Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143192.roa
File: AS143192.roa (raw, json)
Hash identifier: WeHziHhogtOjsr16Rm/alODXX8pjeIfvWgeQkRYdPzU=
Subject key identifier: B4:D4:CE:D6:22:A7:B6:91:69:96:C9:0A:DF:E5:F9:94:20:82:F3:0E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 22E695B2EB5DCAFBE6B4DF41B71841DE227ABA78
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143192.roa
Signing time: Fri 22 May 2026 04:27:13 +0000
ROA not before: Fri 22 May 2026 04:22:13 +0000
ROA not after: Fri 21 May 2027 04:27:13 +0000
asID: 143192
IP address blocks: 240a:a21e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e6:95:b2:eb:5d:ca:fb:e6:b4:df:41:b7:18:41:de:22:7a:ba:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:13 2026 GMT
Not After : May 21 04:27:13 2027 GMT
Subject: CN=B4D4CED622A7B6916996C90ADFE5F9942082F30E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:50:57:27:d7:82:ce:1a:a1:b2:3b:8d:4d:
f9:bb:14:e4:79:7e:32:c2:b7:f2:07:11:97:3e:ed:
4d:ab:f4:d6:1e:b9:74:8f:d1:bd:11:c5:f4:19:0e:
59:be:d6:17:5f:2d:18:45:df:ef:0d:46:86:71:41:
2b:fb:46:56:e3:52:a0:16:db:9f:94:68:3a:2d:df:
69:74:9e:27:91:f7:ab:9b:3c:7b:a7:ba:3e:6a:b2:
e6:36:b2:80:f6:c6:8f:68:78:71:92:04:0d:54:44:
aa:da:db:e2:44:4a:ea:83:56:23:6e:f7:5a:24:76:
f6:27:1c:44:ab:11:38:6d:b5:cc:98:a5:af:4a:f7:
8b:bb:78:d7:8e:bc:c6:23:09:5b:38:82:b3:45:65:
5f:99:55:3e:3b:f9:8b:de:be:13:9a:7d:f3:65:0d:
2a:6d:e5:1a:78:ef:c4:6c:f8:6b:93:0a:87:13:74:
18:c3:e2:22:69:cd:2e:2d:55:fb:46:4b:bf:40:82:
9e:91:35:c5:34:62:db:ef:87:32:1b:34:01:54:91:
a8:0a:03:9f:b0:02:59:38:90:52:0d:9b:6e:30:fd:
e6:42:21:3a:4c:f1:5b:d0:5b:66:34:90:d7:b3:b6:
1d:79:a5:95:03:f3:04:8f:a3:b4:01:30:c0:8e:fd:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D4:CE:D6:22:A7:B6:91:69:96:C9:0A:DF:E5:F9:94:20:82:F3:0E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143192.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a21e::/32
Signature Algorithm: sha256WithRSAEncryption
8e:5e:87:69:89:7e:f5:2e:31:35:4f:27:78:60:6f:f9:38:a2:
9f:ee:4b:75:9d:62:09:9a:6d:a7:30:9f:f7:75:bd:65:89:1c:
a1:cc:c2:7f:35:bd:ff:be:18:16:94:64:56:61:ef:5e:89:52:
57:22:5b:34:38:22:5a:d9:9e:97:f8:1b:bb:60:f1:c9:4a:fc:
cf:95:28:2f:a1:5c:49:2f:40:eb:3c:02:38:8a:aa:9f:d8:19:
bc:2f:12:7d:06:83:a1:16:89:45:d7:71:f3:72:b6:97:b6:6b:
5f:f9:c9:80:75:aa:90:6f:5c:f3:95:48:81:54:39:1e:42:58:
f2:78:e0:0d:df:7a:19:30:25:30:05:ec:33:7a:b2:61:fc:33:
9f:ca:f1:4a:6b:5d:15:72:6d:d3:04:ab:56:66:e5:f7:d2:ba:
24:9b:34:54:3d:f1:5a:5d:71:28:f0:80:85:60:ef:a3:7e:35:
20:d6:d0:24:72:58:48:c6:e3:d3:73:16:2c:23:0a:fc:7c:3c:
1e:45:7c:94:12:87:8c:f9:5d:0b:23:76:34:b6:1a:05:fd:d3:
cc:d7:f8:ab:4c:b9:33:77:3d:45:67:6c:b6:4f:fb:fb:50:0c:
30:d5:27:9c:de:5c:d1:85:47:f9:4f:41:db:68:bc:de:cf:78:
76:a1:5a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:40 2026 by rpki-client