Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143165.roa
File: AS143165.roa (raw, json)
Hash identifier: Lm2xa8Kml41LFYtpZNM62bfGyWSiutR4uu2XXgfYOcU=
Subject key identifier: E6:CF:A2:C0:7C:8B:43:B3:1B:EF:4C:EF:4E:86:CA:68:FE:95:4B:97
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 67A1D38D0C47E910A07DCA3DD51C3B8E4535FA7B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143165.roa
Signing time: Mon 25 May 2026 06:49:00 +0000
ROA not before: Mon 25 May 2026 06:44:00 +0000
ROA not after: Mon 24 May 2027 06:49:00 +0000
asID: 143165
IP address blocks: 240a:a203::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a1:d3:8d:0c:47:e9:10:a0:7d:ca:3d:d5:1c:3b:8e:45:35:fa:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:00 2026 GMT
Not After : May 24 06:49:00 2027 GMT
Subject: CN=E6CFA2C07C8B43B31BEF4CEF4E86CA68FE954B97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:0e:1d:f1:1f:57:34:dd:0a:c4:c0:8e:38:
31:3f:1b:5c:cd:ff:bd:9b:8b:1d:73:07:1f:e8:9c:
f3:96:5a:1e:5f:84:c4:11:43:a9:ce:b0:32:e7:3b:
4b:14:a1:b6:24:24:24:b5:0c:5b:61:af:2e:54:03:
54:3c:ff:db:11:94:7e:4c:81:b1:c1:ec:76:07:e3:
2b:4f:49:4f:b5:9a:6e:f9:2e:5f:96:8a:8b:42:d1:
63:0a:4a:b8:4e:0c:eb:f4:ba:67:23:db:fb:2d:52:
4d:1e:bf:6b:d6:46:52:6e:22:2b:b8:e4:82:5f:46:
9c:6f:15:a4:10:dc:85:97:61:5b:2c:45:c4:d9:12:
51:32:a7:ea:fb:0f:90:3a:d0:03:a3:5a:a1:71:d4:
ca:5b:d1:e9:c2:e3:fe:e7:62:5f:71:c9:3e:17:e9:
d3:d1:c4:ac:8d:18:6e:8f:23:6e:29:e2:99:04:01:
36:03:b1:51:18:79:1a:a7:0d:db:38:da:ef:a9:c0:
13:f2:6d:0c:5e:a2:95:98:2c:8d:5b:a3:36:4e:d0:
d7:e8:d5:d3:ae:f0:67:ed:df:34:f3:71:f9:77:68:
4c:21:f8:b1:39:8f:8a:d5:fe:ae:99:92:47:ef:54:
e7:7a:7c:56:03:d6:94:01:a0:d0:67:99:b9:7d:89:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CF:A2:C0:7C:8B:43:B3:1B:EF:4C:EF:4E:86:CA:68:FE:95:4B:97
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143165.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a203::/32
Signature Algorithm: sha256WithRSAEncryption
4b:dd:ad:40:ab:7d:f8:37:b3:1a:5a:4e:37:a8:76:df:37:b7:
36:a3:ef:69:88:37:a1:5d:cb:15:fc:98:26:02:69:e4:b2:d8:
0d:de:7c:ac:ac:22:c5:5f:00:0b:81:42:9d:59:e3:de:c0:37:
e3:a3:cd:cb:1a:e0:68:6e:cf:61:5b:23:ed:e8:1c:b8:cc:4b:
35:63:17:d1:e0:f5:1e:60:93:48:d8:1f:ae:6b:e2:d5:82:10:
a1:2f:62:3b:d8:34:c4:d6:7b:ac:c9:61:18:d2:71:36:75:d6:
fc:dd:18:38:b1:e3:b9:d9:76:dc:20:c2:56:e8:2f:74:76:3e:
c8:02:fd:3b:66:f5:c7:2b:42:7b:48:36:e5:78:fa:8b:d4:a4:
c2:18:e1:2e:73:46:26:af:19:28:cb:3d:8b:cb:0e:e5:ea:b6:
6e:10:c8:6e:fd:4e:ae:52:d8:f9:da:98:4d:d8:58:74:99:90:
f7:c2:78:81:07:7a:ad:d6:5e:12:84:d3:d7:94:b9:5c:a8:94:
57:15:a9:c9:46:f2:8d:6b:1b:68:6a:ca:28:74:d8:91:56:33:
58:6a:c7:91:6a:12:10:1a:a0:9a:2d:de:6f:ee:1b:ee:76:aa:
3c:bc:a7:b6:4c:aa:35:b6:34:20:6c:06:93:f6:60:4c:0d:58:
32:e0:0a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:51 2026 by rpki-client