Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143651.roa
File: AS143651.roa (raw, json)
Hash identifier: I0pEtidxXlwj28E10F0qFDgt5QuUheoGGbovcf6fNOk=
Subject key identifier: B0:F7:B7:B4:4F:E1:EB:4F:90:C6:4F:A7:4D:BA:52:6D:6C:CF:F8:80
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4187A40278640F362F85DBD2DDA8A019009A0BAC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143651.roa
Signing time: Fri 22 May 2026 07:08:46 +0000
ROA not before: Fri 22 May 2026 07:03:46 +0000
ROA not after: Fri 21 May 2027 07:08:46 +0000
asID: 143651
IP address blocks: 240a:a3e9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:87:a4:02:78:64:0f:36:2f:85:db:d2:dd:a8:a0:19:00:9a:0b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:46 2026 GMT
Not After : May 21 07:08:46 2027 GMT
Subject: CN=B0F7B7B44FE1EB4F90C64FA74DBA526D6CCFF880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:5c:43:1d:81:c1:17:87:8d:b4:39:64:fa:
3f:e7:72:c0:3b:79:5d:e4:00:84:29:cc:30:3c:38:
10:95:c8:bf:d4:f2:9e:c2:a6:38:47:96:1b:26:a6:
f7:f2:6a:c8:ac:e6:d7:bf:b5:81:87:bb:0b:55:6a:
a0:23:8d:cc:de:21:af:7b:3f:39:6a:37:86:c8:dd:
6b:f6:91:87:9a:81:3f:90:00:bd:e6:9a:f4:43:89:
73:5d:5b:5a:b5:e0:a4:5d:75:fe:4a:de:43:d4:37:
17:02:0f:5b:7b:cb:df:b7:4d:97:56:7c:4d:3b:05:
45:27:ae:bc:67:a5:ab:d3:9b:c0:5b:03:50:1d:29:
9c:66:cb:90:4f:ae:1b:ba:ad:f0:8a:7e:dd:23:68:
5b:5c:66:fd:b1:97:0d:eb:eb:cd:38:bd:e2:93:44:
c5:cd:fe:d0:d8:e3:70:1c:12:be:fb:d4:dc:4c:8f:
d6:43:83:b9:1e:33:b0:9f:11:c7:9e:12:9d:de:97:
83:a7:aa:a8:27:91:25:f7:7a:54:5c:5a:ba:e7:22:
32:b8:d7:fc:db:1b:e0:3d:44:39:6a:b4:2c:ae:40:
fa:6e:0b:5b:c6:64:2e:da:da:41:27:9b:c8:c8:2a:
6a:e9:51:23:cd:5a:53:6a:af:a1:c4:f1:25:8a:65:
47:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F7:B7:B4:4F:E1:EB:4F:90:C6:4F:A7:4D:BA:52:6D:6C:CF:F8:80
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143651.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3e9::/32
Signature Algorithm: sha256WithRSAEncryption
b8:bd:c8:30:0d:d2:69:7b:e0:6c:d4:4c:ee:dd:15:7b:67:38:
e2:26:da:1b:91:89:91:68:7e:93:85:5d:fb:2a:35:88:e7:8b:
2c:34:66:91:af:de:2e:09:98:41:81:1d:4d:56:c4:fd:04:9b:
21:34:a1:86:9b:63:2e:7d:28:ac:fc:9f:db:09:e4:a1:c1:3d:
52:2e:d3:95:55:ca:53:3b:68:bf:b2:47:46:f2:0e:99:ba:e2:
97:49:97:4f:06:1e:ff:df:9d:bf:7e:6f:a9:08:32:ec:c0:58:
8a:28:e0:1b:5f:00:ec:9d:26:16:f0:b3:61:e2:8a:37:34:68:
99:3d:f2:ab:90:29:ad:d5:eb:74:15:21:82:1e:7e:3c:40:d1:
ff:df:88:a1:8f:23:f4:72:19:a9:7c:d9:07:30:75:f7:b8:d5:
62:31:78:28:7e:8a:bb:11:8a:8e:d8:1c:e0:ae:6e:b7:20:80:
58:25:04:c8:84:42:9c:fb:d9:8f:bb:48:2d:5c:8e:85:5a:1d:
3c:ad:32:f3:85:59:f4:52:25:21:01:cf:de:9a:cd:a1:a0:73:
81:05:af:1b:98:bb:7f:27:2e:f6:67:0d:dc:fe:f4:ad:b2:8f:
a6:91:01:82:d3:78:ba:f2:c5:4d:93:4c:8f:82:22:0f:81:32:
12:60:1b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:34 2026 by rpki-client