Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143201.roa
File: AS143201.roa (raw, json)
Hash identifier: 0Ou/x/QzRZoUMRJHwzkeFA+EwTljgueHYFVEOyGnqYQ=
Subject key identifier: F8:51:17:CC:B1:45:62:D2:62:B6:97:60:DB:B4:5E:23:F2:DC:7B:30
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 15B87C75FF5753DE0A025A8E2F34228F63BE411A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143201.roa
Signing time: Fri 22 May 2026 04:08:03 +0000
ROA not before: Fri 22 May 2026 04:03:03 +0000
ROA not after: Fri 21 May 2027 04:08:03 +0000
asID: 143201
IP address blocks: 240a:a227::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b8:7c:75:ff:57:53:de:0a:02:5a:8e:2f:34:22:8f:63:be:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:03 2026 GMT
Not After : May 21 04:08:03 2027 GMT
Subject: CN=F85117CCB14562D262B69760DBB45E23F2DC7B30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:52:e5:93:4f:90:d9:48:66:ce:88:d2:aa:
9a:2e:6f:27:fa:e3:c8:c9:ed:b6:ed:fb:62:8e:9b:
c4:90:9d:1e:a8:e8:4c:ef:5e:b5:c9:33:5a:20:74:
33:cc:4f:0b:5e:4c:f4:e7:09:26:99:d1:ec:79:aa:
b0:0b:98:61:b3:a6:d3:0b:71:77:4a:eb:65:d3:b3:
50:5f:08:78:d0:42:b0:6f:e0:91:b3:af:4b:2b:ba:
26:a3:aa:6f:89:ed:a0:a9:0e:ac:6c:ef:01:a3:f8:
af:1b:4b:9e:75:62:34:d1:77:43:93:a3:15:46:d5:
38:fc:7f:e0:20:04:5e:9c:17:48:15:c7:11:ac:cb:
74:d7:db:25:29:df:e7:ed:3d:60:b3:aa:85:fa:da:
75:b0:cb:ec:d4:1a:f6:95:26:18:a3:0f:bb:ed:d7:
22:3f:06:c0:29:de:bf:a4:d7:9b:7a:21:53:a7:d6:
50:e7:a2:c8:28:38:cb:90:c6:03:04:13:35:c8:23:
be:44:86:07:68:f6:2f:c5:db:af:b0:76:21:1a:eb:
b1:f2:72:f7:8f:13:55:9a:ab:b9:be:d3:39:74:58:
0e:5a:04:34:9e:6f:b4:86:b2:76:af:6d:df:d9:5e:
ab:a7:8d:91:d9:9c:47:b3:5d:dd:2e:21:f4:f5:55:
91:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:51:17:CC:B1:45:62:D2:62:B6:97:60:DB:B4:5E:23:F2:DC:7B:30
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143201.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a227::/32
Signature Algorithm: sha256WithRSAEncryption
2d:e8:ed:91:10:51:70:51:86:36:a3:b3:23:ea:8a:fb:0b:17:
3b:9b:1c:2e:30:9d:77:7b:78:73:a7:1f:fc:07:94:7c:37:96:
65:12:87:e2:d1:27:a8:e8:47:9d:8a:4c:36:23:ff:b8:dd:68:
19:30:a6:72:80:f4:f0:49:33:cc:58:b9:91:20:11:a1:cd:20:
0e:bb:58:fa:a9:84:5e:6d:9f:69:a2:44:5a:30:03:d0:78:fc:
b0:b2:00:b1:f7:ff:44:8a:b1:4c:bb:ba:11:41:68:91:0d:41:
cf:25:27:05:10:e8:93:4a:6d:f5:1d:51:b7:af:d0:ee:1f:4c:
0c:87:98:62:97:94:30:04:82:04:f9:77:ab:b3:a6:58:c3:23:
3c:20:56:bc:d5:40:a3:65:2e:45:c2:9c:95:f2:bb:52:19:90:
38:cf:f4:e7:d4:f9:01:33:6a:ec:10:e8:60:5b:07:93:5a:36:
e1:ec:cd:c1:51:4a:0f:c6:d1:16:e8:bd:b5:dd:53:24:db:cc:
17:60:13:16:c4:b7:23:f6:2a:5d:d3:0f:70:1d:e8:22:d2:42:
8b:b5:2e:18:73:32:89:d6:75:51:b9:90:8e:93:e4:6d:39:fc:
8e:fe:a9:04:6b:66:ca:c7:2a:86:f8:dd:55:ae:f9:e2:72:a7:
c6:8a:dc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:41 2026 by rpki-client