Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143401.roa
File: AS143401.roa (raw, json)
Hash identifier: PD/VUyIHZ5bTzCWykfcJy5zfCbtM/qbfhYWf+YPPVAg=
Subject key identifier: 15:D0:3E:70:A7:82:F8:9F:24:CE:13:89:52:CC:D6:B0:7A:FE:AB:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5AB00EFF7DE8D56FD5A3C4EC7F723DCDC9255477
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143401.roa
Signing time: Fri 22 May 2026 02:47:39 +0000
ROA not before: Fri 22 May 2026 02:42:39 +0000
ROA not after: Fri 21 May 2027 02:47:39 +0000
asID: 143401
IP address blocks: 240a:a2ef::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b0:0e:ff:7d:e8:d5:6f:d5:a3:c4:ec:7f:72:3d:cd:c9:25:54:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:39 2026 GMT
Not After : May 21 02:47:39 2027 GMT
Subject: CN=15D03E70A782F89F24CE138952CCD6B07AFEABD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:77:4f:ff:4c:8e:76:0e:ea:4c:81:58:83:
8a:63:9c:9f:b9:55:c5:4e:27:5a:76:37:dd:7c:75:
d5:65:22:42:b4:a0:54:27:fa:dd:30:98:23:be:c2:
eb:e6:fc:32:2d:05:58:70:5b:19:ea:c4:47:f5:9d:
3e:c9:26:fd:88:e8:19:41:54:ae:64:52:33:db:ed:
4d:1d:7f:95:36:a6:12:8a:60:9c:6d:37:0b:d9:44:
4f:75:5e:7a:bb:8f:08:85:3f:9d:94:cc:7c:8d:f3:
df:b0:71:db:9c:60:b6:9e:79:a6:c6:93:d4:8c:a6:
77:9c:a6:b7:87:6b:71:7a:96:e8:a5:7e:31:b7:64:
84:01:e8:6d:c4:ca:d6:65:b2:ac:0f:eb:41:27:a4:
10:d0:1e:93:e6:b3:70:28:6b:7a:cd:51:6a:9e:da:
8a:b5:af:fe:bc:ef:26:1d:69:04:48:06:48:ea:9c:
bd:f3:73:81:9e:14:06:58:93:83:07:ff:7f:68:f4:
7a:fd:03:6d:f9:38:b9:07:8b:56:67:ae:b2:f1:48:
d5:c7:1b:d7:28:9c:53:07:18:58:e8:ed:59:fa:0e:
74:81:f2:22:7d:95:e6:47:47:6b:96:9d:55:7f:a7:
36:1e:99:7d:c1:62:70:0c:ac:8e:ea:a0:54:0d:d8:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D0:3E:70:A7:82:F8:9F:24:CE:13:89:52:CC:D6:B0:7A:FE:AB:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143401.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2ef::/32
Signature Algorithm: sha256WithRSAEncryption
b9:f8:7e:91:ff:7b:f2:c2:cc:f0:bd:72:aa:09:51:e4:7f:a8:
e9:e2:06:e6:2d:69:7a:fb:3d:4b:d4:1e:4a:e8:60:a0:af:04:
96:e4:b7:9d:7e:67:ec:da:ad:bd:c1:2c:19:12:e9:1f:eb:e1:
d8:29:8b:4a:4e:06:82:4e:4e:3c:43:fd:0f:83:9c:a8:b3:45:
2c:16:81:9b:72:cc:c1:89:4c:68:97:a6:77:85:75:0f:43:9d:
c5:84:bf:89:08:d9:ce:01:01:76:46:b4:e2:79:d4:27:b5:6e:
cc:dd:bc:5d:4a:23:61:38:ae:74:48:57:03:55:fd:ac:13:31:
9f:7c:c6:c4:a8:73:50:28:83:b6:eb:b7:ab:20:a2:99:1c:ff:
03:d9:f7:49:68:94:54:4b:8d:d1:62:d2:48:81:7a:1f:13:84:
5d:72:65:d6:f0:b5:77:c8:36:a7:bc:a9:66:9d:76:31:ff:9b:
4c:4a:22:91:28:cd:f1:4c:4e:09:a7:ba:75:07:2f:e3:45:41:
a7:6c:51:39:da:28:be:ca:b0:3f:4c:74:01:fb:31:89:2f:73:
9c:bf:32:7f:f3:cd:9d:f3:8f:50:8e:b7:7f:fb:1a:39:b5:87:
18:22:d8:70:5a:2f:3f:2d:5e:6d:da:40:79:20:48:d9:25:91:
fe:2b:3a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:46 2026 by rpki-client