Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143187.roa
File: AS143187.roa (raw, json)
Hash identifier: rvG3Oghn5P8WgZNi/fGgsqU9ik4AdxYiq9EHQ6Tzwts=
Subject key identifier: D5:2A:75:46:D8:48:F7:16:F1:55:94:4F:3A:3D:99:13:C1:60:96:11
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6387190AA5A215E7A075FA3539286F1DC709A1E4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143187.roa
Signing time: Mon 25 May 2026 01:51:02 +0000
ROA not before: Mon 25 May 2026 01:46:02 +0000
ROA not after: Mon 24 May 2027 01:51:02 +0000
asID: 143187
IP address blocks: 240a:a219::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:87:19:0a:a5:a2:15:e7:a0:75:fa:35:39:28:6f:1d:c7:09:a1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:02 2026 GMT
Not After : May 24 01:51:02 2027 GMT
Subject: CN=D52A7546D848F716F155944F3A3D9913C1609611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:f4:22:c0:ad:1e:20:55:cb:13:a5:6b:c4:
b8:42:86:58:ee:ca:ea:20:f6:f3:ba:96:06:5b:18:
d1:0f:fd:19:dc:f0:92:1a:8d:35:b3:57:04:dc:fe:
c6:2d:6f:e0:eb:61:cd:7d:b1:27:bc:47:b9:c4:94:
3e:e5:49:16:13:1a:8a:6c:b1:25:09:99:a7:35:30:
7c:3b:5a:43:ba:8c:18:cd:f3:37:3e:e3:f8:9c:4e:
88:12:2c:e4:d4:20:0c:d4:d7:0f:08:3b:70:22:6e:
75:1e:ec:1b:1b:47:58:60:09:c4:ca:1c:d5:7a:04:
b4:4e:07:76:6b:52:94:f8:cf:6f:e3:f2:13:d1:21:
f6:db:fb:85:fc:e9:51:ce:ce:f9:f1:26:a0:d9:8d:
be:7a:a7:2e:f4:31:b5:39:2c:d5:3d:af:b8:c4:74:
9b:b8:c6:49:77:ec:8c:64:b7:fa:e9:dd:22:14:78:
75:ca:38:46:5a:81:27:79:6b:bf:0d:58:fa:72:88:
54:c8:28:86:6d:17:83:76:02:55:b7:35:55:ca:33:
97:79:07:fa:f8:d6:1d:dd:90:f5:db:62:19:5a:9e:
1e:aa:66:d6:8e:be:05:5c:92:a7:b9:cb:49:77:29:
7c:66:a8:e9:20:6e:bf:0c:1c:cb:43:c7:45:ca:cc:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2A:75:46:D8:48:F7:16:F1:55:94:4F:3A:3D:99:13:C1:60:96:11
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143187.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a219::/32
Signature Algorithm: sha256WithRSAEncryption
54:b5:38:ae:73:cf:d5:6e:65:94:6c:90:c0:16:c2:1e:08:2a:
b3:6f:37:aa:08:bb:0a:8b:f5:0e:84:a8:4a:cd:66:9b:16:b7:
65:ad:fb:94:5e:81:04:b4:c8:2b:56:2c:69:3e:1b:8b:37:98:
61:65:24:1e:88:fd:2b:f0:78:f3:c4:d4:d4:ec:c0:9c:a5:91:
63:be:b6:25:04:df:62:a3:d4:8f:c2:95:b4:83:91:7c:af:1b:
65:c0:4e:79:f7:a9:c0:51:cd:e1:e1:7f:aa:c1:ec:d3:80:76:
7d:8b:8c:9c:1b:45:0f:26:c9:57:a6:25:e8:0a:20:0c:a0:d4:
47:60:a3:8b:e6:98:31:ef:a9:67:77:8e:15:ca:66:f2:35:aa:
29:cc:ba:55:e8:04:6f:55:63:39:07:8a:70:4b:5d:d5:9b:5b:
dd:74:be:ec:2e:31:5e:e6:a0:a0:27:ea:1f:f5:28:a0:ac:34:
5f:12:9c:65:22:e1:b0:1c:2d:77:cb:74:2f:95:dc:f2:5e:d9:
5a:89:4e:12:50:d0:d3:15:74:69:bb:f6:2f:b8:08:eb:62:98:
a7:96:be:35:48:48:42:7c:a4:5a:9f:ad:40:cc:55:56:af:48:
9f:5b:e6:6f:23:0e:0a:b1:3a:00:eb:6c:8b:06:de:c7:ea:e6:
ff:cb:f0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:58 2026 by rpki-client