Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143179.roa
File: AS143179.roa (raw, json)
Hash identifier: +o79vJf4QqZAfl+LYtJUSC+bKvGOWEggb57kPKm5H0s=
Subject key identifier: 29:3F:1A:A0:A8:CB:C4:59:51:DA:64:11:57:BC:73:37:BC:07:C2:8F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7136BFA744A72D5C7D89D74422AB4B876AAECBDE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143179.roa
Signing time: Mon 25 May 2026 03:19:23 +0000
ROA not before: Mon 25 May 2026 03:14:23 +0000
ROA not after: Mon 24 May 2027 03:19:23 +0000
asID: 143179
IP address blocks: 240a:a211::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:36:bf:a7:44:a7:2d:5c:7d:89:d7:44:22:ab:4b:87:6a:ae:cb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:23 2026 GMT
Not After : May 24 03:19:23 2027 GMT
Subject: CN=293F1AA0A8CBC45951DA641157BC7337BC07C28F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:22:60:a3:1f:4b:38:9d:7a:34:0b:2a:97:3b:
ac:40:4f:26:d5:29:3a:af:68:24:9c:94:eb:1e:86:
d3:75:44:a6:7f:9c:1c:e6:ec:9b:a2:63:bf:4c:39:
0c:98:62:54:b8:fb:05:78:a4:0f:ca:39:ca:64:ad:
3d:59:7b:fe:51:6d:d7:ad:3e:06:6e:55:f4:9d:ca:
53:66:c3:e0:eb:b0:d1:0f:ef:9b:35:43:ba:c7:8a:
06:e1:fb:17:d8:f9:a7:76:a3:89:3d:90:4d:c6:18:
2e:da:46:fe:cb:18:0a:ce:05:94:97:de:9a:31:4d:
8e:db:0f:a5:c5:51:96:ae:3b:45:2d:cb:66:de:d1:
36:ac:70:9f:de:e1:50:46:0b:f0:c4:c0:52:dd:5c:
cf:be:3c:1a:e6:d8:6a:52:2b:a6:41:99:84:c4:53:
ca:3c:e7:04:5d:3a:ee:68:c3:37:38:46:15:af:c3:
77:2e:4d:b1:9f:42:c7:8d:69:48:00:ba:03:81:9f:
95:80:a8:e2:00:9c:95:da:67:58:1b:70:02:60:fc:
41:54:cf:ab:2f:bd:8b:db:9f:71:06:7d:2a:e4:bb:
11:17:32:b5:44:0e:6f:2b:c3:5b:54:52:d8:8b:02:
bb:6b:64:64:ca:6f:ac:98:c7:d9:cd:26:5e:8f:9c:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3F:1A:A0:A8:CB:C4:59:51:DA:64:11:57:BC:73:37:BC:07:C2:8F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a211::/32
Signature Algorithm: sha256WithRSAEncryption
5a:3a:72:32:ea:dd:7d:1d:ef:78:63:4e:2b:7b:b2:b6:71:ad:
2f:ce:f6:dc:f1:bf:a7:b8:ad:ac:26:d0:ef:18:d2:03:ed:11:
e5:b9:d8:31:bf:8a:9f:86:dd:63:a1:ef:76:eb:37:b3:8f:a8:
fb:3d:30:70:b8:51:85:40:cf:31:b4:aa:9c:2b:4b:ec:a9:61:
2e:d1:84:39:b2:18:f1:9c:71:22:6f:d2:47:b6:85:76:61:c4:
f6:7a:2d:f5:b7:b4:ea:78:51:42:4d:66:56:ef:23:f1:3a:0d:
94:f7:8e:24:5e:92:b3:ef:10:97:59:c3:fb:cd:df:b5:36:8b:
9e:2f:dc:ba:a3:6d:9a:cd:34:fb:83:bd:e5:bf:2f:f3:69:82:
b2:be:42:ba:59:b1:ff:68:8b:3f:21:8e:24:4f:59:65:9c:b9:
11:d5:bd:ca:49:18:86:6f:6c:48:14:01:67:3a:71:7e:f5:7e:
99:f3:3d:8e:e5:9a:0e:09:b9:d4:26:88:ce:5b:7a:1a:1e:01:
c6:e7:f0:33:a2:c2:42:78:51:f0:b6:85:85:8d:24:5f:ff:09:
9e:7d:db:08:6b:09:a2:ed:b4:14:02:9f:54:58:65:65:8a:1f:
21:04:44:2b:87:53:b6:f7:b5:0c:b2:86:d2:98:c9:11:af:43:
fd:7a:8f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:58 2026 by rpki-client