Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143167.roa
File: AS143167.roa (raw, json)
Hash identifier: 4AqNXrI2LdE8hKHDRIgfZAL9l7ej0ScKb/EoVyBv8mU=
Subject key identifier: 59:54:44:60:A0:01:49:87:CA:DD:66:9D:E3:20:44:1A:6A:D1:7A:CC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 05AC1411796ACCF4837FF2F78BEE2A64C86F9BFA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143167.roa
Signing time: Mon 25 May 2026 06:28:14 +0000
ROA not before: Mon 25 May 2026 06:23:14 +0000
ROA not after: Mon 24 May 2027 06:28:14 +0000
asID: 143167
IP address blocks: 240a:a205::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ac:14:11:79:6a:cc:f4:83:7f:f2:f7:8b:ee:2a:64:c8:6f:9b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:14 2026 GMT
Not After : May 24 06:28:14 2027 GMT
Subject: CN=59544460A0014987CADD669DE320441A6AD17ACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:91:ed:64:99:5b:2b:26:8b:25:53:75:34:
37:80:51:21:03:e0:c9:39:d8:77:3e:21:f2:a5:6f:
25:e2:e9:ea:a6:ac:2e:f1:36:8b:57:0b:be:ac:02:
3c:9f:4c:6f:d1:1c:f0:71:4b:db:c9:38:db:47:6d:
80:f0:5f:c2:e6:83:be:8d:70:97:84:b8:9a:5c:51:
0b:84:b1:46:51:7a:bf:a3:02:2e:7d:c3:7c:a6:2a:
70:65:bb:0d:29:a7:51:7d:ac:68:5c:91:1a:41:a8:
5d:d0:ce:43:86:91:90:68:ee:8b:f5:f7:8b:c8:2d:
52:f9:f1:63:69:cc:d3:aa:6b:12:e6:68:60:cd:1d:
3a:b6:d7:66:69:f6:6b:f0:e1:e6:9b:0d:5a:55:33:
62:87:c0:60:b7:da:71:26:b5:c1:b5:0e:a6:0f:de:
c9:07:e9:fd:53:30:c5:5b:90:2c:9f:63:21:8e:7c:
75:1a:e6:36:b5:1f:39:5f:3a:25:07:6e:02:23:bb:
dc:fc:6d:c9:ef:50:58:a3:d8:18:28:b4:ce:b4:b3:
f7:6e:97:57:82:ff:2d:cf:ef:38:b0:8c:bf:c1:48:
9b:d7:a8:19:d1:27:27:cc:17:e2:fe:70:42:ae:9c:
0d:74:1a:4f:bd:22:fb:93:0c:81:9e:96:80:db:3f:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:54:44:60:A0:01:49:87:CA:DD:66:9D:E3:20:44:1A:6A:D1:7A:CC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143167.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a205::/32
Signature Algorithm: sha256WithRSAEncryption
31:92:3b:14:c8:e1:6f:28:61:43:90:17:2c:c2:53:69:20:f0:
7a:ed:87:39:ef:ac:16:72:da:36:62:68:94:a6:cc:62:ab:1c:
66:95:9e:8d:cd:da:61:8e:8b:f3:0b:6a:06:3c:46:56:9a:54:
f4:0b:60:d2:22:ea:f5:ac:79:45:72:7e:13:cd:01:10:fe:4c:
33:37:4a:c8:37:d4:c9:68:74:ec:fe:15:74:7d:3f:bd:86:a8:
04:93:65:17:d6:cd:24:70:38:64:94:0c:75:47:2c:f8:63:f2:
ef:42:82:7a:f7:32:78:59:29:d7:55:c4:2d:1e:72:0e:59:75:
d6:87:03:1d:df:ce:0d:1c:11:a5:0e:ac:58:62:68:8e:33:f7:
dc:de:26:5d:0b:ad:cc:10:73:85:0d:cc:40:41:ba:bc:90:02:
e2:d0:0d:20:eb:6a:8b:c2:50:e4:f6:f5:b0:c1:80:67:d5:2f:
7d:58:f1:63:84:b7:3f:1b:df:a3:d1:68:5b:4b:1c:51:56:20:
69:71:da:f7:e2:87:83:7f:41:7f:4f:fb:29:11:af:2e:49:ef:
15:cf:d5:a2:d5:6a:d0:b7:cf:29:1e:9f:c9:68:18:96:80:65:
23:0a:c4:b0:29:be:48:5f:67:87:a5:4f:96:0c:9e:f2:c1:fa:
70:29:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:01 2026 by rpki-client