Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143236.roa
File: AS143236.roa (raw, json)
Hash identifier: D1HESiW0YhteuK9HAXGl5HSFYK6NlxzS7lksmYZf13I=
Subject key identifier: E6:43:88:37:31:57:CB:8F:1A:6E:CB:FF:BD:F1:11:1B:9D:97:CF:81
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 16291333658B5AD954855CFB7D59C99A84F0E9D1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143236.roa
Signing time: Tue 26 May 2026 01:13:34 +0000
ROA not before: Tue 26 May 2026 01:08:34 +0000
ROA not after: Tue 25 May 2027 01:13:34 +0000
asID: 143236
IP address blocks: 240a:a24a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:29:13:33:65:8b:5a:d9:54:85:5c:fb:7d:59:c9:9a:84:f0:e9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:34 2026 GMT
Not After : May 25 01:13:34 2027 GMT
Subject: CN=E64388373157CB8F1A6ECBFFBDF1111B9D97CF81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:c4:68:9f:b3:7a:4a:fd:01:b1:5a:e1:b0:
bf:d8:37:94:4f:2f:86:71:d6:71:5f:96:aa:69:7d:
c8:75:ed:73:ce:24:e2:3a:94:f7:80:d2:94:94:3b:
a3:30:18:f6:68:a3:08:bb:5a:5a:89:bf:55:4d:c2:
c5:70:e1:95:e1:4e:28:d8:83:e5:32:de:b2:7a:4c:
cc:cb:8d:8e:be:89:32:35:4f:0c:bd:e7:b5:e6:45:
77:23:38:43:75:dd:83:82:a9:e1:76:db:dd:c1:c6:
bf:46:0c:99:bb:d5:8c:0c:90:d5:06:34:43:e7:b2:
c4:f2:61:6f:be:1c:ad:67:8e:b4:bc:81:d7:c5:35:
ee:69:8a:07:72:36:f2:ed:bf:07:9a:58:ec:4f:0e:
a0:8c:7b:3b:86:90:af:88:ee:d0:39:7b:de:32:68:
1e:6d:be:87:46:a1:09:8c:0e:0d:bc:b1:a8:3d:9c:
17:e2:fb:1a:07:d9:d9:d0:35:9d:0a:00:c3:d6:88:
2d:e7:1e:92:b7:6d:8c:5e:78:a1:29:87:6f:f9:fd:
cb:0c:e8:e8:a3:e3:2f:a6:3b:93:fe:bd:03:49:4d:
c3:6a:10:5c:c1:62:ce:e0:10:f5:6b:50:b7:8c:7d:
f7:c3:00:1c:55:8c:86:2a:85:c1:3b:50:ac:00:58:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:43:88:37:31:57:CB:8F:1A:6E:CB:FF:BD:F1:11:1B:9D:97:CF:81
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a24a::/32
Signature Algorithm: sha256WithRSAEncryption
a7:55:27:ec:d2:ef:b3:5e:54:1e:2b:1b:dc:5f:5a:57:b1:18:
0a:98:94:58:b1:92:80:46:a9:9a:4e:ae:69:91:64:85:f3:f8:
e1:ec:8a:d1:83:08:18:ad:fc:3a:06:cf:c9:e0:d6:b4:9f:c9:
92:c9:29:1a:53:92:b3:03:0f:91:59:12:4d:bd:fd:7d:57:65:
a8:a0:8b:c5:d4:34:c5:87:4d:13:52:f5:29:49:78:4d:a3:b4:
53:7b:6c:4f:91:47:a9:de:86:6d:a5:85:8a:db:a8:71:a9:58:
b7:83:80:6a:68:f9:03:1a:4a:da:39:06:6d:12:2b:3d:ea:15:
9e:31:41:86:2f:fe:78:7a:be:88:fe:64:77:a5:bb:a6:46:c9:
37:aa:c8:2f:36:f3:3e:4d:7d:62:87:ba:a7:92:47:eb:fb:85:
51:0f:9a:49:22:ba:f4:b8:bd:0e:97:09:98:b8:a0:79:19:87:
8f:7e:5e:4b:59:92:46:d3:45:f6:92:d7:05:80:3b:45:9b:ad:
0e:27:b9:75:06:71:68:66:ac:02:b3:1e:26:2c:39:2c:b0:64:
f3:7b:bd:c6:55:f1:e7:00:26:2c:74:6d:08:f1:eb:6c:77:2a:
0f:52:e5:4c:9c:58:34:5e:df:cf:9e:69:5f:f4:02:6a:3c:ce:
a4:a3:c9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:45 2026 by rpki-client