Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143155.roa
File: AS143155.roa (raw, json)
Hash identifier: n3EYnxHGjYA1FHxRq+CAcuuLaMsg40s1LJ7qwKEVOj4=
Subject key identifier: D8:DC:BE:B0:91:CF:93:4D:7D:BC:40:E6:D0:DA:70:F2:9D:02:00:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6604F969B74ADB93E122824372442E4EE1816111
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143155.roa
Signing time: Mon 25 May 2026 06:48:50 +0000
ROA not before: Mon 25 May 2026 06:43:50 +0000
ROA not after: Mon 24 May 2027 06:48:50 +0000
asID: 143155
IP address blocks: 240a:a1f9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:04:f9:69:b7:4a:db:93:e1:22:82:43:72:44:2e:4e:e1:81:61:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:50 2026 GMT
Not After : May 24 06:48:50 2027 GMT
Subject: CN=D8DCBEB091CF934D7DBC40E6D0DA70F29D020010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:5c:f6:6f:27:1e:0f:99:9e:f4:c1:dc:cd:
29:71:2c:8c:6c:63:cf:26:34:29:5e:fd:1c:cc:4b:
9b:14:6c:b4:88:12:b9:cf:57:a0:c0:1b:0f:46:1e:
39:aa:35:32:74:51:21:64:18:75:28:9d:51:b0:d4:
97:d2:ae:e0:6f:c3:0c:42:b9:a3:83:56:08:b4:a3:
ea:04:db:24:cd:6d:70:f4:b4:11:3d:36:12:7e:76:
17:68:86:86:2f:f2:d6:93:a7:e7:4e:09:40:94:f9:
ea:fe:a7:fd:62:cf:58:e9:ae:09:7f:a6:50:5c:c5:
d8:eb:2d:d7:bd:10:a2:63:cb:e3:9d:a6:9e:df:0a:
39:ad:d7:7c:0c:99:f2:01:5f:8d:45:32:b3:27:12:
2f:f0:b3:1f:f8:a6:b5:23:6b:52:0c:bf:26:26:0a:
1f:93:52:41:0c:42:c5:8a:9c:3f:3b:17:34:7f:97:
e2:75:51:bd:1e:c4:62:2b:e3:67:69:0a:b0:66:bd:
80:e9:92:0f:0e:17:07:82:0c:dc:15:62:8c:1e:ca:
e1:5a:f6:ef:c0:33:a7:1f:13:26:9e:85:76:49:86:
4d:1b:0f:ab:5a:79:05:6b:38:af:05:64:21:ea:4b:
6a:7d:5a:d8:9d:ea:35:91:91:6b:01:58:6f:50:6d:
82:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DC:BE:B0:91:CF:93:4D:7D:BC:40:E6:D0:DA:70:F2:9D:02:00:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143155.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1f9::/32
Signature Algorithm: sha256WithRSAEncryption
ae:0a:0e:5e:1f:d6:2b:ca:a2:d9:d8:64:41:97:10:fa:98:36:
89:87:0f:1d:6c:6b:d2:2c:67:ef:f0:3d:d2:c7:ad:c4:e9:6b:
72:c3:35:e5:50:bd:91:e0:b8:62:da:86:e5:59:fa:a9:f7:d7:
a7:eb:bd:33:21:fe:71:9b:64:ce:a7:2d:87:15:ea:f9:37:be:
d2:6a:2e:9c:88:53:11:ff:ec:5f:26:83:2d:4c:f5:44:e1:5b:
f8:60:65:dc:aa:33:6b:d0:79:a0:7c:e5:98:8a:df:d6:ab:9b:
7e:76:f7:ae:6e:89:76:67:d4:b4:c5:65:98:96:4a:e1:42:38:
0e:3b:b2:02:1c:d2:30:82:33:ec:83:68:3d:9e:38:f9:e0:bc:
a3:38:46:83:10:09:4e:38:3c:c8:2a:03:e3:7a:e9:a6:ac:04:
d6:49:55:17:20:c1:68:f5:22:45:75:f7:51:17:ce:4b:ec:92:
19:ac:52:83:f8:c2:3e:ba:ac:cf:4f:e0:b1:15:3d:05:5a:ee:
ce:7c:06:b2:f8:a1:cf:11:64:fe:54:23:5e:fb:4b:b2:5d:39:
fc:47:21:e0:4f:20:83:2b:94:57:31:cc:1c:3c:3e:cc:77:9c:
f7:18:69:2a:1e:6c:10:9c:1d:f3:c3:8e:ef:fe:17:8e:40:70:
17:0c:07:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:55 2026 by rpki-client