Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143157.roa
File: AS143157.roa (raw, json)
Hash identifier: uc2wJrMXXzfAyQaUz6vOjXW34RrdPET7no9qA5OP+0A=
Subject key identifier: 2F:4E:E3:CA:03:DD:79:71:1B:D0:F7:4A:E9:4B:6D:19:7C:D5:51:C6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7B619B8BD7CBAD40A051B338685D262DC468A27D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143157.roa
Signing time: Fri 22 May 2026 06:05:12 +0000
ROA not before: Fri 22 May 2026 06:00:12 +0000
ROA not after: Fri 21 May 2027 06:05:12 +0000
asID: 143157
IP address blocks: 240a:a1fb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:61:9b:8b:d7:cb:ad:40:a0:51:b3:38:68:5d:26:2d:c4:68:a2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:12 2026 GMT
Not After : May 21 06:05:12 2027 GMT
Subject: CN=2F4EE3CA03DD79711BD0F74AE94B6D197CD551C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:84:b6:9b:4a:6f:88:25:e5:66:7e:d0:57:
e4:4e:ad:c8:2b:a9:47:ba:22:b7:4f:19:63:ec:33:
0d:96:c7:6d:92:d5:f5:b6:61:d4:0e:49:61:f3:9a:
5e:fe:8d:b7:9d:04:aa:b4:c6:96:34:aa:90:c2:ce:
7f:5a:72:19:ed:64:90:cc:35:28:2e:8b:44:58:63:
1b:eb:43:59:cc:4e:17:ff:d7:d0:fa:17:89:85:74:
40:aa:83:8a:56:0c:a5:b3:2f:3c:11:b7:33:a2:1f:
fc:48:af:10:8c:0c:d6:25:33:35:dc:df:88:d8:e4:
0d:9d:df:88:2d:32:42:66:3b:d6:af:b4:01:94:10:
ae:be:e9:92:83:8c:d4:d0:62:b0:12:c2:c6:9f:a0:
3a:31:ce:92:23:50:72:46:6e:3b:be:86:43:d2:c1:
81:48:7d:34:e3:51:0d:61:13:a7:e3:7a:51:60:29:
4c:bc:66:f3:09:b3:cf:8c:e9:95:1a:0c:74:ed:54:
b9:df:f3:6c:e5:e8:93:b4:f4:75:c6:48:e3:2c:e2:
e1:e9:25:14:ee:39:77:c7:ca:b2:a0:eb:61:db:5c:
33:da:8f:e5:8d:2b:6f:c3:03:bd:68:01:97:37:89:
eb:16:4a:9a:2d:74:02:d9:87:d8:1d:a0:8b:8d:6a:
b7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4E:E3:CA:03:DD:79:71:1B:D0:F7:4A:E9:4B:6D:19:7C:D5:51:C6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143157.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1fb::/32
Signature Algorithm: sha256WithRSAEncryption
92:3f:ad:e3:19:f6:41:d7:a4:ae:75:f4:a0:b4:5e:0f:f8:e1:
09:c5:66:e3:27:5a:0c:82:9b:45:3d:14:12:58:88:bf:19:fa:
62:98:f2:bb:61:dc:fe:bf:f0:02:72:8d:b9:a8:2a:f3:60:60:
eb:c9:13:4c:0c:68:59:0e:74:18:53:30:92:33:ec:c3:fb:05:
8f:26:ea:09:d3:ad:94:db:a0:69:f1:c3:79:9f:60:7a:b1:3a:
46:80:8e:51:19:53:d5:16:c2:30:11:65:2b:4b:4f:89:50:fc:
7c:77:8a:d8:aa:b6:1a:6f:20:b4:2d:cb:be:1c:43:1c:8f:38:
af:fd:a9:93:50:22:fd:0f:84:ad:b3:95:40:5e:96:38:7a:d3:
f4:5a:45:df:0a:3a:8f:7c:55:64:4c:e4:fa:19:de:df:c2:bd:
52:7e:68:38:d0:75:32:65:af:40:18:d4:53:e4:19:40:95:f6:
37:6f:b1:d2:e5:2a:4a:c5:f1:6b:05:d8:29:bb:7f:89:40:96:
18:96:20:2a:9f:d9:4c:3c:8d:b9:37:60:3f:37:1a:48:0f:d5:
5d:42:7b:57:83:a5:41:b8:2d:88:d5:e7:4c:62:40:7f:92:f2:
88:28:c6:0c:94:3f:06:a8:54:a7:7a:c1:7b:a6:70:60:b6:8b:
0b:37:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:45 2026 by rpki-client