Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143208.roa
File: AS143208.roa (raw, json)
Hash identifier: D3bGgMsI34WQ2vs+sGPXIN6XoUQ7lad5Kb02JkAXjII=
Subject key identifier: C9:A4:22:47:05:FB:B3:9B:57:A2:8D:D7:DC:D3:10:2A:7F:4E:8A:FD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 497ED313C6F3AB453D158847AC3B8BEF01F6BA5F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143208.roa
Signing time: Fri 22 May 2026 04:26:58 +0000
ROA not before: Fri 22 May 2026 04:21:58 +0000
ROA not after: Fri 21 May 2027 04:26:58 +0000
asID: 143208
IP address blocks: 240a:a22e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7e:d3:13:c6:f3:ab:45:3d:15:88:47:ac:3b:8b:ef:01:f6:ba:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:58 2026 GMT
Not After : May 21 04:26:58 2027 GMT
Subject: CN=C9A4224705FBB39B57A28DD7DCD3102A7F4E8AFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:b7:db:70:56:c9:8c:a7:2d:c6:d6:fb:a3:
ae:1b:4c:8e:7e:bc:cf:91:e4:8c:f1:27:5c:0a:5a:
d5:50:c8:dd:a2:9c:1d:3d:52:5c:ca:19:ee:70:75:
fb:cc:b1:6a:3b:29:e8:b5:14:d3:e7:af:3a:1d:ff:
74:de:de:ee:6e:64:b8:50:ae:c1:85:23:e3:18:c9:
31:07:26:b0:9e:64:7f:26:d5:34:3d:9a:a0:46:f2:
be:f5:de:25:9f:39:9f:37:54:db:7b:d7:ab:af:3b:
1a:5d:8f:93:99:a4:06:30:d0:f9:56:56:45:e3:b1:
84:00:39:80:38:34:cd:4a:da:8c:96:66:ef:70:9c:
ce:1d:6a:d3:2a:5c:6b:93:e8:cd:0d:86:aa:39:ee:
66:8c:fa:42:b1:f0:1f:d7:d9:4a:ed:75:66:83:16:
16:5b:bb:64:25:33:3e:67:8a:cd:28:af:0e:1e:d2:
58:ea:31:6e:af:41:d9:13:76:24:5f:2b:60:72:90:
6b:8e:ff:62:9d:08:80:60:c8:d0:0b:a6:20:f8:c4:
2d:8b:de:02:53:b4:41:42:6b:f5:ec:95:95:e7:ba:
f7:ac:bd:44:66:af:57:a7:ae:f2:39:cb:f7:3b:e4:
cc:d1:e9:c7:60:32:66:b1:41:ff:45:8f:2a:60:d8:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A4:22:47:05:FB:B3:9B:57:A2:8D:D7:DC:D3:10:2A:7F:4E:8A:FD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143208.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a22e::/32
Signature Algorithm: sha256WithRSAEncryption
1b:50:2f:c1:a2:26:6c:6c:44:55:de:f9:c2:7b:a9:0d:1b:45:
09:63:ec:45:4e:61:7e:4d:a5:36:d7:e7:4d:d0:fa:ec:d0:ce:
d2:24:9a:45:b1:0f:86:1c:b7:9e:fe:4f:30:ee:2a:37:12:19:
02:bd:e0:08:72:a5:df:de:05:0c:eb:ef:b3:91:7f:bb:2c:84:
74:60:bf:7f:a5:a8:4f:34:58:f9:d3:42:52:8e:2f:95:40:fd:
ac:f2:1f:fc:ca:2e:aa:e5:27:10:c2:c2:6d:cc:d1:9a:65:79:
ca:35:6a:c1:39:e3:ca:0b:77:17:d7:31:46:e8:69:ad:7f:3f:
c4:04:e9:ba:89:60:08:4c:ad:26:90:f0:40:47:6a:b1:97:38:
6a:8d:93:17:ac:58:21:1d:b0:30:7d:66:35:93:84:a9:4d:2d:
ed:1d:4f:01:ce:ea:d4:ee:16:eb:23:f7:e8:db:81:39:4d:63:
d9:26:15:23:39:e5:57:e6:c4:11:51:6e:77:b8:64:9b:e9:5e:
50:ce:5c:8f:5d:97:48:12:50:58:47:17:f6:d6:d7:ab:a6:1d:
4f:1f:3e:b4:c1:b9:13:ff:e3:0e:fe:73:6b:f5:4c:77:05:be:
e6:92:38:8f:7e:36:7b:67:cc:f1:f4:6b:9b:24:52:03:7d:60:
a4:84:65:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:43 2026 by rpki-client