Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143232.roa
File: AS143232.roa (raw, json)
Hash identifier: 9Bu1M4Ic3oRIhyzNH4Sfvu2evPE44E4iPBSf6DznDPg=
Subject key identifier: 6D:0F:8C:10:23:6B:36:18:E1:23:DA:7F:81:98:37:CE:3D:B1:CC:41
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1AF4B0C9394B5886B3B7AFD4B858958885149867
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143232.roa
Signing time: Mon 25 May 2026 02:22:12 +0000
ROA not before: Mon 25 May 2026 02:17:12 +0000
ROA not after: Mon 24 May 2027 02:22:12 +0000
asID: 143232
IP address blocks: 240a:a246::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:f4:b0:c9:39:4b:58:86:b3:b7:af:d4:b8:58:95:88:85:14:98:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:12 2026 GMT
Not After : May 24 02:22:12 2027 GMT
Subject: CN=6D0F8C10236B3618E123DA7F819837CE3DB1CC41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:28:8a:41:62:1e:a3:1d:a7:a9:ef:bd:fb:
9e:ac:bb:03:6f:5a:7f:6c:95:24:a7:7e:2d:e2:6b:
fe:84:85:e7:48:1f:8f:56:27:ce:d4:59:16:fa:3d:
20:0e:6f:27:ed:90:34:b3:04:05:f3:5f:c4:dc:7b:
69:13:f6:3b:16:e0:1a:f5:c8:cd:7f:27:3a:7d:08:
93:36:2b:d0:5b:4c:e7:14:27:9e:ad:3a:ae:de:25:
30:15:7e:10:95:c3:86:8e:0e:99:ab:db:9f:34:c1:
5c:30:d3:f1:c6:96:41:42:ee:b9:6d:ed:f9:b8:ff:
a0:fb:64:2b:62:b8:89:5b:9c:d2:3e:0e:7b:62:2b:
e3:a3:de:9a:65:26:5a:0b:11:d8:cc:cd:f3:08:86:
57:fc:e0:b1:e8:88:12:98:c4:5a:73:a0:f4:ba:29:
4c:4f:4c:4f:33:10:1f:e3:ce:94:56:a6:87:37:d0:
17:f3:04:40:bc:b9:56:e3:30:66:73:16:b9:a1:b6:
db:c9:11:0a:8c:ac:67:12:a4:6b:bd:97:24:4b:5f:
e5:f6:79:c2:76:73:a3:54:0e:b6:96:4c:01:15:2f:
ab:71:55:dc:2b:0c:12:b0:c9:1e:d6:60:1c:5e:f2:
28:c4:c4:0b:25:3b:c6:eb:3d:bd:b3:7d:e7:a7:8d:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0F:8C:10:23:6B:36:18:E1:23:DA:7F:81:98:37:CE:3D:B1:CC:41
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a246::/32
Signature Algorithm: sha256WithRSAEncryption
6a:ba:57:47:be:72:bf:48:27:5c:1d:9e:36:9c:db:7d:d7:2c:
0a:8a:5b:98:75:f3:9f:ee:df:27:b4:a7:15:13:29:a2:df:02:
2c:64:64:0d:05:74:70:c7:be:96:3d:14:54:22:5e:b0:c5:f9:
5d:68:a2:23:79:15:90:c4:eb:c0:69:3f:b2:1d:50:d9:ce:a3:
70:96:1c:a5:73:16:30:86:5c:31:3f:6c:d7:f0:3d:27:2f:ef:
c8:bf:e7:b2:22:f4:2f:27:fa:65:a4:46:03:7a:03:e6:63:cf:
52:6f:b1:3b:07:31:e9:2d:c9:90:93:90:ee:b7:79:09:b1:d6:
81:1f:e0:6e:9e:54:50:e2:d8:dc:1b:8a:9c:32:02:1a:77:f4:
ae:65:c8:f0:51:81:d1:c6:d1:80:73:75:8f:a0:d0:89:96:4d:
b8:fc:66:f1:a5:8b:0c:3c:47:24:7f:3d:09:a6:06:92:65:7d:
dc:f2:da:5e:a1:25:5c:31:bf:3d:03:51:77:f7:3d:8f:46:c7:
70:7e:71:0b:ca:82:e0:ec:0f:83:33:d2:97:93:af:33:90:c1:
3f:31:30:87:1c:61:d0:7a:4c:e4:52:13:ca:10:1b:88:4f:ad:
ad:23:8a:de:01:db:13:93:4b:7a:f9:bb:8a:8d:80:c6:d6:88:
d5:0e:8a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:24 2026 by rpki-client