Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143689.roa
File: AS143689.roa (raw, json)
Hash identifier: VIIJMC4ZfHbGyiSayLqqRP+vLg6TG2OyJDmuBnxrojI=
Subject key identifier: 85:9F:BC:22:BD:50:26:47:CB:25:1A:B2:90:40:DF:C7:5E:60:90:4C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 128F408EB8E15104243C8E2094A9FA504A819163
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143689.roa
Signing time: Fri 22 May 2026 06:58:13 +0000
ROA not before: Fri 22 May 2026 06:53:13 +0000
ROA not after: Fri 21 May 2027 06:58:13 +0000
asID: 143689
IP address blocks: 240a:a40f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:8f:40:8e:b8:e1:51:04:24:3c:8e:20:94:a9:fa:50:4a:81:91:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:13 2026 GMT
Not After : May 21 06:58:13 2027 GMT
Subject: CN=859FBC22BD502647CB251AB29040DFC75E60904C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:80:66:a9:75:84:2c:bd:f5:0c:9a:62:a8:
02:1f:83:1e:1c:c7:d6:a0:b7:fd:d7:9f:32:2b:61:
6e:cc:23:36:92:29:c6:fa:b6:19:24:88:5c:fd:de:
8f:d6:e5:15:d0:b8:d2:8b:8a:e6:02:a7:16:7f:b6:
22:37:4b:d1:75:72:92:34:0e:f5:5c:f9:f1:68:bc:
91:dd:c5:ac:26:87:1b:48:49:87:3e:d9:54:34:16:
be:71:e5:6a:8e:d0:87:9c:5a:36:e0:b2:11:0b:7f:
8e:b3:89:1e:98:30:b4:65:51:77:64:72:fa:01:a9:
e0:02:60:64:2d:63:75:ad:b0:e7:a1:e1:01:f0:73:
24:81:f1:14:35:08:45:c5:4a:e6:7d:88:87:7e:48:
61:f8:ab:00:bd:3e:76:fc:b2:d7:7d:c9:cc:48:73:
0f:27:6e:95:3c:0e:66:96:21:11:69:2c:01:c7:ba:
bf:b9:00:69:e3:ac:6d:5c:5e:17:14:25:b7:df:c2:
6f:a2:51:bd:fe:43:1c:44:a5:14:38:0f:93:bb:66:
0e:f0:f1:f2:85:c6:f0:f7:b4:d1:58:9d:88:0f:07:
c3:97:fd:7e:72:58:53:34:eb:02:c8:08:65:eb:16:
6d:84:59:55:e9:a4:d6:32:7f:bc:4c:94:73:50:75:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9F:BC:22:BD:50:26:47:CB:25:1A:B2:90:40:DF:C7:5E:60:90:4C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a40f::/32
Signature Algorithm: sha256WithRSAEncryption
2f:75:c7:e3:d2:72:0b:62:bb:b4:2b:6d:88:67:df:5e:66:1d:
3e:fb:65:8d:8f:02:36:43:f4:9c:37:c5:15:a5:30:c3:45:81:
12:8d:b6:70:77:b8:d7:29:6c:65:82:27:58:be:4f:14:12:07:
97:27:72:29:ca:11:03:2f:43:d7:a5:27:0b:ba:5c:8d:d8:a0:
e6:b7:92:a7:f1:f6:1f:41:63:4a:89:0f:5f:cf:60:b7:78:9c:
e2:6f:ac:6b:1c:11:82:27:d5:a2:25:4f:a4:1f:ad:cd:3c:f6:
00:15:fd:06:c9:a1:7a:b6:59:76:38:26:fe:a9:8a:a9:94:2e:
69:47:87:8e:e8:41:d0:69:50:d4:64:cd:01:2c:c9:92:7f:4a:
84:3d:8c:a1:df:3d:47:1f:1b:20:5a:b6:e6:bd:b2:13:83:3b:
b1:d2:9a:88:da:b3:0a:33:1d:59:76:cb:0a:7c:a1:b3:66:cd:
c6:85:32:15:a6:e5:15:72:67:63:86:02:c2:15:aa:c7:74:fc:
3b:f8:98:d4:a2:33:12:33:f6:14:98:27:b5:b4:10:0c:3b:d4:
80:44:37:1e:b8:86:2a:7b:e2:3f:bc:87:4d:5f:37:f4:c9:55:
d2:90:0f:b5:59:d2:41:e8:8c:71:13:67:8b:30:c1:a6:18:29:
c4:30:2e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:58 2026 by rpki-client