Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143215.roa
File: AS143215.roa (raw, json)
Hash identifier: uiEZnvQIx/26M1WkQt4syW1mWzvbEngruKYubI4J1w8=
Subject key identifier: 4F:49:40:61:71:42:4A:78:F4:72:AD:46:B7:49:8E:BF:2E:66:D4:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7636EC2C63EE0728BCA2F002B0E4110E363C8ED1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143215.roa
Signing time: Mon 25 May 2026 03:19:25 +0000
ROA not before: Mon 25 May 2026 03:14:25 +0000
ROA not after: Mon 24 May 2027 03:19:25 +0000
asID: 143215
IP address blocks: 240a:a235::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:36:ec:2c:63:ee:07:28:bc:a2:f0:02:b0:e4:11:0e:36:3c:8e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:25 2026 GMT
Not After : May 24 03:19:25 2027 GMT
Subject: CN=4F49406171424A78F472AD46B7498EBF2E66D42B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:0b:5e:2c:4e:a5:01:7d:0d:50:d4:dd:4c:
9c:cc:88:19:df:63:14:38:9a:6e:af:69:3d:29:b2:
8a:cb:de:e0:47:ce:06:62:b6:f8:48:46:c2:a7:c9:
43:d1:5c:e9:3f:f5:d9:6b:6c:1b:31:bd:d9:a3:38:
80:0c:c4:90:0a:20:f6:d1:f1:41:4a:3f:f0:26:1a:
fd:ad:01:dd:2c:fa:62:e4:a8:85:60:a2:fd:03:eb:
35:e0:22:1e:90:86:00:c9:6c:ee:70:87:ad:ce:cc:
0d:fa:e4:fe:f2:cf:43:35:5c:fc:31:ec:3e:9d:be:
23:85:9e:fd:a8:ca:17:f5:2f:42:9b:bd:29:f8:0c:
5a:4b:af:f8:79:9b:70:4b:7b:a4:3f:c4:90:bd:d6:
ce:b7:2a:92:01:7d:72:81:ed:1b:16:8d:41:a6:da:
94:21:bb:b9:ed:7d:92:cf:08:60:6b:56:c9:91:5b:
32:15:95:24:1f:f9:20:7d:aa:f7:b4:14:3a:2a:8d:
70:99:79:17:fb:d0:15:21:3f:e6:3c:1c:4b:2d:17:
ef:93:9f:ca:c6:8d:c2:8f:e3:9b:33:e2:ff:28:a5:
6e:15:9b:a6:11:1e:a9:4a:41:ee:ea:47:87:4b:59:
3b:25:2d:0b:4c:96:39:74:69:d1:e8:f8:59:87:69:
ef:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:49:40:61:71:42:4A:78:F4:72:AD:46:B7:49:8E:BF:2E:66:D4:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a235::/32
Signature Algorithm: sha256WithRSAEncryption
86:74:3d:5e:31:01:f3:4c:1e:d9:c2:71:e5:84:de:f9:f3:ef:
3d:87:74:3e:81:13:5a:a2:c5:49:4f:43:82:d1:f7:56:55:18:
9c:de:fb:8e:9b:c1:50:ec:60:34:25:7c:b9:9d:51:09:72:1e:
bd:69:8b:f7:ae:20:21:20:bb:51:07:a1:a6:07:06:ea:12:00:
67:e4:8d:f9:75:50:b2:ed:7f:c4:ef:38:29:bc:cc:bb:95:b8:
8d:5f:ae:87:7e:da:72:e9:c3:9c:f2:c2:02:23:ee:17:51:1f:
b4:d9:da:eb:0b:65:34:2b:dc:e3:69:83:7d:33:96:f8:d5:5c:
3b:5d:36:28:ad:1b:15:1a:75:76:d2:64:95:33:c9:e0:7c:8e:
6d:5b:12:42:eb:cb:d1:69:55:5b:cc:44:7e:fe:60:ad:70:bd:
0e:4a:21:97:b0:20:9d:0b:50:55:54:2f:27:38:2b:e5:5c:0f:
db:30:72:4f:c5:b8:be:45:4c:6f:90:48:08:63:79:6b:f2:11:
fc:1f:dc:44:62:54:53:cf:9d:ab:59:33:fe:b5:dc:5b:bc:fd:
0c:b8:43:ee:15:ea:89:49:25:7b:e0:f3:05:a6:05:6e:93:e5:
ea:54:2d:d7:91:73:cb:ab:0a:7d:11:fd:21:8a:3e:e3:c6:8c:
3e:a4:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:26 2026 by rpki-client