Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143365.roa
File: AS143365.roa (raw, json)
Hash identifier: SoZgLyOTX5DJugumvOD3tVrHvTxwua4L2vedY/QWXWw=
Subject key identifier: 55:A5:A5:0D:64:84:EC:2A:CC:87:F7:EC:88:57:79:D0:CF:9D:F5:6A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 400B1B4B4327A5DA82E3481782BBF43852D1DFFB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143365.roa
Signing time: Fri 22 May 2026 07:41:08 +0000
ROA not before: Fri 22 May 2026 07:36:08 +0000
ROA not after: Fri 21 May 2027 07:41:08 +0000
asID: 143365
IP address blocks: 240a:a2cb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:0b:1b:4b:43:27:a5:da:82:e3:48:17:82:bb:f4:38:52:d1:df:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:08 2026 GMT
Not After : May 21 07:41:08 2027 GMT
Subject: CN=55A5A50D6484EC2ACC87F7EC885779D0CF9DF56A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:00:bc:73:e5:9d:01:6d:99:d0:36:57:ee:d9:
4d:eb:ee:6a:80:4d:b9:83:e9:9d:32:b3:92:3e:cf:
b1:3e:5c:7c:07:de:76:d9:cb:aa:83:2b:ef:70:71:
27:21:9a:26:e2:b8:7a:a2:3d:e5:a5:e6:7e:65:dc:
50:64:b9:bd:31:27:c4:a4:53:e9:91:ae:35:56:55:
f7:1d:67:91:46:28:a3:9c:d6:ab:73:87:f7:76:a1:
c9:a4:6d:07:e5:ff:90:a6:2b:f6:d2:ee:e3:35:53:
2d:09:59:27:3e:19:7f:f2:5e:f9:04:70:78:10:78:
6a:a2:32:a9:4d:fa:f8:cf:d9:7b:29:a9:a4:71:16:
5c:ee:4e:8a:a7:9d:55:fa:75:7b:74:ea:33:a9:6f:
86:b5:5c:e1:e6:fb:d1:53:f2:06:40:a7:df:1e:15:
cd:f0:22:ce:1a:ce:ac:c8:80:b2:4d:a0:09:8e:93:
81:38:b1:29:79:9b:e4:49:40:8b:e2:b2:17:58:c9:
bf:86:27:ab:28:53:dd:1a:00:7b:d7:17:19:33:4a:
7d:a8:ad:28:f4:b1:f3:43:15:ea:24:c6:31:4a:f8:
d6:e4:bd:82:84:58:db:93:74:96:00:5f:31:68:9a:
ff:6d:1a:83:58:7c:5f:5d:c9:56:89:e6:9e:7e:58:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A5:A5:0D:64:84:EC:2A:CC:87:F7:EC:88:57:79:D0:CF:9D:F5:6A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143365.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2cb::/32
Signature Algorithm: sha256WithRSAEncryption
90:d6:f2:5b:e5:cf:d0:19:dd:0a:8a:77:92:81:c1:c8:bc:75:
33:23:a3:37:99:be:5b:a6:3b:f1:57:5f:61:36:31:92:11:f3:
4e:b1:37:c1:22:53:7e:e7:5e:0d:7b:95:d4:c9:36:b1:2d:23:
85:bd:a8:c1:b9:f0:a1:40:8e:b5:61:f4:6b:bb:dd:10:fa:59:
8b:1b:45:1e:21:6a:26:48:b4:4e:32:1b:02:bb:ae:85:e9:c2:
a1:9c:87:59:ed:6a:5b:69:33:06:00:fb:e4:a4:6c:d7:b1:38:
5c:7b:fb:c4:68:a5:99:7a:a1:a4:f1:be:40:56:4d:39:ee:9a:
bd:44:54:95:f5:76:8a:5c:62:9c:9a:14:58:d8:b7:96:f3:cd:
ba:b2:fa:8a:74:30:a0:c0:8d:65:ec:2d:ac:12:63:d5:5a:ff:
5c:b8:34:d6:a3:e8:cc:c8:cb:38:54:df:6b:be:82:f2:20:66:
e0:89:9a:5f:8e:b2:3e:7c:86:0f:1b:4d:b5:e7:36:18:fd:a4:
d6:1c:97:82:c9:5c:42:46:dc:ae:9a:70:a7:96:3d:73:48:50:
fe:c4:af:5e:c7:b0:90:e6:f7:3d:d8:d4:2b:4a:ac:c7:74:02:
5f:f4:34:df:50:37:21:60:58:39:ad:a4:49:c3:2a:a5:30:83:
39:8d:4e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:39 2026 by rpki-client