70:9E:48:E0:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7B3C5FEA02075780FFE1E6E25A20ED60A5A5E3CE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143144.roa
Signing time: Mon 25 May 2026 01:51:12 +0000
ROA not before: Mon 25 May 2026 01:46:12 +0000
ROA not after: Mon 24 May 2027 01:51:12 +0000
asID: 143144
IP address blocks: 240a:a1ee::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:3c:5f:ea:02:07:57:80:ff:e1:e6:e2:5a:20:ed:60:a5:a5:e3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:12 2026 GMT
Not After : May 24 01:51:12 2027 GMT
Subject: CN=D03F12A2EC157FE85A08FB3ECCC0FC709E48E017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:ca:41:ce:82:79:c0:e3:c3:15:cd:b3:2b:
8c:41:f8:3f:a2:44:db:95:42:01:cc:75:eb:08:50:
fd:d4:14:ff:ed:56:c9:6c:07:57:33:9a:41:77:c5:
84:b0:4c:50:50:49:d3:fd:3c:da:83:45:1c:5b:a3:
2d:e3:3f:38:8a:7a:68:e9:b1:e3:fd:39:b4:d4:02:
71:69:4a:6b:73:5b:e6:75:8b:ea:ca:5f:43:b7:c6:
d7:3e:57:00:d1:f4:43:4f:c7:43:e2:9f:26:cf:d1:
e6:c8:06:03:95:4f:f4:d1:f5:55:91:4f:17:f9:96:
98:95:9c:97:65:46:fa:9c:0f:cf:8e:39:64:25:5e:
2c:e9:0b:de:da:7d:89:33:8c:40:07:3a:6b:54:8c:
05:61:f7:16:2c:ed:4a:08:d3:45:53:56:c3:9a:b7:
8b:c0:5c:7d:18:18:00:e2:86:2e:82:6d:bf:8e:73:
3d:48:35:51:fd:ee:9b:5c:7a:3c:4d:c1:1f:91:63:
e5:5c:fc:a9:5d:fc:f7:89:51:44:a6:09:01:80:6b:
fe:f6:d0:cc:93:22:cc:98:28:15:b2:41:f1:0c:73:
77:d4:e7:09:01:7a:b1:83:12:f6:9d:20:87:ad:c2:
1b:be:62:5d:33:aa:7d:a3:b7:a3:88:64:84:ef:75:
10:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3F:12:A2:EC:15:7F:E8:5A:08:FB:3E:CC:C0:FC:70:9E:48:E0:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143144.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1ee::/32
Signature Algorithm: sha256WithRSAEncryption
13:0b:6f:da:64:b6:9e:02:11:64:cc:5c:c5:a0:48:68:f8:50:
bb:21:62:d9:8b:20:02:be:7f:41:12:11:97:d0:61:2c:b1:dc:
dc:b7:a6:0b:1f:e1:c2:12:7b:0b:be:88:33:5a:07:15:2e:cd:
1d:00:01:96:ae:1f:89:bf:1a:9c:33:0d:ac:9d:d3:8f:7e:41:
06:ac:93:76:9f:13:a3:97:24:98:03:89:04:26:0c:5f:e7:b2:
82:4e:00:4f:e3:8b:9d:18:68:f5:65:62:e9:4d:f6:e9:24:f4:
2c:91:9f:ec:71:42:98:2b:cf:ad:7c:19:2d:78:35:52:c3:c0:
54:00:1c:90:3c:7d:a9:5d:4d:88:0b:fd:6d:e2:30:73:26:5b:
39:3c:b5:77:31:64:1b:06:1f:44:b6:22:92:48:fc:1f:95:7f:
2e:74:fd:4d:a0:32:85:e0:97:89:20:f2:2c:6a:d6:81:f8:cc:
22:84:76:c3:e1:53:a2:8b:b7:75:b9:19:4f:86:c0:74:87:a9:
74:18:ab:85:94:b6:be:6e:74:66:14:9b:30:6f:55:a2:50:18:
e8:bf:8d:36:a4:c7:62:66:b4:68:41:7e:9d:5a:cf:a3:13:e1:
db:b8:b0:57:5a:0d:da:12:14:a7:30:e4:fb:55:b0:16:1b:72:
d0:63:4e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:53 2026 by rpki-client