Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143250.roa
File: AS143250.roa (raw, json)
Hash identifier: KRGdW4nxGEKE6N4F90fiuwpnHeW/W3JGJOp4RaQgOBU=
Subject key identifier: BB:9D:7F:EF:87:C0:19:0E:A8:67:AC:90:49:CF:3F:E7:4E:58:61:2C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 77CA5DA790C8E8E3962B270438B5D3462A93A450
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143250.roa
Signing time: Fri 22 May 2026 04:08:23 +0000
ROA not before: Fri 22 May 2026 04:03:23 +0000
ROA not after: Fri 21 May 2027 04:08:23 +0000
asID: 143250
IP address blocks: 240a:a258::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ca:5d:a7:90:c8:e8:e3:96:2b:27:04:38:b5:d3:46:2a:93:a4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:23 2026 GMT
Not After : May 21 04:08:23 2027 GMT
Subject: CN=BB9D7FEF87C0190EA867AC9049CF3FE74E58612C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:fd:ff:71:28:ee:e2:17:86:c3:e2:59:30:
cf:3d:d6:dd:8a:db:45:b5:56:c8:0c:39:f8:a7:54:
62:cd:a7:86:5b:cf:fe:5c:a4:71:6d:cd:9c:43:11:
45:53:60:1c:b4:f4:b5:6e:03:a6:0e:b1:a9:7b:30:
a9:1a:e7:aa:6c:9a:12:d4:ac:0d:f1:5a:8b:50:54:
62:9b:c5:19:ff:71:72:98:41:2c:5d:7f:50:a6:83:
95:80:47:4a:c2:bd:fa:43:62:d2:27:60:6b:bb:f7:
70:a9:a1:e8:9f:15:88:4c:09:a3:c4:92:35:de:3d:
1f:35:71:f2:a8:dc:b0:1e:18:a2:ff:3f:3e:6e:ba:
fe:57:92:51:c6:5e:0a:4e:23:51:a9:cc:be:d4:1a:
6c:32:20:98:44:4d:16:0e:3d:48:e7:af:eb:ba:31:
72:fa:0d:a4:d5:e5:5c:9d:33:99:43:55:7c:5b:42:
36:75:30:6f:9b:be:3f:ac:32:bd:68:1f:dd:ff:b1:
b4:20:fc:9c:2c:d3:f6:82:51:7e:92:1b:d8:31:53:
72:91:63:6b:8f:59:c9:44:d0:58:99:32:bb:56:ce:
9d:e0:8e:1d:d3:48:c0:ed:3e:73:1a:d0:eb:b9:86:
e4:b0:2b:e0:be:59:49:dd:a9:28:f4:0c:0d:14:ea:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9D:7F:EF:87:C0:19:0E:A8:67:AC:90:49:CF:3F:E7:4E:58:61:2C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143250.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a258::/32
Signature Algorithm: sha256WithRSAEncryption
66:4d:60:07:45:33:c6:48:ca:3a:d2:74:38:20:23:96:05:b7:
32:79:b2:e1:17:71:bb:d8:4d:52:29:1c:ec:34:01:2d:02:60:
b5:95:0b:27:2c:79:47:09:41:f4:76:a1:7d:08:37:fc:0b:44:
11:cc:3e:0d:8d:72:15:75:f1:23:86:30:7d:93:d8:09:6a:93:
2b:ca:71:e5:6d:c8:f6:08:73:21:da:3f:87:7d:7d:95:f1:68:
f0:20:42:a7:93:9f:b8:dc:94:51:91:d6:76:55:88:ad:95:7a:
42:1b:4d:32:3e:6c:22:51:6a:75:e8:e0:fb:7a:05:e8:13:b1:
fa:f4:26:f1:b8:69:6f:de:86:1e:89:0b:f8:77:36:9f:c9:a9:
62:04:91:c1:ac:b5:6f:48:89:9a:5d:98:08:06:2c:98:de:16:
14:c3:ca:76:1d:ba:50:06:f7:ba:c5:b4:f1:d7:83:09:bd:e2:
87:75:44:9a:c1:ff:9a:6f:fa:9f:5f:55:0d:22:e2:b2:e8:4c:
ae:c0:f7:b7:f4:23:b4:56:61:bd:76:67:41:3b:44:bc:e6:d1:
06:32:2e:ec:9f:56:da:9a:3b:42:51:eb:4f:1a:6c:38:0b:ff:
94:0c:7b:d9:f8:1f:85:fa:db:4f:3b:da:72:bc:5c:41:a1:a1:
e5:ac:60:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:20 2026 by rpki-client