Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143417.roa
File: AS143417.roa (raw, json)
Hash identifier: wg/Bw3cvTmOXi4Pfpye4FbhkoeMV+FuOOl8tRjVYj6Q=
Subject key identifier: 9B:51:70:49:59:FB:6C:FD:86:4C:40:95:74:5B:55:62:94:CA:B7:FB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 491EA1737DE160C7DD9A2C7B199C11483F2DDEF0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143417.roa
Signing time: Mon 25 May 2026 01:20:22 +0000
ROA not before: Mon 25 May 2026 01:15:22 +0000
ROA not after: Mon 24 May 2027 01:20:22 +0000
asID: 143417
IP address blocks: 240a:a2ff::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:1e:a1:73:7d:e1:60:c7:dd:9a:2c:7b:19:9c:11:48:3f:2d:de:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:22 2026 GMT
Not After : May 24 01:20:22 2027 GMT
Subject: CN=9B51704959FB6CFD864C4095745B556294CAB7FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:02:14:6a:82:b0:77:49:17:59:36:b6:14:ad:
2b:a8:a4:df:7b:1c:2d:88:58:8b:37:b6:0d:68:a7:
7a:48:40:a0:fa:b5:08:56:d9:ec:de:da:ed:73:07:
e7:d2:62:65:b5:5b:35:e6:27:a8:15:29:ec:b8:cb:
f7:ba:0a:40:0f:57:3c:94:44:73:87:71:f6:5d:31:
71:e5:df:2e:ac:3e:28:db:48:49:66:29:5f:3f:29:
df:a4:13:79:cb:1e:5b:76:e3:f0:15:e4:9d:e0:ff:
db:7c:e3:e9:e2:51:a6:7e:6d:68:74:ed:ba:fe:fd:
16:ab:07:e3:91:c9:96:05:61:4b:36:12:ae:b0:3a:
df:ac:d3:8a:2d:38:c1:c1:dd:d9:a7:4a:37:60:b7:
c1:c5:ea:a8:a8:90:6d:10:3f:ac:41:a3:93:7b:a3:
c6:b2:26:c7:09:91:48:7d:35:0a:59:81:47:91:04:
43:4f:00:69:8c:c1:06:7f:7b:23:c2:42:5c:df:26:
bf:6d:43:13:34:29:00:55:7a:88:fd:7b:cb:65:90:
97:bb:58:5b:fe:96:19:07:3c:f2:fa:c8:78:67:b5:
72:32:1d:37:9d:6c:57:81:ac:9e:6c:b0:a2:87:8c:
a4:7c:cc:40:c6:49:22:ca:4d:2a:f5:4f:ee:25:dc:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:51:70:49:59:FB:6C:FD:86:4C:40:95:74:5B:55:62:94:CA:B7:FB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143417.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a2ff::/32
Signature Algorithm: sha256WithRSAEncryption
a4:52:ad:7c:93:f7:bd:4b:d6:27:f7:f2:0e:35:c6:9d:00:18:
3e:e0:1d:7f:cd:cd:01:f6:3f:44:b8:42:33:69:18:4c:89:56:
21:24:9c:9f:67:98:8f:ab:86:4d:6f:e7:98:df:59:99:e2:d4:
4a:ce:58:79:5c:08:f5:d4:99:ed:f1:ce:08:8d:f1:6a:da:97:
c2:9c:40:e7:97:12:7e:a4:58:a1:e8:0e:71:e9:de:c7:98:1a:
f2:32:27:3e:c5:c0:07:45:19:2e:38:4a:e2:9b:e5:8c:3c:59:
b7:77:2c:11:7c:6d:6c:b6:9f:e3:1c:03:ff:e9:f2:f8:58:71:
b4:30:f7:b0:6e:2e:7e:d8:ff:25:82:fa:8b:8a:5e:8d:ce:19:
88:15:5b:80:08:b6:5a:fb:48:63:81:58:64:cf:5e:7e:ab:2c:
8b:ee:9e:79:8e:91:c0:25:03:e5:d7:80:2a:d4:44:cb:21:29:
32:d5:c5:27:7c:d2:61:47:06:9e:92:69:30:07:90:bd:04:70:
e7:95:2e:de:ba:3b:30:d3:54:4a:d2:63:18:31:5e:57:7c:d7:
a7:12:d9:93:79:fa:9d:64:da:e2:6b:be:91:ad:9e:2d:e2:08:
88:50:2a:33:ec:e1:15:4e:6c:ee:97:b3:73:c3:2f:c6:01:ab:
23:86:2a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:00 2026 by rpki-client