Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143227.roa
File: AS143227.roa (raw, json)
Hash identifier: FObelePF4wvSQ4j0slroZEc7v2yIQrYx0DTYKcV1c0c=
Subject key identifier: 53:5C:B9:A6:0C:77:A3:75:E6:25:26:E6:40:EC:DA:3C:8C:D9:BF:55
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7EE101E549E9A666895B9C79B0AB8819796D7BE2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143227.roa
Signing time: Mon 25 May 2026 01:51:03 +0000
ROA not before: Mon 25 May 2026 01:46:03 +0000
ROA not after: Mon 24 May 2027 01:51:03 +0000
asID: 143227
IP address blocks: 240a:a241::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e1:01:e5:49:e9:a6:66:89:5b:9c:79:b0:ab:88:19:79:6d:7b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:03 2026 GMT
Not After : May 24 01:51:03 2027 GMT
Subject: CN=535CB9A60C77A375E62526E640ECDA3C8CD9BF55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:88:4c:fe:8d:0b:81:39:b5:f6:66:73:13:
45:05:5b:5f:24:b8:91:5b:83:01:c5:ac:fc:08:6b:
9b:13:0f:fd:43:6d:c3:de:c6:30:d4:e1:ad:a4:99:
03:80:74:3d:06:85:fa:0b:30:23:95:f9:1b:91:78:
01:b8:c4:9d:58:e9:32:ee:b8:6c:3f:86:40:7b:20:
a9:f5:e5:f8:01:e1:93:22:f9:14:3e:dc:79:5f:64:
c6:5c:65:d2:ef:41:4d:c5:59:be:dd:f3:9a:7a:59:
1e:77:c0:4b:a4:d4:e0:23:fd:6c:1c:8d:6e:74:2c:
dc:da:03:da:78:9f:e2:7e:55:81:32:ca:06:a1:2d:
68:9c:36:43:f5:85:7b:4a:87:89:e5:4d:30:b3:6b:
b9:89:05:3d:8b:b0:95:9d:eb:cb:6d:b8:a4:71:21:
15:00:37:51:b5:e9:eb:17:05:29:0f:e9:2b:a3:12:
6c:66:84:ff:2d:78:98:ef:76:f6:21:7b:75:8f:b5:
10:1e:a6:51:e6:d0:a7:94:19:b4:56:3f:e3:72:d4:
84:a7:a8:cd:75:f8:4e:4c:80:60:67:34:b7:d5:97:
68:92:ca:22:31:54:2b:bc:6e:de:c3:26:ae:cc:55:
2d:17:f8:7e:95:9e:32:13:b8:be:c2:70:b0:da:39:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5C:B9:A6:0C:77:A3:75:E6:25:26:E6:40:EC:DA:3C:8C:D9:BF:55
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143227.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a241::/32
Signature Algorithm: sha256WithRSAEncryption
4f:6c:82:91:ef:a3:b9:4a:13:16:18:c6:b4:6d:88:ee:80:2d:
06:03:55:3a:e4:93:46:e0:2d:5e:a6:97:6c:47:bc:7d:5c:0a:
6c:f2:65:dd:2d:3e:c9:64:fd:04:34:32:9e:c8:ef:c6:73:70:
92:f1:46:f5:a7:b4:c8:ba:5c:77:fd:a8:29:ea:68:64:0a:f1:
ca:a0:e5:f7:13:21:1d:72:69:6a:70:21:0f:21:ff:98:fe:ba:
b5:1c:46:aa:c7:ae:60:3f:e3:01:90:52:ea:71:a3:ec:03:a7:
4f:3b:a4:59:2c:ca:06:38:93:a6:2f:fb:a1:cc:1e:db:da:cf:
c9:63:ae:2f:da:50:77:27:70:24:6f:db:de:77:f8:a8:86:38:
75:8e:8d:96:bb:d7:c1:cf:ae:07:64:81:7d:09:72:7f:f2:97:
a1:9c:19:d9:85:31:6f:85:3d:3c:df:fc:9d:27:e9:d4:f3:45:
ee:a3:9c:8f:59:33:bf:4c:76:16:39:36:56:bc:f1:86:e5:10:
69:96:5e:94:98:41:87:62:16:60:6a:67:4e:47:20:31:fb:2a:
03:c4:60:f7:bc:0e:b3:68:2c:9d:87:16:ce:8d:76:cc:13:72:
87:46:0c:6e:a5:ee:8b:8b:97:3e:b7:57:67:7d:ac:5e:5d:17:
e9:3b:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:55 2026 by rpki-client