Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143206.roa
File: AS143206.roa (raw, json)
Hash identifier: 2VNeCy5u7WeyPhk7kXfIFD+vM6QmVVDJRDITnmWwbOQ=
Subject key identifier: B1:C2:0A:90:57:27:F5:27:91:1A:CB:9F:BB:5A:57:BC:3E:AD:84:1A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0B78314337DBCF40B218CBE08129FE8B859B040D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143206.roa
Signing time: Fri 22 May 2026 01:50:16 +0000
ROA not before: Fri 22 May 2026 01:45:16 +0000
ROA not after: Fri 21 May 2027 01:50:16 +0000
asID: 143206
IP address blocks: 240a:a22c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:78:31:43:37:db:cf:40:b2:18:cb:e0:81:29:fe:8b:85:9b:04:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:16 2026 GMT
Not After : May 21 01:50:16 2027 GMT
Subject: CN=B1C20A905727F527911ACB9FBB5A57BC3EAD841A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:94:6f:cf:42:85:4e:a6:99:bf:e1:85:48:
dd:c1:13:c5:c1:ac:e9:e4:a3:b9:43:f4:f2:aa:c0:
62:c3:3d:d2:61:e3:3d:2a:15:79:12:e3:85:3c:9b:
9c:b4:5f:f8:86:c6:1d:8e:2b:0b:b4:fd:ce:2e:e8:
04:b4:31:40:6a:7f:4e:72:ac:57:84:07:08:02:17:
23:21:04:ff:66:24:66:d9:77:7f:c9:e2:ed:81:95:
37:f9:89:2b:f1:5e:73:7d:9b:ad:64:46:ff:d7:d2:
2f:aa:21:d3:5d:da:95:b9:d4:df:1d:b5:bf:c7:bc:
ba:7e:f6:37:ee:66:fb:8e:7c:95:5b:54:53:4e:57:
c5:37:ec:1c:09:ab:43:04:c2:7c:7a:77:31:a4:cf:
31:bb:9c:58:7a:86:f0:2c:f7:eb:02:ca:de:1d:8c:
c6:f2:fe:32:d4:a8:bd:13:12:39:b7:c2:dc:2c:82:
7f:42:db:8f:f2:8f:6f:7a:41:48:36:7c:07:c1:65:
f6:00:74:0d:9b:80:3a:20:2c:2c:8a:57:d1:38:ec:
23:36:98:31:86:3d:8a:74:48:96:35:9d:b2:fa:bc:
c1:c9:2f:77:8d:76:62:61:6f:f7:d9:2f:94:4d:77:
9b:98:b5:c4:c8:ef:04:35:30:c1:0d:1e:b4:ae:b6:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C2:0A:90:57:27:F5:27:91:1A:CB:9F:BB:5A:57:BC:3E:AD:84:1A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143206.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a22c::/32
Signature Algorithm: sha256WithRSAEncryption
1a:47:f2:dd:be:af:d8:91:46:67:02:48:44:76:0d:47:14:75:
82:7d:40:1d:b6:6e:0e:55:f5:5f:e4:30:f7:cc:93:1e:06:25:
fb:7b:13:0e:c8:9c:8c:c8:e7:f8:ad:58:82:7d:c2:be:cc:b4:
9b:ea:6a:3b:93:bb:35:00:2a:43:90:6e:2a:01:ae:b8:9d:f0:
3e:3d:d2:5e:49:e4:26:8a:d9:23:b5:aa:42:0b:d5:c9:62:ed:
62:83:f8:8f:46:e3:cf:cb:08:86:f7:20:4d:f4:0c:37:e2:f2:
31:34:6c:26:e9:e6:df:15:ba:06:ac:9d:6b:46:04:28:93:0f:
8d:c8:b7:f5:2b:f3:54:9c:f4:a9:58:22:b3:87:27:0c:28:cc:
2e:64:95:ab:90:b4:ac:19:99:e9:9b:d1:c5:c7:40:37:8f:12:
03:e6:f3:56:0f:15:46:53:a7:e4:45:bc:51:cb:02:64:66:0f:
54:cc:c0:ee:3c:38:7a:72:5c:b3:5e:cf:52:fd:d9:46:de:b4:
e0:74:1f:e6:38:88:ae:ef:d8:60:33:89:b9:1d:f7:ee:6c:50:
ab:66:9b:be:d1:75:97:c1:17:2b:1b:f6:e3:1b:c1:d1:94:0d:
2e:72:f3:28:3b:81:e5:16:8e:74:2e:f8:c1:a9:03:bf:4a:48:
b2:9b:36:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:27 2026 by rpki-client