Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143245.roa
File: AS143245.roa (raw, json)
Hash identifier: u3welaKOrxb0mZjKvKYtmB3jZdH0ppR03AkwbYhvP5Q=
Subject key identifier: 9E:EA:40:17:36:B8:A9:1E:58:06:19:54:CC:CB:FC:F5:3C:85:78:43
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 34F149946FDE846F35914CEE552DED66F2BB02DE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143245.roa
Signing time: Mon 25 May 2026 02:22:40 +0000
ROA not before: Mon 25 May 2026 02:17:40 +0000
ROA not after: Mon 24 May 2027 02:22:40 +0000
asID: 143245
IP address blocks: 240a:a253::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f1:49:94:6f:de:84:6f:35:91:4c:ee:55:2d:ed:66:f2:bb:02:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:40 2026 GMT
Not After : May 24 02:22:40 2027 GMT
Subject: CN=9EEA401736B8A91E58061954CCCBFCF53C857843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:ee:0f:90:78:25:d2:6d:33:37:bc:4e:12:
a2:a1:cd:ae:07:e6:2a:a6:62:3d:54:5d:9d:6b:11:
a0:7c:74:b9:ff:f7:0a:17:b5:d4:e4:2c:39:80:5e:
6f:85:8b:bb:8c:38:c4:3f:24:4a:f3:cd:b5:02:bf:
6b:a2:00:f9:bf:21:2c:d3:48:6a:39:9f:f4:9b:1c:
52:fb:68:31:f4:71:cb:fa:1a:ad:bd:31:08:68:54:
04:80:44:71:f0:72:5a:10:f1:6b:50:d2:92:59:ed:
35:2a:20:51:3a:ac:8a:60:cc:16:34:fe:69:12:d7:
d4:d5:64:c0:60:52:48:31:ca:2f:8d:7a:50:8b:1c:
d1:8c:76:09:e4:d0:33:79:df:2d:7c:73:f1:95:3e:
49:63:7b:0c:10:07:84:8e:ea:d6:34:3b:d6:92:fe:
48:aa:36:ee:61:2f:49:f1:b8:ac:fc:71:b8:01:31:
32:08:57:9c:12:17:c2:ce:8b:e0:5b:3d:da:c6:31:
3a:e3:fb:0e:fc:fa:10:88:ca:58:d0:a5:29:af:d6:
9a:35:bd:33:93:85:d7:b4:79:e5:11:b3:98:4c:2d:
17:b9:9b:b0:c1:54:35:fd:9f:68:4f:59:a4:aa:b9:
b8:59:e5:c2:89:6a:c7:d3:38:02:6d:0a:ae:3c:b0:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EA:40:17:36:B8:A9:1E:58:06:19:54:CC:CB:FC:F5:3C:85:78:43
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143245.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a253::/32
Signature Algorithm: sha256WithRSAEncryption
90:ef:9d:26:3f:d8:39:29:f0:99:df:e3:40:e6:4e:1e:c3:5f:
5c:cc:c2:06:78:22:07:a5:b5:41:2e:27:a9:10:8e:33:5d:99:
36:e5:31:db:c1:8f:bb:5d:90:c0:b2:76:67:bc:f7:17:62:7c:
fd:9b:14:ad:5e:a2:01:64:b8:f0:1f:be:3d:21:40:31:49:00:
cf:e6:1d:10:15:23:52:92:55:80:5d:f0:43:71:c0:34:d0:3c:
eb:b4:e2:a6:6c:8d:a8:c9:43:07:84:73:8c:f9:86:b7:80:0a:
cc:9d:ed:3a:21:71:30:30:39:9d:90:58:0f:6e:22:a8:fd:49:
95:cc:0c:0b:cb:e8:92:9a:68:e6:59:cd:4d:5d:4e:4c:48:ac:
8b:0d:7e:82:8b:b5:97:44:6d:34:26:90:92:b9:ce:ae:02:3b:
13:68:18:28:2c:15:c4:ad:94:9d:50:02:8a:8f:f1:46:98:7d:
9c:43:1b:33:56:44:30:39:bf:59:5b:44:91:63:60:5b:fb:94:
fb:6b:2c:d0:33:de:11:e1:6f:17:f0:1c:cf:2a:4e:35:1d:80:
03:9b:d8:c0:18:8d:b3:63:46:ea:8e:40:9a:82:f1:43:78:bc:
40:49:a3:69:66:fc:10:11:a3:e2:27:e2:ae:bb:15:0d:a2:6a:
f5:32:7a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:42 2026 by rpki-client