Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143203.roa
File: AS143203.roa (raw, json)
Hash identifier: +CRtS5koB6popteJ9wZmL8vVJ5Kvhx2ocDbeYjHyOG0=
Subject key identifier: 80:6E:D0:34:4D:B2:D3:3A:C6:68:72:15:BC:A3:6F:DC:AF:DD:ED:5A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6C829789C12F1DB1B9AEE162F985838B0F441B8B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143203.roa
Signing time: Fri 22 May 2026 07:09:02 +0000
ROA not before: Fri 22 May 2026 07:04:02 +0000
ROA not after: Fri 21 May 2027 07:09:02 +0000
asID: 143203
IP address blocks: 240a:a229::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:82:97:89:c1:2f:1d:b1:b9:ae:e1:62:f9:85:83:8b:0f:44:1b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:02 2026 GMT
Not After : May 21 07:09:02 2027 GMT
Subject: CN=806ED0344DB2D33AC6687215BCA36FDCAFDDED5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:b7:cb:6e:b6:89:28:05:ac:15:19:1e:b7:
89:98:6e:6a:29:46:59:89:6f:21:74:0d:93:9b:53:
92:61:fc:43:a1:c9:bb:af:f6:dd:35:86:5b:b5:bc:
c7:14:d5:3e:14:74:8c:fb:f7:28:de:ab:35:40:fb:
b7:78:af:aa:15:f1:b8:34:27:e1:79:fc:61:0c:0e:
94:61:41:ca:52:fa:23:79:f3:85:d7:4d:72:09:b7:
17:65:8a:73:c2:a5:39:4d:6b:d9:e3:df:14:e3:25:
c5:f4:f3:f4:b7:3d:9d:92:8f:bb:d3:86:ab:90:a0:
30:39:ca:6e:41:e2:1d:dc:5c:fa:be:0b:b3:6e:5d:
23:19:b2:1b:2c:23:97:d3:8b:be:75:5d:30:52:43:
31:a7:19:6e:c8:b1:d2:ac:b3:d5:7d:ca:dc:e4:fb:
6d:26:34:62:27:89:92:ec:c7:59:19:4f:f9:50:17:
01:27:e6:75:1d:72:ef:48:53:5d:49:24:42:80:70:
97:c8:09:dd:4d:b1:c8:01:53:65:81:c0:58:c8:38:
6c:91:b9:e5:a5:13:27:97:fc:1e:cd:6f:e6:bb:3a:
3c:ec:9d:15:fc:9d:83:80:18:8f:a6:6a:fe:e4:58:
21:ec:19:54:85:e8:16:1c:71:86:4c:1c:c9:41:90:
75:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6E:D0:34:4D:B2:D3:3A:C6:68:72:15:BC:A3:6F:DC:AF:DD:ED:5A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a229::/32
Signature Algorithm: sha256WithRSAEncryption
84:15:2a:1b:0c:cd:00:92:b2:7b:53:65:b1:c9:52:47:23:1f:
d5:8a:7e:d9:56:91:02:4b:39:28:63:e6:e5:b8:0c:f7:f7:a7:
5b:35:2a:d1:24:e4:d4:cb:e5:28:ff:88:2b:ac:4c:37:ae:c4:
98:2f:b9:55:6a:2b:b7:f3:ff:29:2e:f4:e2:c9:7a:66:4a:54:
72:c7:4e:99:00:3d:9e:64:f7:d5:85:49:b7:a2:c2:73:e7:20:
5c:7b:1f:61:b6:40:1f:3f:b4:b4:bb:51:98:25:ec:92:1b:e0:
2b:71:56:0b:85:02:a4:fe:cd:d4:9d:b3:00:d3:ad:c0:2e:a3:
47:86:54:66:24:8d:80:a9:17:14:b1:09:59:f0:c6:cf:e4:f8:
cc:7a:3f:f4:fd:dd:90:69:0c:4f:d0:bd:0f:37:a0:54:83:53:
c2:07:55:db:be:62:dc:72:8e:a0:c9:36:a9:7b:5c:8e:24:97:
ad:0b:69:25:3d:c7:84:d9:96:11:1c:f2:9e:da:2f:27:ab:f8:
ef:4e:13:0c:13:03:84:60:e7:cc:cd:60:44:a7:58:2b:5d:01:
e6:0f:6d:39:c8:47:af:ea:3e:4e:f7:5e:ac:68:28:7e:22:66:
27:ff:7b:3a:d4:c2:68:37:3d:1e:d2:47:f0:96:58:f9:be:46:
97:bd:09:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:25 2026 by rpki-client