Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143411.roa
File: AS143411.roa (raw, json)
Hash identifier: +LytBfbIY4FzNJjODA+WzK6k2uvyj/5QIR9E+u2yUHA=
Subject key identifier: 43:F9:D2:A5:CB:4C:84:A9:F8:28:D5:90:15:CE:C0:1A:B1:A1:31:5B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C93746A47A3D9C5AB22249FB9A54CD28B09143A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143411.roa
Signing time: Fri 22 May 2026 02:47:47 +0000
ROA not before: Fri 22 May 2026 02:42:47 +0000
ROA not after: Fri 21 May 2027 02:47:47 +0000
asID: 143411
IP address blocks: 240a:a2f9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:93:74:6a:47:a3:d9:c5:ab:22:24:9f:b9:a5:4c:d2:8b:09:14:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:47 2026 GMT
Not After : May 21 02:47:47 2027 GMT
Subject: CN=43F9D2A5CB4C84A9F828D59015CEC01AB1A1315B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:b6:5d:4a:ac:af:ba:de:6f:35:36:17:ef:
7a:86:d8:2e:8e:ad:b9:f7:3a:69:d9:b7:d4:81:3f:
d3:21:7c:25:0e:60:24:d0:55:b7:02:12:33:0c:6c:
5f:d5:99:d0:1b:3d:12:b6:59:cc:7e:00:a3:8e:6f:
2d:9b:f0:fa:ae:9f:a1:b9:78:ed:99:58:a3:1e:cf:
f9:2b:41:57:57:21:74:7b:8f:55:cf:24:ad:a1:72:
d8:1c:ab:87:23:69:eb:23:a5:ba:d9:09:33:0c:28:
25:cc:5c:99:c8:43:f1:6a:ec:9f:38:4f:89:89:da:
ef:b6:bb:2e:45:9b:ce:cc:bd:b0:ab:fc:85:55:16:
ed:a5:97:86:1c:cc:7a:dc:01:1b:b5:86:b2:09:90:
62:ff:71:2d:de:33:81:cb:20:c6:61:2b:eb:5c:fc:
95:57:fd:fe:fd:6b:6f:28:65:cc:e1:28:9a:e7:2d:
0f:92:7d:5d:7b:b2:7f:11:ff:90:3c:f7:6d:86:91:
1b:ee:1a:e7:ba:f3:4c:b6:fc:bc:6f:ea:8c:98:b4:
ac:4a:c9:5c:36:14:18:04:ba:2b:ad:39:6a:07:47:
2c:4d:e4:c6:d9:a2:74:0f:33:42:77:28:08:17:6f:
ea:3c:34:4b:d5:d2:c2:51:f9:d6:6f:50:93:16:54:
e5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F9:D2:A5:CB:4C:84:A9:F8:28:D5:90:15:CE:C0:1A:B1:A1:31:5B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143411.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2f9::/32
Signature Algorithm: sha256WithRSAEncryption
4c:59:9b:9e:be:85:6b:e1:00:a4:21:e9:98:d2:bb:1d:3e:8b:
69:ea:f5:d6:74:8b:99:7b:7c:75:b7:97:f2:af:ef:12:ed:ed:
8f:27:99:d1:77:fb:08:97:7c:f8:cc:5a:21:ce:91:9a:c7:c5:
9d:ba:75:0b:07:73:96:3a:3c:4b:70:84:1c:f6:0f:87:66:3b:
8e:54:f9:7c:60:78:30:2d:68:1b:b8:c1:fb:c6:7b:af:c8:0f:
c8:15:35:6c:09:26:82:74:df:cf:a2:24:91:10:21:99:c2:99:
cc:ac:0b:82:52:61:2f:00:fd:4c:3d:c4:fe:dc:98:e8:7c:98:
30:44:95:8d:ea:05:63:e8:5b:59:c8:06:ed:ea:f9:7a:7c:aa:
60:99:d6:ef:a1:80:72:fb:4d:e4:72:c2:3c:96:c5:01:c9:fb:
7c:dd:d6:cb:09:f7:dd:ac:20:90:a0:15:71:95:78:de:cd:99:
cd:8a:7e:e9:83:44:1a:4c:b5:08:17:11:43:c9:f4:33:3d:bf:
cd:ba:3f:c7:78:61:fd:04:73:65:36:ec:a3:ac:03:28:5b:6e:
6e:d1:68:0c:ad:f3:b6:a3:a2:59:45:ef:2d:0c:28:87:cd:3b:
11:41:6e:d6:26:22:b5:c3:bb:51:8d:32:65:3a:c1:2c:07:5b:
35:cd:08:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:11 2026 by rpki-client