Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143191.roa
File: AS143191.roa (raw, json)
Hash identifier: BuyhtoupVLV4P9rwiT+FXu95mvayYRsq6BM8HZXS8G0=
Subject key identifier: 18:C8:11:EA:A5:6E:5E:7C:3D:BF:63:C1:A9:93:6F:C2:19:06:E5:33
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5C56BCBAD36E529A409ACC105D313EC95B290E23
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143191.roa
Signing time: Fri 22 May 2026 06:46:07 +0000
ROA not before: Fri 22 May 2026 06:41:07 +0000
ROA not after: Fri 21 May 2027 06:46:07 +0000
asID: 143191
IP address blocks: 240a:a21d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:56:bc:ba:d3:6e:52:9a:40:9a:cc:10:5d:31:3e:c9:5b:29:0e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:07 2026 GMT
Not After : May 21 06:46:07 2027 GMT
Subject: CN=18C811EAA56E5E7C3DBF63C1A9936FC21906E533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:05:6c:e1:f9:3a:02:72:e7:40:13:34:7b:
8c:2f:24:04:d2:13:1f:62:97:1c:b1:b5:c1:c0:8a:
54:f9:c3:98:19:e2:69:a1:83:f6:6d:69:d8:48:38:
8c:bc:90:20:e6:dc:65:4f:45:68:70:a9:90:d8:c4:
ac:69:70:7e:e7:db:82:80:fd:17:d3:cb:b4:8c:e5:
b2:15:f1:d0:87:e7:e0:17:70:d6:ab:ae:a8:47:4e:
47:14:61:14:4b:7a:3f:f0:81:01:fd:41:56:2f:03:
03:94:2c:9d:36:42:ca:f5:a6:f3:b3:32:69:07:f2:
8a:4a:81:60:ba:4c:11:b2:11:1e:d4:a2:d5:38:9c:
ca:fd:7a:0e:4a:16:36:38:26:1a:87:45:5d:22:f1:
68:c4:46:9f:97:55:92:ed:cb:fa:10:b6:ad:4e:ad:
b7:52:be:92:10:a6:7f:d9:e0:f4:0a:07:b8:c0:c8:
52:ec:9a:9b:f4:08:de:b5:4a:2d:bf:15:c1:fe:2e:
65:cd:32:0a:74:f6:40:75:89:2d:25:82:24:64:02:
1e:db:d6:c2:f8:f2:1f:6b:62:41:2f:bc:c2:e2:a6:
b6:9c:a1:2e:39:e2:ec:58:07:77:e0:ad:97:b1:e0:
04:fe:60:48:35:bb:d9:c1:f3:c0:56:10:bd:70:c4:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C8:11:EA:A5:6E:5E:7C:3D:BF:63:C1:A9:93:6F:C2:19:06:E5:33
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143191.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a21d::/32
Signature Algorithm: sha256WithRSAEncryption
4f:aa:72:84:dd:90:c0:ed:56:a5:b7:98:09:18:d1:6f:e5:59:
40:8c:60:64:61:63:a2:6c:37:f6:38:38:d7:ce:2a:97:c3:ef:
c2:fe:68:2b:32:4d:1e:1d:08:51:20:bc:5b:48:26:73:b4:fe:
92:c5:e3:c8:69:73:78:79:fb:9d:33:49:6f:42:04:55:96:d9:
f4:1c:e7:38:83:4c:0d:59:7e:ca:29:db:1d:fb:a4:95:1d:30:
2a:f0:f9:fd:2a:78:49:45:30:33:9c:03:f5:64:b6:79:60:a7:
5b:48:b9:1d:a2:d9:45:6b:37:80:f3:f0:79:02:67:ff:a3:c2:
ad:ab:89:ae:1d:2f:aa:31:99:77:2f:28:f1:44:c4:63:a3:2b:
a7:46:ea:15:69:75:1b:4a:4c:57:49:56:ce:4a:40:66:4e:d7:
11:b8:86:d5:aa:31:55:98:29:ba:74:f1:a6:6d:b7:8e:2c:e4:
34:57:69:99:30:2f:22:ba:32:b3:a7:15:79:ac:83:c4:f8:15:
a0:fe:71:f1:a4:57:78:2a:8d:05:e2:bb:3a:1d:9b:48:0a:28:
3d:32:2c:d4:f1:f9:39:38:26:cf:78:a8:77:c1:71:90:8f:bc:
13:74:36:e7:10:49:ef:d9:af:ec:d2:0d:40:45:11:58:62:f3:
96:1c:53:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:44 2026 by rpki-client