Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143188.roa
File: AS143188.roa (raw, json)
Hash identifier: E4tnORLVj2apuEVgG1ZH0fDx0kfSafYzQCs355XTLw8=
Subject key identifier: 82:19:81:69:A8:35:BF:54:8B:58:58:AE:DD:E8:C3:3A:A5:13:0D:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 167C85F1377A7565A31B6B798488931A97E59D5F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143188.roa
Signing time: Fri 22 May 2026 07:24:40 +0000
ROA not before: Fri 22 May 2026 07:19:40 +0000
ROA not after: Fri 21 May 2027 07:24:40 +0000
asID: 143188
IP address blocks: 240a:a21a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:7c:85:f1:37:7a:75:65:a3:1b:6b:79:84:88:93:1a:97:e5:9d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:40 2026 GMT
Not After : May 21 07:24:40 2027 GMT
Subject: CN=82198169A835BF548B5858AEDDE8C33AA5130DE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:15:19:a3:d3:2e:68:10:02:d8:5e:f5:25:
58:19:3c:27:b0:0d:fe:46:52:bd:c6:16:07:8d:04:
2c:da:33:67:65:68:23:a6:60:df:38:1a:40:f0:22:
47:68:77:c7:9a:e7:08:c9:3b:b4:52:4d:1b:34:67:
7e:75:d9:e7:8a:31:bd:ac:d9:41:9d:9e:95:b9:d1:
54:e5:fc:71:b2:0c:e9:bb:90:d3:f5:f5:69:3a:a5:
eb:87:20:45:5f:b7:59:c6:8d:bf:00:d9:0f:2b:96:
9d:e7:09:92:17:ba:46:1c:75:6a:29:06:00:99:7f:
b2:ba:89:52:bc:f1:e6:79:f4:7e:29:dc:3c:0f:2f:
18:1e:4e:80:d5:ac:0a:c2:d2:1e:99:80:2c:c4:b6:
25:a7:0e:bc:a8:2e:0b:c5:bf:3f:7e:79:dc:c1:c8:
26:1f:b7:57:fc:5c:d6:27:78:98:1a:b1:60:bc:fe:
d7:a7:f7:02:ba:20:ff:6d:60:5d:d0:92:11:3b:8d:
36:46:c2:a9:57:a3:54:50:f7:4f:b2:e7:56:fc:1f:
07:a1:75:55:71:87:36:4d:43:d3:77:ba:35:8f:14:
81:e2:3b:9a:23:51:7b:09:98:5d:00:45:a1:8b:a4:
4b:92:82:4d:cb:5a:02:d5:bd:2d:da:ab:91:ef:49:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:19:81:69:A8:35:BF:54:8B:58:58:AE:DD:E8:C3:3A:A5:13:0D:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143188.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a21a::/32
Signature Algorithm: sha256WithRSAEncryption
a6:43:44:3c:5e:44:b4:fa:51:29:7a:28:40:10:9c:a0:4d:1c:
fd:24:c7:57:a9:8a:c4:d2:1e:46:02:69:14:20:a3:9b:13:10:
7c:50:54:03:5f:26:59:61:14:09:8a:45:0b:b0:cf:9d:d7:17:
cb:a2:79:33:8e:e6:73:5d:82:d4:0f:8a:32:8b:de:45:a4:98:
4c:5a:9d:a2:80:3e:0d:0f:98:b0:e8:af:bc:8d:ab:d1:76:39:
d6:f6:51:0b:82:fc:c6:77:4a:e7:53:c8:b9:d2:03:cb:43:a8:
df:98:58:37:af:b8:3d:0a:27:c0:f8:af:38:97:13:7b:c9:5d:
68:f6:13:88:1b:e3:91:57:17:0c:ef:e4:46:2e:8c:86:64:4e:
59:bf:65:f6:03:1a:2b:3f:ef:3c:7d:f8:3a:71:c7:a2:45:36:
cd:19:38:37:a8:12:b7:0b:5b:2a:d6:62:0e:64:ff:0e:9b:cb:
48:d5:11:cf:ed:13:d0:26:14:e4:f2:13:e0:70:4a:a7:24:b1:
81:68:8a:49:eb:93:2a:c2:92:d4:b3:51:e9:58:2b:59:28:83:
6a:9b:16:65:48:eb:65:6a:91:67:ee:05:b8:4b:d8:c4:90:35:
9d:e9:0d:ed:76:3c:d1:9e:7f:44:2d:3d:9e:d8:ce:db:21:83:
d5:3a:c6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:56 2026 by rpki-client