Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143173.roa
File: AS143173.roa (raw, json)
Hash identifier: oXNJPn/g6VnB5suj6LK8lJReu/ARWd6MQDYlFfj90wQ=
Subject key identifier: 88:5A:DC:0E:D2:6B:2A:05:83:43:23:3A:77:E5:69:18:83:D1:16:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 12F65514872BB68318A604B077E1CF8154757807
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143173.roa
Signing time: Fri 22 May 2026 06:46:14 +0000
ROA not before: Fri 22 May 2026 06:41:14 +0000
ROA not after: Fri 21 May 2027 06:46:14 +0000
asID: 143173
IP address blocks: 240a:a20b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f6:55:14:87:2b:b6:83:18:a6:04:b0:77:e1:cf:81:54:75:78:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:14 2026 GMT
Not After : May 21 06:46:14 2027 GMT
Subject: CN=885ADC0ED26B2A058343233A77E5691883D1162E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:a9:4a:21:5f:59:65:21:0d:90:ba:cc:80:
0d:30:66:c4:c0:5d:53:eb:7e:33:39:c5:db:ae:b2:
c5:8e:e0:5e:23:71:26:a2:40:dd:4c:a5:f0:d2:a2:
b6:96:9a:ac:d4:56:c6:29:0d:21:26:3d:13:83:46:
39:1e:82:93:37:b6:b2:7e:0f:97:83:cb:71:9a:ac:
2e:1f:13:03:2c:67:cc:29:34:95:78:77:01:da:0c:
05:01:55:03:57:57:7f:34:19:22:25:99:7a:bc:f8:
fd:01:fa:97:f4:0d:a1:35:2e:cc:38:f1:23:c5:fd:
11:ad:df:af:30:8c:68:85:c6:82:c9:10:1f:85:cc:
00:30:99:61:60:8a:86:d0:54:15:ed:1b:c3:5a:e3:
04:61:a1:22:41:a4:09:2b:ed:69:eb:a7:6a:6f:76:
ea:77:e4:b0:5d:76:34:8e:7c:34:b6:41:57:db:c2:
1a:f0:7c:b9:e4:fa:85:74:96:7d:b5:ef:fd:e7:a5:
e3:45:85:28:f8:14:e4:c7:1c:e5:f0:c6:da:53:36:
83:e3:f3:31:52:dd:3e:dd:c0:72:dd:84:b3:e7:c1:
f3:be:2e:9c:08:8f:28:1a:87:8c:93:da:77:bb:78:
3b:8c:f9:35:7e:83:86:19:f1:b7:f2:5d:97:3f:af:
12:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5A:DC:0E:D2:6B:2A:05:83:43:23:3A:77:E5:69:18:83:D1:16:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a20b::/32
Signature Algorithm: sha256WithRSAEncryption
89:80:a4:57:2d:10:dc:fa:d0:88:29:1e:f6:4c:e8:ab:83:6e:
ee:95:b7:4b:c2:0a:65:74:37:0f:23:a0:81:ce:e3:8e:b6:41:
bd:8f:9a:02:b9:49:17:86:65:52:f9:d7:33:5d:db:2b:96:7a:
f0:71:81:f4:a3:af:36:d1:55:9c:65:70:f9:79:c6:98:a9:b7:
5a:9f:b5:9f:74:9e:28:fa:e0:59:c1:0b:e1:40:77:c2:6d:fc:
20:9d:56:2d:78:01:7d:23:cc:61:89:ce:85:dc:a8:88:f8:30:
52:fc:eb:53:58:fb:b6:a5:39:ad:16:db:b4:0a:95:7f:2f:fd:
14:cc:ff:9c:27:0d:7d:81:78:e8:0c:7a:a4:62:a3:d3:f2:e8:
81:17:6c:e2:cc:38:51:f9:11:e8:9f:6a:b1:66:27:2e:df:6a:
5d:1b:a2:cc:8c:13:e2:1e:43:f6:96:42:d6:44:9f:bd:52:34:
ed:3c:a3:a8:83:68:d7:bc:e6:e0:31:c1:fe:70:86:71:4b:6b:
19:94:2f:81:82:4a:48:30:eb:89:a8:15:53:aa:e4:0c:20:73:
f2:4d:f1:63:c1:35:3e:f9:56:c6:b3:d6:9c:5e:48:b9:e8:38:
e5:98:4d:48:2e:da:bc:93:8d:0b:b4:43:e8:e1:99:0e:3e:f9:
2e:3a:6b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:22 2026 by rpki-client