Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143146.roa
File: AS143146.roa (raw, json)
Hash identifier: Whctr1bkrJB1dZUYnkd7rtKeOvoGCiOixTSDB+b8Rwk=
Subject key identifier: 59:08:4D:CF:C7:21:72:9D:0B:84:B2:0A:AE:2D:BA:1C:9F:49:35:F7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0D0949488CF84492F4C7A720A5F8EC6C1EB0CF2C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143146.roa
Signing time: Tue 26 May 2026 08:52:50 +0000
ROA not before: Tue 26 May 2026 08:47:50 +0000
ROA not after: Tue 25 May 2027 08:52:50 +0000
asID: 143146
IP address blocks: 240a:a1f0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:09:49:48:8c:f8:44:92:f4:c7:a7:20:a5:f8:ec:6c:1e:b0:cf:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:50 2026 GMT
Not After : May 25 08:52:50 2027 GMT
Subject: CN=59084DCFC721729D0B84B20AAE2DBA1C9F4935F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:2e:5d:b6:e9:30:8e:d4:69:df:1e:8f:a1:
c0:94:5b:16:23:83:d9:ed:27:9f:88:bd:5a:b4:2e:
1a:1f:d6:52:3a:ed:15:9e:49:4c:61:67:7f:0a:dc:
51:b1:f5:a2:20:a1:a1:a7:68:c8:aa:89:11:b1:57:
10:ff:1b:69:20:99:5d:25:26:35:3d:d2:fc:b2:b2:
86:32:5e:78:02:1d:83:2f:1f:91:64:90:dc:5e:34:
0d:90:5c:3a:6a:65:37:6a:c2:7e:0d:90:43:1a:df:
87:39:2c:76:68:e1:27:33:e9:3a:87:76:bf:41:49:
7c:b9:c2:f3:8a:b2:52:1e:9b:6d:d6:86:6a:be:76:
88:b7:53:50:0f:cf:1c:6f:aa:c3:c4:b7:ec:5d:80:
08:e0:fb:94:e2:84:3c:55:bb:59:9d:8f:69:2a:74:
f1:e6:7f:30:5b:a1:0d:47:7d:1b:f5:16:a5:2b:ce:
1e:39:3a:8a:de:54:2e:3e:ba:4e:41:ec:0f:da:f6:
9c:71:70:89:b5:9c:ea:10:f1:7e:d2:a7:0f:89:ec:
1e:e5:31:ce:d8:17:42:83:98:11:a7:e5:3f:18:ec:
64:af:86:56:30:fd:a8:19:58:0a:be:fd:b3:73:37:
6b:c8:a4:84:e1:b3:c6:b1:7b:3d:fa:88:fb:cc:bd:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:08:4D:CF:C7:21:72:9D:0B:84:B2:0A:AE:2D:BA:1C:9F:49:35:F7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143146.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1f0::/32
Signature Algorithm: sha256WithRSAEncryption
18:db:9b:c8:8e:d9:0d:8a:54:91:54:fe:3b:af:d8:d4:b2:53:
bb:14:5c:e8:7e:eb:0f:2a:0b:26:04:4a:f1:22:93:2b:3c:d3:
21:17:d8:a8:51:69:e6:f0:23:dd:8f:b0:f9:11:b9:e5:1f:fb:
19:d8:2a:17:58:88:6f:e9:99:ab:b8:f5:ca:9d:1f:a3:08:d9:
bb:15:11:bb:8c:d4:93:96:66:1d:12:25:13:6d:aa:f1:da:bd:
bf:c1:d2:ff:24:d6:5d:70:89:c5:08:d9:c1:bf:03:fb:82:dc:
b5:7a:86:fe:26:86:b9:df:84:02:22:f0:d5:7d:a8:f5:38:ad:
c2:6c:4e:1d:23:75:6e:80:c2:1f:72:3a:05:e6:13:1b:33:6e:
b7:bb:02:e9:46:34:7a:2f:b0:ef:63:c4:65:e3:38:4b:b5:77:
bc:71:f4:1e:d3:df:1f:77:60:04:78:2e:06:96:c7:c6:90:39:
43:d3:ff:92:73:78:d4:3e:ae:03:09:f6:cb:83:63:71:28:30:
ee:f4:01:d8:8b:c0:78:56:52:22:1d:77:0d:08:08:d7:56:c3:
8e:65:70:0d:b1:10:4f:d5:e8:f2:6a:1e:be:1d:01:87:b8:ec:
85:da:e3:65:d5:3f:a0:94:64:bc:4c:65:bc:72:8c:45:61:4e:
81:95:61:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:28 2026 by rpki-client