Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143185.roa
File: AS143185.roa (raw, json)
Hash identifier: 6hOXPCbUoXnL9IdTXOKIGTceYuv8NzJZVKGSTlOBga0=
Subject key identifier: 90:B9:D9:FB:F8:6B:59:0C:EF:D3:01:B8:0C:CB:FC:CB:88:28:06:FD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 67B7334968B0746D7066E2189594F2A72A765AAD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143185.roa
Signing time: Mon 25 May 2026 01:51:27 +0000
ROA not before: Mon 25 May 2026 01:46:27 +0000
ROA not after: Mon 24 May 2027 01:51:27 +0000
asID: 143185
IP address blocks: 240a:a217::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b7:33:49:68:b0:74:6d:70:66:e2:18:95:94:f2:a7:2a:76:5a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:27 2026 GMT
Not After : May 24 01:51:27 2027 GMT
Subject: CN=90B9D9FBF86B590CEFD301B80CCBFCCB882806FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:e2:77:4d:2c:b9:dd:36:07:51:4c:2b:e7:
79:26:7e:48:d1:f7:80:17:40:ae:92:7b:45:f9:52:
20:90:6e:74:f7:d4:c2:c2:d5:58:7a:76:33:76:c7:
69:e9:44:52:85:46:17:06:67:3f:72:c0:45:b4:1a:
ba:ff:3a:15:d5:5d:e3:2c:c0:e9:4e:30:dc:cf:bb:
5a:48:66:ca:71:61:fd:85:f8:4c:73:78:c7:43:53:
69:b8:b1:7a:12:fa:5d:01:e6:5e:87:28:0e:43:5a:
ef:60:fe:05:fd:d7:5a:4f:c2:6f:22:e3:8a:e8:b8:
21:d7:28:99:81:3b:f3:66:b7:70:7c:90:2a:30:d7:
9c:c6:db:42:ea:75:f0:db:a6:ea:73:50:3c:97:24:
c9:65:b8:66:71:a1:1a:8f:da:b3:a4:37:24:fc:0f:
e0:43:0d:54:37:94:59:94:ab:8a:a1:c8:c6:ad:da:
b8:59:cc:1b:b4:49:1a:ff:b1:c4:59:6b:9f:ae:a6:
6c:2c:2d:64:bf:7c:54:91:6d:f6:be:9f:20:5c:ef:
de:d8:e8:ef:92:de:e1:45:f7:65:5c:6d:d7:74:6b:
eb:db:f1:e4:01:6e:9a:cc:58:77:7f:44:20:56:d7:
6e:b6:1a:16:19:c5:22:a1:9c:4c:8f:d4:4f:f2:9b:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B9:D9:FB:F8:6B:59:0C:EF:D3:01:B8:0C:CB:FC:CB:88:28:06:FD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143185.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a217::/32
Signature Algorithm: sha256WithRSAEncryption
90:16:a5:bc:6e:34:55:c1:a6:a0:3f:ac:2c:c8:7e:1c:1a:66:
8e:fa:cb:22:58:62:5e:dd:f9:0b:d2:59:fe:9d:bf:f1:bb:13:
e3:7e:c9:0c:5f:e5:37:85:e0:74:8f:71:08:1f:20:55:f7:fb:
a7:11:d4:8a:b5:54:ec:e0:06:82:a7:71:3d:66:0c:05:2b:d8:
39:6e:29:60:7f:d2:cf:e5:9b:fc:5d:45:93:97:38:85:a9:87:
86:16:33:01:28:52:1e:49:1f:15:bd:55:ff:d7:82:c6:23:e9:
7d:fe:56:3b:27:78:17:2c:b1:c4:d2:5e:ce:db:da:7b:d5:29:
58:c7:5f:7c:ce:20:da:77:70:63:27:0a:58:d6:b2:b6:62:7c:
56:30:dc:85:c7:62:36:bc:3f:fe:cb:38:d3:12:f1:83:c8:69:
a1:b6:a8:bc:fa:ef:8d:dd:71:49:be:e6:f9:6e:47:92:27:4e:
4a:64:3c:7c:e3:4b:0d:8b:a3:2e:00:71:59:ae:f9:53:c0:aa:
eb:12:83:c2:28:d2:4e:1b:3c:79:ed:cf:31:15:cf:b2:31:8b:
6f:b3:fc:06:f8:90:ef:67:4f:74:c9:98:82:9a:61:e2:10:f9:
ef:3c:a0:0a:95:78:dc:10:7a:c5:e2:b8:a2:5c:d2:91:22:2d:
13:20:38:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:14 2026 by rpki-client