Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143186.roa
File: AS143186.roa (raw, json)
Hash identifier: E/b9SghYSg37El35fpse/7bKG13pyHreSB6VfQnHweE=
Subject key identifier: 0A:17:10:0D:9D:2F:8F:FB:28:BA:A4:F3:68:B0:D5:39:26:E2:52:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 08D4F304DFD83697694B2D5A358FF1AC306EF9ED
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143186.roa
Signing time: Tue 26 May 2026 02:35:25 +0000
ROA not before: Tue 26 May 2026 02:30:25 +0000
ROA not after: Tue 25 May 2027 02:35:25 +0000
asID: 143186
IP address blocks: 240a:a218::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d4:f3:04:df:d8:36:97:69:4b:2d:5a:35:8f:f1:ac:30:6e:f9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:25 2026 GMT
Not After : May 25 02:35:25 2027 GMT
Subject: CN=0A17100D9D2F8FFB28BAA4F368B0D53926E2522E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:2e:24:7f:ab:a2:bc:46:0f:9c:6c:e0:1b:
cf:b3:50:50:62:c4:4a:cf:7c:34:21:65:3d:e4:38:
08:52:06:4f:28:56:94:60:98:c0:de:60:c6:6c:58:
15:50:78:2f:17:d2:b9:5f:e1:50:0c:00:76:23:59:
99:65:7b:30:91:e5:8b:ef:b3:36:71:8d:1f:91:f6:
22:35:01:67:58:63:f0:56:42:5b:72:b9:9b:92:21:
67:60:02:dd:f9:b5:71:ce:cb:f4:bf:e5:4c:f4:29:
a8:f0:76:e8:71:54:1c:e2:2e:c0:76:c3:f8:91:33:
fb:ec:80:7d:f8:a6:b2:70:d6:a1:46:fd:71:f6:7f:
ac:99:fb:54:bc:f7:f0:21:f7:10:07:f7:6e:ee:02:
4b:58:ad:f9:90:cc:29:28:81:1e:ec:92:53:48:79:
c0:7b:35:b8:18:bd:e2:1e:b8:75:64:44:6a:40:f1:
7a:79:e2:6f:2e:61:06:eb:18:c2:13:82:ec:23:5a:
1f:7e:58:ca:27:1a:1b:8e:04:b9:ea:8e:1d:92:c4:
70:b0:14:6a:df:94:d3:41:8b:a6:78:eb:53:de:02:
23:1f:7e:f6:52:e7:7a:24:40:29:d3:8c:d2:a4:23:
e4:27:9f:fb:77:ca:4e:a8:ad:3b:fc:4b:95:06:be:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:17:10:0D:9D:2F:8F:FB:28:BA:A4:F3:68:B0:D5:39:26:E2:52:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a218::/32
Signature Algorithm: sha256WithRSAEncryption
5f:c5:d3:32:2a:80:4b:da:5d:c5:d7:d0:ae:30:ab:f7:1c:3f:
3c:37:5e:b3:d1:4b:cf:f7:f7:34:e2:50:df:74:f6:ba:3d:46:
5c:00:3f:68:d7:fa:bd:c5:c1:39:50:8b:dd:fe:9d:4b:c5:42:
5c:aa:d7:86:24:63:a3:1c:fc:f3:ff:37:e6:69:fb:95:6e:db:
ae:99:2a:61:e6:42:1b:e3:d8:15:10:02:b3:92:ee:fa:14:53:
a8:6c:63:1a:dd:d1:37:a2:42:48:b5:6c:81:ef:a0:70:01:b1:
35:4f:36:e3:8e:68:b7:d7:df:c6:da:64:ff:85:51:df:28:eb:
39:b5:de:40:6a:9e:48:78:79:2e:9b:c5:06:f6:d2:02:16:70:
b4:e4:52:ee:8e:d2:c1:1a:3e:30:fd:92:f8:32:e7:9b:e4:75:
e7:ff:43:b5:5a:04:3f:84:5a:0c:1c:40:a0:b0:00:11:fb:cb:
de:d8:ab:94:7d:fe:b7:56:92:78:40:27:a8:01:d7:6c:34:c8:
f6:d4:c6:59:b4:b5:9e:4e:5a:cf:25:55:5f:10:d3:9c:77:5a:
1d:a1:3a:61:81:28:ae:a4:ba:86:c1:34:da:ec:71:1f:61:f8:
cb:7f:5e:51:cf:87:eb:1b:c5:c8:8d:36:87:f0:96:4d:dc:e6:
b8:6b:ac:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:58 2026 by rpki-client