Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143181.roa
File: AS143181.roa (raw, json)
Hash identifier: Vfz23MM99CIWj+axCVhL4YEuVfWGxg4yWeOVCU5+Qw4=
Subject key identifier: CD:64:1D:87:B1:8E:77:B0:D8:D4:5B:63:37:97:E2:FD:C9:D3:98:0E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B7C09546A6CFD58C9B2DD384FC35837F6C9CC95
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143181.roa
Signing time: Fri 22 May 2026 01:50:13 +0000
ROA not before: Fri 22 May 2026 01:45:13 +0000
ROA not after: Fri 21 May 2027 01:50:13 +0000
asID: 143181
IP address blocks: 240a:a213::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:7c:09:54:6a:6c:fd:58:c9:b2:dd:38:4f:c3:58:37:f6:c9:cc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:13 2026 GMT
Not After : May 21 01:50:13 2027 GMT
Subject: CN=CD641D87B18E77B0D8D45B633797E2FDC9D3980E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:66:32:e2:d5:4e:81:fb:cf:2b:40:58:7d:
4b:5a:d9:45:7a:73:e4:bb:80:38:76:db:86:39:42:
ec:3c:1f:2c:1e:23:12:a8:c0:44:ad:e5:f4:a1:fe:
c0:4f:b1:90:c2:40:ad:6b:41:1d:a8:5e:fa:08:a1:
2f:1a:89:e9:8a:fc:aa:d1:4d:51:89:f6:66:8a:f9:
b1:c4:28:d7:2a:76:a9:15:76:e3:38:7b:19:d8:75:
37:c1:d2:e3:7a:d0:2a:63:f7:88:fe:2c:88:98:4c:
f9:b0:a0:fc:54:9a:32:ac:09:3b:23:55:81:3c:58:
ca:c7:24:89:78:9d:c5:12:da:77:dc:40:8a:6c:22:
66:f0:78:67:5a:ab:cc:b4:ca:0d:0c:49:ac:a6:7a:
ee:ec:67:6a:34:83:47:0a:25:d9:8b:71:5c:91:27:
61:fd:7f:48:da:9f:33:29:c3:07:7b:42:35:1e:d8:
06:84:e2:7a:c8:9d:2b:05:81:94:50:36:d0:fb:e6:
45:9e:16:ac:6f:b9:05:0e:0b:d3:9b:8c:ec:2d:17:
4f:ef:b6:51:51:e8:54:e7:0a:f7:f6:68:c0:2b:1d:
1d:bf:81:25:1f:43:8e:5d:12:a3:ee:d6:61:2e:af:
e4:c1:6b:0e:5e:95:f0:41:c8:b9:71:94:9d:77:71:
53:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:64:1D:87:B1:8E:77:B0:D8:D4:5B:63:37:97:E2:FD:C9:D3:98:0E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a213::/32
Signature Algorithm: sha256WithRSAEncryption
89:fd:65:54:cc:1d:bb:b5:b6:93:98:24:bb:40:7b:56:e4:95:
2e:d0:a8:8f:4d:16:b3:b7:0c:4c:76:11:7f:b7:cb:cd:aa:5d:
58:7b:40:3e:99:cc:6a:02:7e:69:1e:ba:5e:ee:22:f8:5d:08:
24:2a:ac:3a:9c:69:c2:cc:1b:fa:2c:fc:f5:30:47:32:f0:a0:
88:19:a2:ea:43:f3:f5:42:39:1f:64:16:69:3b:03:20:fa:8b:
c1:fe:df:ab:75:24:ee:a3:45:20:65:8e:b7:46:be:c7:78:10:
fa:ab:c1:e0:52:5c:ee:76:45:92:62:28:f8:bf:24:63:81:48:
c3:08:bc:57:ab:1f:e1:29:52:59:aa:e3:b3:72:60:39:91:c6:
7a:66:bc:a6:44:78:38:8a:70:a6:eb:f2:f1:6e:bf:ab:b1:36:
c2:a3:e4:60:51:07:21:f7:1f:ad:08:fd:bd:c1:a7:2e:0d:e7:
d1:3f:e9:40:1e:0e:23:90:27:3a:b5:7e:c5:0e:a0:e2:29:2f:
0d:8a:6c:54:2f:cf:82:48:67:5f:cf:df:37:48:35:f6:01:8e:
2a:a0:0d:49:f8:9c:31:f7:f9:6a:23:fb:5b:c6:80:8d:58:ef:
2c:40:fa:f4:b7:e4:2b:59:12:5b:e1:dc:fc:10:6b:23:89:e9:
be:c1:b1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:57 2026 by rpki-client