Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143174.roa
File: AS143174.roa (raw, json)
Hash identifier: 8xymabcyM0PPeTVXfalY0L8zad066JzeyHc/2oGwmrU=
Subject key identifier: 99:71:0C:6B:A1:1C:37:29:F2:6D:CB:48:A5:28:99:A7:47:D1:BB:7B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 45F5AEFD7C4E740BBBCCA96C19B527F06463FE43
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143174.roa
Signing time: Fri 22 May 2026 07:41:23 +0000
ROA not before: Fri 22 May 2026 07:36:23 +0000
ROA not after: Fri 21 May 2027 07:41:23 +0000
asID: 143174
IP address blocks: 240a:a20c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f5:ae:fd:7c:4e:74:0b:bb:cc:a9:6c:19:b5:27:f0:64:63:fe:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:23 2026 GMT
Not After : May 21 07:41:23 2027 GMT
Subject: CN=99710C6BA11C3729F26DCB48A52899A747D1BB7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:cb:de:d2:12:55:98:f1:9a:f6:5d:6b:7c:
92:33:8c:48:d3:19:ed:e9:0c:fd:05:24:cf:6f:8e:
1b:22:61:c7:4e:5c:f7:c8:09:57:5c:d1:6d:58:0e:
1c:85:51:51:a4:f4:ea:72:12:4f:0a:07:c7:e1:ca:
60:75:dd:fa:1f:6f:ce:7b:26:5c:86:4c:7e:92:a7:
5b:4c:4e:6b:54:8f:c9:3d:c6:22:92:77:63:5d:37:
eb:33:04:f7:04:d7:27:65:2b:32:ea:2b:47:47:23:
7a:ed:69:6f:3d:05:6d:fe:9b:02:c3:5e:77:3f:c0:
cd:6d:33:30:a1:ac:4a:6c:39:e7:33:e7:82:2c:54:
bc:34:b9:7e:bb:7c:6c:f9:9d:7c:7a:88:f5:a2:7b:
66:85:a9:6a:69:0d:ca:46:b8:3f:a5:b9:9f:98:eb:
df:00:20:02:06:6a:bb:a3:d5:81:2e:f6:1e:8b:df:
3c:48:c5:51:16:25:63:63:c0:b9:23:df:9f:ae:9c:
b6:7c:c2:e4:02:e9:15:02:36:c4:24:cc:01:9e:28:
94:00:97:92:68:7c:65:4c:ad:31:82:5c:1d:60:86:
61:e9:1c:59:b8:1e:cc:d6:9e:41:fc:f7:ea:24:2f:
c8:21:ab:62:c1:22:6f:72:33:05:a3:6a:75:d4:27:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:71:0C:6B:A1:1C:37:29:F2:6D:CB:48:A5:28:99:A7:47:D1:BB:7B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a20c::/32
Signature Algorithm: sha256WithRSAEncryption
aa:5b:b9:26:54:97:56:a8:0d:81:9f:34:22:3d:13:8a:f1:01:
88:cf:c6:c7:fc:e5:10:ae:6e:d5:a3:91:c7:42:53:1a:ce:d8:
30:7b:35:90:4e:7c:31:bb:64:fb:98:5c:f2:55:39:4c:49:ff:
e2:28:0e:b2:0f:5f:34:e5:0d:d8:0b:e3:87:5d:c4:eb:a1:c4:
28:6d:81:4d:49:dc:45:11:2c:0f:10:53:f2:32:f3:e8:31:95:
c1:02:f0:0f:0d:c6:bb:62:b3:f4:e9:00:99:5f:3e:6c:dd:d8:
85:86:eb:e7:fb:35:e9:c4:7c:a4:cb:10:9e:44:0a:71:32:d9:
bc:37:7e:86:a3:c3:4a:85:4b:83:4d:34:d5:26:fa:bb:e7:8f:
60:cb:65:8d:34:ca:27:1e:90:1b:f9:78:a9:23:67:a3:d4:14:
5f:14:96:6b:bb:ba:45:a5:7c:a2:e5:fe:93:27:ff:95:37:84:
ab:f0:d1:7c:47:97:ad:01:95:21:ac:56:8f:64:f1:f0:51:39:
2e:66:71:fd:63:6c:e9:f3:3e:7d:87:1f:ee:c1:4f:4e:48:c0:
50:20:a4:54:b8:d1:9b:c5:f3:e1:68:89:72:e2:52:24:3f:f0:
30:4a:7d:19:99:7f:c7:c4:49:7d:3d:93:f4:5e:29:76:e2:f8:
98:56:f0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:53 2026 by rpki-client