Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143178.roa
File: AS143178.roa (raw, json)
Hash identifier: GS1cInbVV3b14OLR+YGabHdjeu/QVmS+RrBqKtPIiUE=
Subject key identifier: AC:60:04:4D:7F:7E:8B:50:68:7F:B6:C9:E2:1B:5A:F7:D7:E6:49:5B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5F140874D331E219C76A24703680DD07ABA7A4AD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143178.roa
Signing time: Fri 22 May 2026 06:27:57 +0000
ROA not before: Fri 22 May 2026 06:22:57 +0000
ROA not after: Fri 21 May 2027 06:27:57 +0000
asID: 143178
IP address blocks: 240a:a210::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:14:08:74:d3:31:e2:19:c7:6a:24:70:36:80:dd:07:ab:a7:a4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:57 2026 GMT
Not After : May 21 06:27:57 2027 GMT
Subject: CN=AC60044D7F7E8B50687FB6C9E21B5AF7D7E6495B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:a5:db:d8:cf:38:27:ee:99:7e:1f:a6:e1:
68:1f:88:95:1f:9b:a2:c2:a6:17:6e:49:56:2f:66:
d8:83:50:95:db:a6:16:00:6a:28:c6:38:2b:ec:49:
db:81:41:b1:c3:59:60:1a:55:b7:f8:6e:1a:01:3c:
ee:aa:c1:11:df:46:f4:24:7e:38:d8:e6:4b:c0:b6:
f7:79:7f:64:fa:21:12:97:b4:fd:6c:3e:0a:a4:80:
d0:85:ad:a3:c6:8b:69:44:a3:a9:17:3f:ff:40:92:
56:8f:24:d4:e5:a8:d9:36:9e:6c:f2:de:1d:eb:8e:
7b:cb:1c:0f:72:6c:7e:8e:c7:ca:42:f9:2c:23:39:
04:76:d2:11:6f:8c:de:d3:1c:91:e9:31:ec:e0:f4:
11:92:c3:ac:44:ce:1b:6c:3b:be:fd:db:31:59:e6:
df:22:51:14:16:a9:32:a2:f4:47:ca:2a:92:b7:1f:
9c:b9:62:6c:82:4f:41:13:0a:30:e1:76:59:c3:94:
8e:a1:c3:a1:da:40:0a:9e:89:a3:1a:e8:4d:8a:41:
cd:24:fa:6a:d3:43:30:5e:8a:e2:f9:a4:93:6f:8c:
3e:d0:f5:d5:40:33:13:56:c5:aa:4a:24:27:72:04:
d2:78:e9:0d:4c:fe:91:0e:b9:c4:8d:b2:52:3e:5c:
89:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:60:04:4D:7F:7E:8B:50:68:7F:B6:C9:E2:1B:5A:F7:D7:E6:49:5B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143178.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a210::/32
Signature Algorithm: sha256WithRSAEncryption
18:e3:4b:f7:dc:09:42:cc:5b:54:cb:4d:0d:6e:d9:c6:fd:aa:
32:1b:80:2a:91:64:89:7a:65:28:78:dc:59:87:e0:24:60:ae:
b2:65:6f:87:e2:95:40:d3:fc:31:bb:19:5d:a5:0f:62:25:61:
0f:d4:13:93:52:be:aa:96:f1:c9:a8:9c:d5:11:05:d6:97:78:
b1:b7:f4:fc:80:a6:c2:88:42:e4:90:86:83:58:6a:96:aa:b1:
a1:59:dd:44:93:00:a4:9d:a2:ce:26:57:ca:68:65:01:21:9c:
a2:77:e3:4d:2c:17:03:b2:2c:2c:6c:8f:e3:bb:21:95:27:f2:
4e:95:75:0e:68:ee:09:8a:e7:4f:42:4c:bc:70:75:d2:9b:64:
b1:82:b7:aa:f3:cf:65:7b:55:e7:96:10:cd:2d:fb:d2:e1:22:
38:c0:03:c8:06:7a:cd:c1:85:01:f3:bd:51:b2:b9:3e:0b:4d:
e5:b8:b8:3e:10:5f:5b:13:e2:3a:f6:a0:5e:7f:55:36:58:52:
c7:26:06:5d:1f:15:4b:f5:8e:d6:51:0d:5e:9c:41:54:95:9d:
58:02:69:f2:31:10:ac:a7:de:cd:ef:84:28:fd:31:72:f3:05:
e9:86:78:f1:fc:12:db:c6:63:fa:7e:39:3a:71:41:5e:b8:03:
7b:a3:cc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:28 2026 by rpki-client