Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143175.roa
File: AS143175.roa (raw, json)
Hash identifier: eOM958F3H6Ylvjwt8o+K6Ng9p9GkerncQAzfs1/3+Ks=
Subject key identifier: BB:1D:6A:F3:A5:D6:38:5C:97:43:35:ED:62:4F:53:3B:99:DA:B6:63
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6BEFFB4DAF43FAC27702BDA5C3069B2248EE01A3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143175.roa
Signing time: Mon 25 May 2026 06:49:08 +0000
ROA not before: Mon 25 May 2026 06:44:08 +0000
ROA not after: Mon 24 May 2027 06:49:08 +0000
asID: 143175
IP address blocks: 240a:a20d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ef:fb:4d:af:43:fa:c2:77:02:bd:a5:c3:06:9b:22:48:ee:01:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:08 2026 GMT
Not After : May 24 06:49:08 2027 GMT
Subject: CN=BB1D6AF3A5D6385C974335ED624F533B99DAB663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:89:45:96:22:80:30:f5:cc:be:5c:e8:fc:
4f:78:12:00:61:ad:fa:75:14:9f:c2:de:e3:78:ba:
b2:94:ee:f1:69:a8:a3:2c:77:f1:11:59:a5:7c:a7:
ca:89:da:bf:42:04:59:a6:45:45:83:72:2c:3b:01:
7a:32:7c:47:9d:cc:0d:3f:08:85:8f:83:74:e2:d9:
a5:6a:30:e3:37:ab:af:33:4d:fa:ce:c8:26:e9:9b:
cb:c0:a1:49:8b:8e:db:e1:97:58:07:03:b6:8a:8d:
00:bd:66:79:84:1e:b1:48:51:93:37:ee:66:ac:49:
1d:00:45:60:59:18:80:f8:55:5f:45:d7:4f:f8:30:
6d:4c:9d:53:6f:fe:fa:b7:7c:9a:c4:ee:16:43:69:
be:da:19:eb:67:66:a7:a0:4f:8d:8c:b3:2a:f8:96:
d5:a6:09:53:43:21:fc:91:64:bb:31:22:61:f2:1b:
1a:19:34:c0:32:f8:81:c9:cf:0e:aa:3a:9b:a5:c2:
63:f6:29:7f:8f:1c:8c:8b:70:13:48:4b:87:6c:e7:
02:34:c7:e5:6b:63:f4:15:d8:3a:3a:04:29:fd:3d:
b9:ff:be:c9:df:08:a0:06:e4:b6:03:49:70:3f:57:
42:90:c3:ff:01:f5:75:63:c4:2e:19:65:d7:d9:19:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:6A:F3:A5:D6:38:5C:97:43:35:ED:62:4F:53:3B:99:DA:B6:63
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143175.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a20d::/32
Signature Algorithm: sha256WithRSAEncryption
bc:6f:2d:a7:2e:27:6d:08:a6:19:54:f6:d8:45:2b:8e:89:65:
64:02:48:a9:1c:89:e8:99:c5:b0:37:f3:e4:9a:16:82:04:0d:
3c:28:01:12:dd:75:74:e2:5a:0c:f5:e5:53:e3:59:70:23:51:
8a:1c:d6:87:80:26:de:a8:aa:50:48:13:0d:9c:b6:6f:bf:f9:
33:d7:54:03:ab:f4:df:f2:42:02:73:bd:d8:ef:19:f1:74:3b:
e8:ce:8e:c5:23:01:63:65:0e:1a:74:d9:c6:f9:fb:5b:2e:d2:
91:05:b4:74:79:7c:b7:f1:24:99:01:8c:a4:d5:e3:6f:89:7a:
28:2d:ba:20:0d:b8:a4:00:6e:2f:a8:42:de:1d:70:0b:ef:93:
5c:9f:a1:c0:fd:a7:5f:5a:5e:d1:24:81:95:cb:ec:bf:53:92:
e1:0f:e2:50:45:5c:95:a4:81:d0:70:a5:be:cd:fd:e4:73:b5:
ac:23:48:1b:c0:e7:e6:be:33:0c:38:f4:c4:53:38:75:96:21:
2e:33:5c:eb:3f:0c:9a:d4:40:c0:50:78:1f:77:e9:8d:74:d1:
da:4c:d4:28:a3:f8:c8:36:28:6b:c1:17:15:96:40:53:62:18:
31:13:37:d7:2a:fe:14:8d:69:0a:9e:40:d1:83:c0:73:58:ab:
06:dc:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:16 2026 by rpki-client