Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143189.roa
File: AS143189.roa (raw, json)
Hash identifier: /HYscasJ4l+tAmq2/EhQ8q34jY6bfxtnUiUKoZ6w65s=
Subject key identifier: CE:E7:B9:F1:07:CB:BB:C9:06:00:DA:D0:92:5F:72:76:E6:D4:09:F3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4ABEEE6B0135340064FEF21E53BE15D0A5FE91BC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143189.roa
Signing time: Mon 25 May 2026 06:49:02 +0000
ROA not before: Mon 25 May 2026 06:44:02 +0000
ROA not after: Mon 24 May 2027 06:49:02 +0000
asID: 143189
IP address blocks: 240a:a21b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:be:ee:6b:01:35:34:00:64:fe:f2:1e:53:be:15:d0:a5:fe:91:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:02 2026 GMT
Not After : May 24 06:49:02 2027 GMT
Subject: CN=CEE7B9F107CBBBC90600DAD0925F7276E6D409F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:84:37:da:c7:0a:21:ac:6c:a2:9e:b4:55:
2f:7c:07:3f:40:49:9e:10:bf:5b:76:e6:fe:93:c3:
68:e4:7a:6d:fa:17:04:8b:b8:e3:61:e1:a4:21:6a:
70:29:c9:6b:17:a6:a2:2f:e3:89:e3:9c:67:8c:8a:
54:e6:1a:aa:85:88:d1:75:fa:ee:1c:d0:82:b7:98:
15:b4:f8:e7:85:36:e2:fd:af:89:55:fb:d9:54:2e:
4b:6c:ef:75:bb:19:b7:d6:8e:35:64:e2:cf:eb:67:
a9:2b:c8:67:64:a6:2d:85:3a:af:ac:06:e8:48:15:
a2:6e:46:68:9a:90:be:81:26:e2:9b:81:35:97:15:
fb:2a:1a:15:b7:4b:c8:4f:07:c1:12:17:9f:30:13:
2c:20:f5:47:0d:57:36:11:cf:19:c5:7c:0e:d7:d4:
2f:f1:3f:2f:8c:ac:45:97:58:4d:bc:27:45:2b:fd:
b6:58:9b:d3:30:f9:8d:ac:02:da:e3:45:45:3b:c7:
66:e9:14:a5:56:3d:75:16:15:ef:6f:18:fe:03:61:
05:da:99:b1:59:8f:ab:7b:aa:48:fb:85:5e:9f:ef:
c1:4b:a2:ee:1c:55:1a:94:4f:5a:4a:8c:24:78:28:
fc:a5:7c:85:55:be:bc:ff:19:5f:10:ff:80:1d:7d:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E7:B9:F1:07:CB:BB:C9:06:00:DA:D0:92:5F:72:76:E6:D4:09:F3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143189.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a21b::/32
Signature Algorithm: sha256WithRSAEncryption
a6:94:2f:4e:77:01:30:11:ed:a6:66:ab:ae:4c:0c:ae:5f:2c:
e3:47:0a:68:42:8d:1b:93:86:cc:0e:82:e5:c1:47:99:5c:db:
08:8e:9a:e1:88:3c:98:8f:d0:15:fc:e1:eb:bc:74:05:6e:61:
2e:60:3d:09:b7:4c:e7:13:90:34:1c:bc:bc:66:e6:4e:e4:e5:
54:d8:07:13:af:eb:29:1c:8d:15:13:a4:cd:e4:1e:12:63:c3:
c5:00:43:80:68:1a:69:4f:b6:69:3c:df:19:b8:fe:46:cf:84:
6b:09:f4:e7:44:fd:f4:29:2e:1c:29:14:50:24:60:99:b1:32:
58:36:29:9c:c7:92:35:5c:27:a8:a5:1d:b0:1e:ca:76:1f:36:
88:95:af:fd:79:56:93:46:09:3c:d9:36:3c:cf:2f:31:e9:26:
1b:71:97:ea:a6:8f:47:f2:fd:ba:ab:13:0b:97:f8:f4:91:eb:
27:97:bf:06:47:0b:24:8c:c9:f0:06:aa:e4:3f:b2:7b:ee:26:
9e:1a:09:9c:76:8a:e0:26:ae:e2:8b:96:fc:e2:e9:e9:56:98:
0e:6e:19:93:a1:ed:fc:8a:25:d5:a6:36:2b:93:f5:75:22:0b:
0e:99:54:79:c7:55:e8:d3:25:bd:cc:aa:7e:10:f8:5d:9c:c7:
1c:33:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:16 2026 by rpki-client