Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143148.roa
File: AS143148.roa (raw, json)
Hash identifier: 9zsBK6Ty2qTOJEzTG1qDE7icffC27a2TmCqvD/z7npc=
Subject key identifier: 21:8A:FA:A9:89:45:89:BC:FE:18:C9:F6:C7:E8:D3:65:FF:E4:7E:F8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 24802C58456628EFBEDBA37FB9008F034EFF8C18
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143148.roa
Signing time: Mon 25 May 2026 01:51:09 +0000
ROA not before: Mon 25 May 2026 01:46:09 +0000
ROA not after: Mon 24 May 2027 01:51:09 +0000
asID: 143148
IP address blocks: 240a:a1f2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:80:2c:58:45:66:28:ef:be:db:a3:7f:b9:00:8f:03:4e:ff:8c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:09 2026 GMT
Not After : May 24 01:51:09 2027 GMT
Subject: CN=218AFAA9894589BCFE18C9F6C7E8D365FFE47EF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:fa:77:a6:c9:21:9e:bc:36:77:4d:8b:2c:
67:77:f7:df:c2:94:a7:5e:33:f0:f9:ea:2f:8b:66:
83:6c:d9:8c:6a:67:36:97:16:4f:7e:76:d8:45:77:
23:32:73:98:45:7e:87:fd:2d:8d:17:84:ee:7e:d5:
6f:26:55:eb:f7:9d:a4:bb:60:99:1c:01:f8:ea:e1:
b8:ea:6d:90:73:11:26:aa:fd:bf:69:26:8e:ce:b8:
ed:e5:6f:29:e5:d5:50:0a:15:91:0d:cb:2b:83:9d:
84:dc:30:81:ba:ef:3e:46:02:6a:00:7a:bc:90:76:
ac:13:10:70:07:3b:07:54:19:fe:47:5b:2d:90:e9:
23:d2:fd:44:45:26:f3:b2:e7:3f:50:26:a6:b8:48:
a5:f1:77:23:13:c5:b0:7f:d7:9b:80:87:e6:59:27:
71:2f:0e:d0:cd:a3:06:37:67:25:ca:a3:67:3c:80:
3b:24:55:39:d4:77:83:86:24:37:a5:1f:20:c6:f2:
aa:67:a4:07:57:5a:3b:23:98:e9:b6:4e:f3:e3:08:
00:0a:da:3a:fc:8a:2f:04:51:ac:e4:a3:33:2c:95:
e6:a3:f5:58:36:51:96:3e:8c:31:d5:bc:90:64:81:
a4:9a:9f:ba:8a:68:6b:70:13:92:b6:ce:36:99:93:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8A:FA:A9:89:45:89:BC:FE:18:C9:F6:C7:E8:D3:65:FF:E4:7E:F8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143148.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1f2::/32
Signature Algorithm: sha256WithRSAEncryption
31:f2:55:a6:cb:f1:d6:1e:e2:e1:e3:0d:d8:c6:1c:c3:36:5f:
1d:e3:d7:57:fa:0c:d6:ee:27:3a:9c:10:d2:fc:36:32:aa:b3:
19:22:24:70:a9:3f:e6:ed:31:41:e6:a8:37:71:f0:f4:b0:2a:
6b:72:69:12:26:77:c4:2d:49:3d:da:6d:a1:7d:08:1c:f1:da:
06:35:95:06:37:83:60:2c:0b:0f:8d:50:87:0f:4a:b3:77:a7:
a8:cb:95:15:67:f1:f3:10:69:ff:c9:03:1b:56:e8:af:6d:72:
a5:32:77:8e:f2:01:bd:93:a6:38:0d:eb:03:f3:f5:f0:7c:0a:
40:e2:c5:e7:cf:74:3c:24:90:65:dd:a8:82:36:40:d5:e0:52:
3d:9f:fe:b0:2d:fb:e9:ad:77:8d:c8:1f:71:1a:a9:2f:dc:09:
2d:a1:d3:8b:f7:ae:75:1b:04:9f:1e:b3:7e:2e:44:64:51:4d:
fa:48:98:c3:4f:da:92:3a:b0:14:16:e5:ed:f8:4d:e1:31:5e:
ad:8c:9f:de:2e:da:9e:e7:77:09:9a:65:05:ee:f3:15:b6:43:
e9:22:aa:a5:4f:c1:33:a7:2b:1b:d3:71:c9:34:de:85:67:5f:
19:a4:77:a7:a9:6a:7a:f3:a9:c9:34:6a:72:d3:c1:ff:1f:00:
d2:85:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:27 2026 by rpki-client