Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143195.roa
File: AS143195.roa (raw, json)
Hash identifier: 5dHMkZfNBuOeKCw5KfDRlon0qz5p9ZKriAULyBN9fuE=
Subject key identifier: 3C:3F:9E:A9:26:C2:78:D4:09:ED:AD:14:3C:88:95:5F:A7:D9:FB:DD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 08C34DC9F6316E4DF2103546E9B6C8E1C6C303E6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143195.roa
Signing time: Fri 22 May 2026 04:27:07 +0000
ROA not before: Fri 22 May 2026 04:22:07 +0000
ROA not after: Fri 21 May 2027 04:27:07 +0000
asID: 143195
IP address blocks: 240a:a221::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c3:4d:c9:f6:31:6e:4d:f2:10:35:46:e9:b6:c8:e1:c6:c3:03:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:07 2026 GMT
Not After : May 21 04:27:07 2027 GMT
Subject: CN=3C3F9EA926C278D409EDAD143C88955FA7D9FBDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:af:33:5f:93:df:cb:88:fe:1a:99:26:6a:
27:8c:7a:b2:3d:6b:5a:0d:3e:d5:cf:87:97:0f:6e:
68:1d:57:b6:c0:d2:63:79:07:97:d5:6d:42:61:e2:
57:24:a9:b7:71:b7:9b:79:f4:0d:45:f9:5d:5d:ba:
da:9a:9c:c2:ce:97:8b:f7:e2:c3:78:b0:b3:8c:02:
36:02:c2:8d:52:99:68:d4:04:82:ef:c0:d0:34:5e:
d8:45:74:fa:ea:29:9c:cb:2b:f4:19:b1:fc:11:06:
35:58:74:fa:39:be:10:40:0a:0b:f6:9e:3a:28:1a:
56:0e:13:e0:c7:1d:08:7e:ea:4e:e9:7e:18:6c:a3:
ed:38:1e:1c:42:92:bf:0b:40:3a:4a:64:0b:58:07:
ba:7d:2a:b1:50:a7:f2:4a:e1:1d:1d:0d:90:1b:9b:
74:5e:a5:c8:d1:7c:b1:33:ea:fe:c0:f9:ee:11:83:
2f:9e:76:7a:a2:77:75:30:ed:14:05:ee:ab:40:be:
d6:63:a4:ba:49:5f:68:97:c5:09:32:5e:19:16:17:
4f:0d:fe:4e:1f:14:52:98:dd:d3:34:7d:c2:19:43:
66:19:cb:27:3a:32:de:8f:fd:dc:92:c9:94:ef:ee:
2d:15:c1:65:41:58:1b:cf:f6:a7:14:bf:db:d8:4c:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3F:9E:A9:26:C2:78:D4:09:ED:AD:14:3C:88:95:5F:A7:D9:FB:DD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143195.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a221::/32
Signature Algorithm: sha256WithRSAEncryption
7c:48:96:27:85:4e:26:11:39:2a:b4:2a:c8:e7:4a:8b:e6:d1:
3a:7f:c2:a9:33:36:de:e9:3c:d3:3f:f3:34:25:e4:7c:60:76:
22:88:84:0a:5e:05:53:36:2d:3b:14:d5:fc:29:24:ac:60:5b:
6a:93:c8:fb:ab:78:39:eb:d1:9c:73:b1:64:e7:44:f7:90:e4:
91:98:d5:1a:f1:88:f4:e5:82:c4:6e:f5:43:b4:05:64:29:a3:
cd:23:59:7a:95:1b:9e:4b:33:f0:91:db:87:2b:1b:6d:db:69:
12:2d:26:ad:0a:27:75:20:6a:82:89:74:d0:da:0d:db:a1:e9:
b9:73:ef:3f:a1:c2:7a:6b:80:f8:64:88:8d:68:87:aa:04:6a:
8b:e3:5e:b4:c3:be:4f:d7:35:58:19:a7:63:73:7c:dd:15:f3:
b8:04:dd:c3:38:24:4a:e4:29:25:79:32:e4:c1:b3:73:4e:9a:
a1:e1:fd:bc:64:c0:9f:07:46:e8:3c:b5:dc:d3:49:20:e7:98:
d9:ae:c4:d4:c7:10:ca:b2:d7:70:56:fa:27:8a:9a:26:cc:e9:
be:d8:d6:d2:8e:03:eb:41:d4:f8:6b:29:5f:25:bd:86:8b:38:
aa:4f:43:0d:05:74:92:76:aa:59:fe:a6:8e:48:d7:01:db:55:
49:1d:ad:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:41 2026 by rpki-client