Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143160.roa
File: AS143160.roa (raw, json)
Hash identifier: zNp88VLBbbDbnEhHzEq1DLWA7IzL4AFvuzXH88bl6tg=
Subject key identifier: A7:BD:AB:36:34:50:DC:67:D9:E0:D3:61:C5:80:6D:66:C1:C3:24:56
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 27144EBE6D87402F58F850A792D5ADBD3545020C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143160.roa
Signing time: Fri 22 May 2026 04:26:52 +0000
ROA not before: Fri 22 May 2026 04:21:52 +0000
ROA not after: Fri 21 May 2027 04:26:52 +0000
asID: 143160
IP address blocks: 240a:a1fe::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:14:4e:be:6d:87:40:2f:58:f8:50:a7:92:d5:ad:bd:35:45:02:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:52 2026 GMT
Not After : May 21 04:26:52 2027 GMT
Subject: CN=A7BDAB363450DC67D9E0D361C5806D66C1C32456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:31:a6:ee:0c:59:2d:7f:cd:15:58:b9:79:
5b:1e:49:17:81:dd:4b:c6:b0:ee:af:c8:65:e4:bb:
56:7c:db:e0:2e:e9:ed:65:9f:6b:c9:fc:dc:27:73:
2d:94:25:04:cc:f1:16:b1:e8:83:f8:d3:a6:8c:0a:
ae:ac:85:a1:3e:1a:90:4c:96:b0:05:ba:e7:5c:9d:
a9:1a:df:f3:2d:54:cc:f5:c4:03:2f:25:f8:a2:af:
9e:86:bd:63:1c:89:72:e9:be:29:9b:a0:f1:54:db:
9e:0b:25:5c:5e:b3:58:34:1f:52:ab:2d:37:97:51:
35:14:da:54:6c:43:4d:b8:e0:98:dc:99:83:8e:63:
99:ee:dc:60:9f:83:91:83:1b:ad:87:d5:80:46:de:
2b:d1:c4:9d:f6:ca:31:2d:de:ce:d8:22:6e:a0:a1:
78:5c:e8:80:82:22:ab:2a:5f:60:a6:c6:bf:b3:56:
70:80:a0:d0:03:25:c8:f7:bc:ab:75:e9:d0:e8:16:
b4:d1:2e:66:8f:f0:b3:a9:1e:65:83:99:77:aa:34:
41:8e:83:f7:80:2e:02:c7:58:bf:b7:79:0e:a3:6e:
aa:3b:f7:39:35:07:20:5d:1e:66:3e:44:a9:55:27:
ff:a2:dc:e1:41:37:dc:cc:d5:e8:1d:da:6c:9d:fc:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BD:AB:36:34:50:DC:67:D9:E0:D3:61:C5:80:6D:66:C1:C3:24:56
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143160.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1fe::/32
Signature Algorithm: sha256WithRSAEncryption
91:6d:d6:94:dc:30:55:2a:36:f8:18:3a:a5:8a:ab:14:35:38:
f5:b2:4f:39:3e:b8:15:c5:d8:7f:24:22:03:9d:5f:f4:92:17:
be:61:37:c8:32:e6:13:95:b6:76:da:fb:10:c9:43:3c:1f:a3:
76:1c:35:ea:6c:bd:91:41:24:45:22:be:e4:b8:0a:f7:1f:c1:
05:f0:37:b6:a3:3e:8d:c5:ea:a7:a4:77:47:17:34:f2:98:f6:
59:5d:6c:96:a9:04:0f:e1:3a:0a:e4:36:15:1b:81:ef:1d:e3:
4e:46:3a:1c:79:d1:c2:b1:50:50:42:af:1c:dc:8a:2a:af:cd:
9f:29:21:13:4c:b9:52:77:09:92:09:8e:aa:fe:a1:de:9f:b8:
6b:f1:9d:3b:75:48:46:92:d8:77:f6:ca:f6:6f:e8:6d:6f:e7:
25:0d:cd:bc:02:a3:b7:58:b5:fd:10:e8:57:a6:67:e0:38:54:
a1:95:c9:a9:e9:9a:8d:03:d0:c9:f3:0d:3d:1e:74:5b:5b:93:
ee:21:b9:65:de:76:f3:7e:1a:fe:3e:87:d8:fc:2d:c5:76:85:
e3:5d:e4:a8:c2:f9:cf:31:b8:d4:3e:bb:83:54:d0:03:de:2b:
24:e2:64:c0:49:0b:2d:d9:7e:cd:52:55:79:de:07:bc:52:9d:
05:99:e8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:02 2026 by rpki-client