Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143202.roa
File: AS143202.roa (raw, json)
Hash identifier: EEv02mztsUy5c2y0d7JhwriVXsUAAVr9hdrCAIi7hp4=
Subject key identifier: D7:E0:D3:EA:E4:16:4D:26:92:B3:D2:55:66:02:A1:78:1B:D9:9B:1F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 74F58BA5A17AE7A5C660A2F11B7DD614B33C06A8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143202.roa
Signing time: Mon 25 May 2026 01:19:55 +0000
ROA not before: Mon 25 May 2026 01:14:55 +0000
ROA not after: Mon 24 May 2027 01:19:55 +0000
asID: 143202
IP address blocks: 240a:a228::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f5:8b:a5:a1:7a:e7:a5:c6:60:a2:f1:1b:7d:d6:14:b3:3c:06:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:55 2026 GMT
Not After : May 24 01:19:55 2027 GMT
Subject: CN=D7E0D3EAE4164D2692B3D2556602A1781BD99B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:fd:0e:d0:88:2d:88:7a:5a:65:08:62:6d:
26:46:a8:54:ae:3b:62:09:fc:18:fd:c5:54:87:0e:
89:bc:a2:77:b4:70:8c:6c:29:ed:49:7c:58:bf:a0:
6b:82:28:0d:85:d6:a9:b4:ff:a6:e0:d0:ca:58:e2:
dd:39:73:3d:25:1c:1a:3a:60:31:e3:21:e2:d7:3f:
68:6a:79:89:2f:0c:c2:c2:11:c2:64:ee:ba:ad:9a:
79:16:29:e4:41:fc:57:ad:8f:23:2f:1f:0d:e0:78:
62:29:29:6e:0e:85:b5:17:e3:3b:f5:be:79:8c:6e:
97:64:4c:bc:fa:f6:59:b1:92:26:0b:c9:62:40:57:
79:9f:15:75:bf:1c:fa:6b:21:24:4c:e3:8a:f7:66:
e6:06:71:28:68:6c:8b:54:f6:68:19:b5:04:02:86:
b7:99:9e:77:40:8e:14:17:07:e9:b1:af:3e:ab:fa:
ca:03:b5:48:38:1f:a6:2a:a1:e8:59:f0:ea:50:07:
bd:f8:72:ea:4f:81:a7:50:d0:0d:6a:c5:e3:e6:21:
07:93:de:02:9d:6b:d4:cd:b0:12:3f:24:8a:af:1e:
34:32:b1:1c:11:fb:90:40:c6:77:cc:63:c0:63:df:
0d:02:7c:b8:f4:1f:96:ec:59:22:6c:6c:9d:90:7d:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E0:D3:EA:E4:16:4D:26:92:B3:D2:55:66:02:A1:78:1B:D9:9B:1F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143202.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a228::/32
Signature Algorithm: sha256WithRSAEncryption
1f:d1:e6:7f:7f:8f:62:8e:b4:a6:31:f7:a1:12:a8:a7:71:ee:
a9:f0:14:52:67:7b:7d:b3:dd:56:95:d1:93:90:8f:b1:c2:13:
27:ef:48:83:61:c1:9e:a3:73:0d:6c:a2:75:91:d7:7c:42:c5:
51:62:81:a6:7b:22:53:6d:f3:65:62:5d:bf:89:f2:50:60:8d:
d5:16:93:1a:5a:57:db:80:1d:01:cd:ed:ed:9f:92:11:9f:af:
a6:34:30:e5:3e:bb:b4:29:79:de:ac:b8:af:33:2b:87:39:20:
8e:e0:22:be:d3:9d:8d:56:ce:33:20:8c:49:e4:04:58:2a:6d:
a0:46:a8:0a:45:76:41:f2:d4:34:c6:4b:3a:ca:71:d9:29:73:
ca:b0:01:7d:f2:20:84:bb:3a:27:f9:54:b5:9e:9e:8e:0f:49:
8d:d3:27:3f:68:98:e6:77:e5:02:f9:f0:38:a7:48:22:4c:23:
b8:35:a2:d6:54:be:08:fa:3f:f9:0b:34:19:b4:65:b9:9b:d3:
87:1c:12:00:50:c7:68:07:fb:7e:c3:a9:76:8a:bb:00:46:2a:
e5:68:ad:51:94:bb:3a:fb:40:ba:43:67:f9:c5:84:93:b9:8b:
f1:fa:63:56:79:36:92:b3:b1:68:bf:b0:8b:39:71:27:ad:8c:
bd:79:22:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:07 2026 by rpki-client