Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143217.roa
File: AS143217.roa (raw, json)
Hash identifier: 6whUpPzcA9a6gpWmuf6SVRNOivf5VQLW/Qcm24gm3iI=
Subject key identifier: C1:6B:37:DE:41:83:55:79:8F:B3:A1:73:14:32:22:D7:BC:20:0F:11
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3C6C81A67E76C095FF65E3AC23BF847CA4E9366A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143217.roa
Signing time: Tue 26 May 2026 06:30:55 +0000
ROA not before: Tue 26 May 2026 06:25:55 +0000
ROA not after: Tue 25 May 2027 06:30:55 +0000
asID: 143217
IP address blocks: 240a:a237::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:6c:81:a6:7e:76:c0:95:ff:65:e3:ac:23:bf:84:7c:a4:e9:36:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:55 2026 GMT
Not After : May 25 06:30:55 2027 GMT
Subject: CN=C16B37DE418355798FB3A173143222D7BC200F11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:a8:2b:fe:6e:74:3b:9c:a0:a3:0a:f8:07:
d0:5f:ce:6c:b7:bd:b0:f7:67:7a:d9:21:4d:62:19:
75:87:ec:e5:12:3b:5d:6c:c4:fd:92:e6:78:05:e2:
1d:cb:05:da:c7:bb:9b:98:5d:0d:30:ca:69:40:00:
d4:a7:d9:af:a1:03:b7:f5:fe:6f:5a:a5:a0:65:50:
f4:d7:fa:ea:96:fa:72:7f:fe:29:24:66:d3:59:90:
3b:8f:40:79:89:49:2f:8b:38:dd:1d:a4:c6:2d:9b:
d6:7c:d6:0b:0e:32:9f:ac:d2:52:05:b0:e9:b1:4a:
9f:5c:c3:fe:e8:0c:ab:8c:a5:20:b6:48:62:89:e8:
00:65:a4:c3:da:82:61:f8:70:7c:b8:2c:9b:1a:15:
69:a5:e1:72:b2:e7:c2:f7:46:2e:7a:b7:8a:46:75:
63:55:33:d5:a3:8d:e1:04:7b:76:fd:0c:06:c7:22:
2d:22:41:8f:c1:3e:fa:45:df:b5:13:e5:d1:ea:8f:
52:ef:58:7d:09:6f:f2:40:99:2a:56:b6:96:0e:e7:
05:b3:92:d4:da:31:b6:3a:ea:da:97:68:ae:3a:e4:
c3:a1:5b:c0:09:55:5b:27:0a:c7:ad:f6:16:86:2f:
0e:5e:e6:85:74:3b:6d:54:69:c7:4a:b4:ee:7a:4c:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6B:37:DE:41:83:55:79:8F:B3:A1:73:14:32:22:D7:BC:20:0F:11
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143217.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a237::/32
Signature Algorithm: sha256WithRSAEncryption
19:32:89:20:b1:5d:c0:6f:5b:1e:37:e9:9b:61:f3:e6:3a:c9:
ed:29:a1:74:e0:e1:58:c0:a4:03:7c:3c:7e:c2:d3:dc:56:13:
4a:18:8b:41:89:3d:d8:7c:ba:3d:30:13:76:45:f5:de:f1:98:
fe:af:ce:d8:9c:11:70:62:05:1a:a0:78:52:7c:8d:f4:d1:da:
98:5b:c3:2a:a1:7b:93:db:5b:7e:d6:e5:76:7e:1e:ce:60:4a:
e3:11:1d:54:45:c3:cb:a5:5e:72:0f:15:b0:18:ac:61:c8:79:
bb:24:eb:72:8e:6d:e8:1a:03:a1:8a:41:85:b3:6d:26:96:81:
54:16:07:5f:83:2d:59:28:4a:ca:e7:d9:7f:e7:c5:b5:5a:48:
3d:31:8f:af:27:85:70:6d:f7:88:d8:e1:17:7e:c8:7d:d7:ac:
91:16:a7:64:6b:b6:62:61:d1:2a:17:03:d0:f9:17:9e:5f:bf:
37:e2:c5:ed:46:43:fb:14:f2:9d:ef:d2:aa:85:79:3a:d4:86:
93:14:1f:f4:da:83:d8:67:d1:f0:f2:15:8f:c9:bc:25:bd:9c:
4e:da:23:73:39:62:0a:29:c8:48:bd:e7:2c:2d:f0:a6:09:f6:
00:d2:18:c9:41:27:73:77:fb:1d:61:67:ab:f6:f5:d3:6a:30:
98:31:6b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:18 2026 by rpki-client