Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143238.roa
File: AS143238.roa (raw, json)
Hash identifier: pIK1nL4q1k1g82pv//OEHYVKJy8+Do7bt8oE5ij7CA8=
Subject key identifier: 47:94:34:64:88:D3:79:D4:DA:BC:B9:04:0C:A1:34:A9:D8:BE:A2:51
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 46798F1EB5D2988A64CF6A9A54E4165FD80491A8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143238.roa
Signing time: Fri 22 May 2026 07:24:59 +0000
ROA not before: Fri 22 May 2026 07:19:59 +0000
ROA not after: Fri 21 May 2027 07:24:59 +0000
asID: 143238
IP address blocks: 240a:a24c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:79:8f:1e:b5:d2:98:8a:64:cf:6a:9a:54:e4:16:5f:d8:04:91:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:59 2026 GMT
Not After : May 21 07:24:59 2027 GMT
Subject: CN=4794346488D379D4DABCB9040CA134A9D8BEA251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:fd:bd:7b:90:3e:0a:f6:dc:7e:4d:b8:35:
6c:71:7a:e7:dc:d7:34:b6:2d:e2:21:1d:e7:48:d0:
93:a3:2e:8e:ce:d9:fe:08:4f:c7:72:a9:20:be:eb:
0e:ee:89:d1:ef:0d:0c:00:47:86:c7:20:7a:eb:c1:
97:bc:50:ed:8b:45:3c:03:27:2c:16:cc:33:cb:90:
af:2a:d1:6c:9e:7b:75:94:8b:a0:03:e0:4d:30:31:
07:d5:98:ad:77:de:f4:04:86:10:b8:89:8e:ae:be:
88:ba:db:ee:f9:eb:a7:20:ed:2a:86:f6:1e:bc:66:
13:2f:b8:c7:68:3e:a9:f7:30:47:c3:58:d0:9e:da:
d6:22:ba:08:af:fb:d6:b5:92:13:9b:24:28:17:00:
97:8a:f8:fd:7d:af:db:11:76:aa:91:bf:f9:98:75:
c4:e2:e1:27:b6:37:b6:42:66:61:07:74:4a:b7:78:
3a:31:85:72:e4:91:cb:85:60:52:92:f9:5f:17:bb:
f6:d1:21:ec:ea:26:0b:d0:39:10:12:74:c7:a2:bd:
3c:75:04:12:fc:c7:b1:ae:cd:98:9f:1c:f0:b2:bf:
6c:ba:f9:41:29:fb:3b:90:c5:36:6c:53:39:c3:8b:
d0:54:50:69:84:9a:69:95:d4:c5:4c:37:e3:45:aa:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:94:34:64:88:D3:79:D4:DA:BC:B9:04:0C:A1:34:A9:D8:BE:A2:51
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a24c::/32
Signature Algorithm: sha256WithRSAEncryption
03:98:79:bf:bd:0b:e0:e2:05:69:b5:13:c0:3d:31:82:4d:58:
b9:e0:81:b4:c9:a8:63:48:25:e6:e1:09:2d:ff:79:b0:db:13:
c4:42:fe:37:2b:71:f5:38:ea:bb:25:88:7a:d8:f0:f5:92:57:
25:db:4e:32:08:56:74:8b:f7:89:63:9d:cb:3d:33:d7:5c:05:
57:56:23:2f:bc:56:92:49:89:1d:ed:dc:f7:f9:61:bf:61:a6:
7b:52:53:6f:4f:38:7b:fd:3d:69:60:55:ed:eb:9f:7a:6e:f0:
52:68:78:b4:42:15:b1:81:ad:3e:b8:0d:01:53:55:bf:b1:01:
c7:59:27:a7:76:4c:fb:8b:a3:47:fc:13:c6:dd:da:ef:ea:a9:
ae:2e:c0:d6:26:7f:5a:9c:ff:53:ed:a6:2d:23:a6:30:c6:64:
a9:70:d4:90:fa:86:5e:f1:4d:49:57:7f:36:cf:48:08:f7:a3:
ac:f8:0c:a2:de:3d:0f:b7:3f:72:2c:37:4b:4b:2c:9c:5a:30:
a8:e0:4d:f2:7a:19:57:52:04:fa:bc:a1:65:6b:52:c9:02:ec:
d4:de:b8:e1:01:5a:26:ce:34:2c:06:6f:58:1d:e9:e9:25:c5:
71:3a:6f:11:5f:2a:79:e0:a8:b2:33:5d:3f:73:52:cf:4b:bc:
c1:f6:4a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:58 2026 by rpki-client