Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143145.roa
File: AS143145.roa (raw, json)
Hash identifier: Jvkoja0V+lgh+UcRuskqDNNImiU4iK+un02+gEyp/CU=
Subject key identifier: 81:CE:22:74:62:07:93:0D:51:BC:D6:C1:A7:7A:7F:CA:FE:B8:15:62
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3861EC859E1F429CA0D575931C06E31522B20996
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143145.roa
Signing time: Fri 22 May 2026 06:27:53 +0000
ROA not before: Fri 22 May 2026 06:22:53 +0000
ROA not after: Fri 21 May 2027 06:27:53 +0000
asID: 143145
IP address blocks: 240a:a1ef::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:61:ec:85:9e:1f:42:9c:a0:d5:75:93:1c:06:e3:15:22:b2:09:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:53 2026 GMT
Not After : May 21 06:27:53 2027 GMT
Subject: CN=81CE22746207930D51BCD6C1A77A7FCAFEB81562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f0:74:9f:b5:ee:ac:21:9b:c8:9a:5c:c7:e5:
d4:a3:84:39:4f:8e:ac:23:92:49:15:63:8d:4c:60:
90:6a:c0:03:31:44:ee:ae:2d:d2:f7:ee:62:a5:45:
b7:5e:3d:24:cd:d0:50:ea:ec:e9:d2:3f:cf:7d:ef:
1a:87:ce:d7:8b:b1:8c:30:4d:f1:00:8c:15:c5:b2:
09:bb:0c:f5:8f:21:86:a8:17:0f:ac:65:ab:fc:a7:
bf:24:b9:f3:0f:86:74:f4:9e:8b:75:25:04:a5:50:
1a:71:1e:8b:ba:33:00:ef:52:68:3f:10:41:81:e0:
13:e5:83:bb:ec:d7:fe:97:e2:81:2f:be:0a:6c:33:
1c:a5:67:d9:1a:71:43:af:75:60:32:88:b5:15:3a:
9a:56:7d:a4:82:a7:d0:eb:3a:74:6a:2b:2e:20:42:
20:35:a9:58:3a:2a:64:0f:08:db:74:ce:68:d4:49:
cf:80:c0:7a:ab:ba:74:57:56:8d:bb:26:5b:3f:36:
f8:21:ea:78:76:e5:05:3f:c7:28:37:80:ee:b9:9e:
fa:fd:f9:5e:3f:a3:c6:f5:ad:e7:57:96:22:6c:80:
da:62:b4:f2:bc:75:4e:54:0c:5b:08:7e:76:7c:9e:
5b:04:c0:42:4a:bd:9b:20:f5:df:4f:97:34:55:ae:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CE:22:74:62:07:93:0D:51:BC:D6:C1:A7:7A:7F:CA:FE:B8:15:62
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143145.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1ef::/32
Signature Algorithm: sha256WithRSAEncryption
8c:ee:00:b2:53:b3:5b:5f:b4:23:d4:ad:90:a3:00:0d:14:8e:
60:12:cf:6e:62:df:3c:aa:ee:41:58:49:76:a0:6a:dc:01:b2:
25:9c:25:1f:23:66:de:25:61:ae:ba:6d:03:97:1e:21:9b:3f:
ca:7e:60:80:ba:f9:64:b2:42:79:c0:6e:32:5e:73:4b:87:54:
12:31:18:f1:51:46:15:0f:f7:5a:72:e6:3c:3c:6f:f1:4e:f3:
24:09:8b:a4:07:4c:35:96:9b:d4:5c:77:24:44:61:1a:5f:c0:
3a:58:0f:2d:6b:8f:01:48:bf:d7:a7:99:29:e9:a9:4a:bb:11:
96:f8:c7:c4:3c:2b:c5:44:c3:97:de:a2:9f:9e:69:49:45:62:
a1:14:34:96:7f:12:16:48:05:a3:90:cb:6b:a2:a1:2d:74:f4:
d4:7e:a4:5e:ca:64:f6:03:29:f8:52:6d:2e:e2:8e:dd:84:b4:
ea:8a:8e:91:19:8d:23:54:77:2f:72:96:4a:4a:c5:01:ba:d8:
76:24:39:d6:97:66:fa:74:e3:b6:40:92:06:20:bc:f2:ec:ff:
6c:e9:dd:2e:aa:58:78:f9:40:08:64:7e:d9:69:f5:5a:15:66:
4a:b5:2b:2a:e1:8a:b0:db:5f:4b:dc:c9:8e:99:5c:ae:6d:d9:
2c:04:76:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:29 2026 by rpki-client