Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143183.roa
File: AS143183.roa (raw, json)
Hash identifier: VgS6uf4bArJOQrgckhNxoz9QaXTXtktbZEH5SM2LeMc=
Subject key identifier: 2B:39:A9:D9:E9:D2:1B:1E:40:FC:F6:87:27:33:AE:E4:C6:89:FC:4C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4800092AEBA6A82B0F296901C5F762038B4C71F3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143183.roa
Signing time: Mon 25 May 2026 06:49:07 +0000
ROA not before: Mon 25 May 2026 06:44:07 +0000
ROA not after: Mon 24 May 2027 06:49:07 +0000
asID: 143183
IP address blocks: 240a:a215::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:00:09:2a:eb:a6:a8:2b:0f:29:69:01:c5:f7:62:03:8b:4c:71:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:07 2026 GMT
Not After : May 24 06:49:07 2027 GMT
Subject: CN=2B39A9D9E9D21B1E40FCF6872733AEE4C689FC4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:0b:13:df:0b:7f:cd:c4:68:a5:f5:bd:f2:
ba:12:f3:b7:f2:bc:c1:a0:b3:e5:66:01:0d:f7:29:
07:60:79:07:18:a2:97:ba:5a:ac:84:9b:75:04:d4:
86:2b:46:9d:f6:01:41:87:4b:91:0a:07:60:8f:16:
93:bf:88:4f:a1:f8:12:26:c2:4e:14:7d:69:ab:e8:
46:5e:82:c6:2d:a2:bd:7a:0a:28:85:75:07:33:c8:
12:b0:3b:dd:d3:05:14:76:1f:bb:18:e6:94:1d:29:
1e:7e:20:c9:b6:10:e4:98:e6:f5:6a:b5:b3:f2:c3:
e4:cd:c6:a5:e3:65:46:20:23:f7:d7:df:76:43:8b:
b6:f2:29:22:15:f3:6d:25:42:7d:c6:da:ae:a1:cd:
15:0e:0a:15:a3:6d:6b:8d:5f:78:a6:18:d6:c5:3b:
65:54:99:a2:d1:90:fb:55:4c:c6:df:3d:e4:00:67:
d3:e8:a5:6a:26:6e:22:69:d1:78:8f:53:dc:aa:b2:
70:be:39:a3:6e:0c:0e:1d:1d:9c:89:b0:c8:5c:9c:
cc:82:ba:b3:b4:a9:fa:b0:ec:da:8f:dd:37:66:45:
26:1f:a9:db:6e:46:c6:49:4d:e1:ee:9e:5c:a6:4d:
eb:d3:32:81:9f:17:68:99:71:a4:56:6f:37:e4:7b:
5c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:39:A9:D9:E9:D2:1B:1E:40:FC:F6:87:27:33:AE:E4:C6:89:FC:4C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a215::/32
Signature Algorithm: sha256WithRSAEncryption
ab:c4:97:ba:f6:4e:13:5e:3a:74:2d:b2:49:77:94:95:06:00:
de:de:f3:9c:ee:28:5f:c2:5b:4d:97:72:ba:71:20:8c:90:62:
c0:ed:ad:d1:40:97:32:2a:41:67:ba:23:63:59:39:92:76:e6:
db:fc:7c:03:68:62:11:5e:70:79:08:8e:16:91:9f:90:62:1b:
c9:ed:ad:fa:bd:fc:cb:ed:3d:8b:5e:30:cf:20:21:c1:f8:c3:
8a:31:04:eb:97:e2:49:d2:03:df:32:6d:4e:2b:f2:0f:20:cf:
2d:30:1f:0f:d5:b5:ea:21:c3:be:b0:8c:02:65:a5:c7:de:50:
55:78:ea:0a:55:e1:28:e8:4d:2c:94:93:c0:1c:54:67:70:f2:
12:c1:f9:4c:dc:a7:e8:7f:2f:d5:44:72:54:c6:6e:54:18:76:
81:2c:3f:b5:b4:b5:c5:4a:09:aa:bd:11:11:90:e5:a7:7c:07:
f2:96:e7:a3:d5:7b:7c:b8:45:d9:96:0c:27:19:d9:9d:5f:1f:
85:e3:09:92:ad:61:82:50:d2:48:6f:58:cc:36:8d:1d:47:a7:
e1:25:e9:7d:59:18:bc:60:ed:3a:e4:cc:23:21:85:aa:6d:55:
a6:75:61:be:bd:90:b5:e7:11:50:f3:ee:7a:37:4a:3f:f8:f9:
46:e2:a2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:39 2026 by rpki-client