Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143231.roa
File: AS143231.roa (raw, json)
Hash identifier: +n8EWXk84GnSRkz2cjdUQfYJxMELWMVTCptzHMFevqw=
Subject key identifier: BC:FA:98:3D:C6:B1:E1:43:47:80:9F:48:C7:FD:5B:DD:6D:06:B6:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 17958B748B1970CBEC46E417F50616630E231FF7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143231.roa
Signing time: Fri 22 May 2026 06:58:22 +0000
ROA not before: Fri 22 May 2026 06:53:22 +0000
ROA not after: Fri 21 May 2027 06:58:22 +0000
asID: 143231
IP address blocks: 240a:a245::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:95:8b:74:8b:19:70:cb:ec:46:e4:17:f5:06:16:63:0e:23:1f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:22 2026 GMT
Not After : May 21 06:58:22 2027 GMT
Subject: CN=BCFA983DC6B1E14347809F48C7FD5BDD6D06B683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:2b:aa:96:10:96:88:28:1e:cb:87:40:d0:
10:94:89:a5:25:49:33:c9:91:73:b5:32:9c:fe:f1:
ca:7c:1a:1d:48:26:10:6f:61:f3:0f:84:e9:4f:36:
bb:3c:aa:38:d7:66:44:83:ba:34:55:1f:49:60:77:
a4:1c:7d:cb:45:e8:12:47:44:45:6a:2c:cb:b4:6e:
39:06:82:fe:e2:8f:68:fb:e6:06:12:ac:8a:df:19:
e5:25:02:2b:8b:51:64:1b:af:e4:76:3b:5f:e0:de:
c3:66:7b:f6:50:3d:0c:2f:bd:d5:a8:74:e6:68:6d:
2b:8b:db:7e:9e:f3:29:a2:60:d9:da:66:56:6f:25:
85:82:42:c2:37:55:1e:1c:18:c5:87:e2:28:45:b6:
5c:f4:29:77:d7:d2:66:97:c5:f8:ac:07:e8:4a:12:
76:eb:31:12:0b:f8:a7:f9:bd:3e:71:2a:7e:91:d4:
68:a3:fb:7c:25:4a:16:7b:95:10:35:32:af:9a:2a:
76:ea:8b:90:e3:4b:f6:6c:61:2f:d9:45:84:03:60:
1a:55:ab:40:cf:a7:88:35:a0:a9:32:a2:23:64:c9:
8a:5a:3e:60:e1:cb:df:7e:e6:2b:55:fd:a6:2b:12:
cd:fe:92:ce:ff:b1:1d:e2:da:f8:36:ee:bb:05:bc:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FA:98:3D:C6:B1:E1:43:47:80:9F:48:C7:FD:5B:DD:6D:06:B6:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a245::/32
Signature Algorithm: sha256WithRSAEncryption
44:da:e8:f4:64:8f:fb:a4:f8:9f:46:91:e0:d8:0e:08:bb:3f:
06:d8:8e:66:eb:e1:bb:86:35:fc:b6:19:d0:bb:b7:f2:29:f1:
02:76:53:34:d2:15:82:d4:d6:bd:49:53:96:85:1d:73:fb:21:
8d:2a:ee:33:ee:dc:07:8e:ef:23:e4:7a:3e:23:b3:77:a9:a7:
2d:f8:7d:8e:ee:44:45:fd:51:ed:ae:2d:a7:0d:17:fc:1c:bb:
94:1e:a3:37:50:dc:76:86:ea:47:ba:e4:0e:92:51:16:d0:98:
3f:54:d2:fa:5c:f0:7d:b0:46:3a:f6:3c:0a:85:c5:63:6e:d9:
49:44:9b:51:d8:aa:5c:3c:58:c6:da:22:f5:1f:72:4a:0c:bb:
79:d1:4f:1f:c2:c4:28:67:73:d5:02:3a:bd:73:7f:68:46:5e:
cf:12:4c:fb:b8:e1:45:b8:4b:a7:37:d8:9b:95:91:84:c1:0d:
b1:9e:86:d4:64:1b:fe:b9:77:53:27:e2:ab:45:20:e1:70:d5:
1c:6e:5f:ae:07:a8:7e:ed:be:33:42:82:d2:d3:3a:24:55:07:
05:63:56:98:f3:a2:50:6b:30:34:cd:4c:28:9f:f6:b5:7d:6a:
16:e4:61:c8:6d:af:57:33:ad:45:14:e9:d1:01:27:2e:91:4f:
c4:12:c5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:38 2026 by rpki-client