Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143419.roa
File: AS143419.roa (raw, json)
Hash identifier: mu9vN5wQwE0zc8Z7G95Tn7kjt/QpAVOOQslBJ2k9O9U=
Subject key identifier: 34:22:1A:3B:3A:AF:91:53:8D:8F:7C:8C:DE:C1:46:10:13:6C:5C:AB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4A3B9D23BCBD909F6A160F69373F88360A79A542
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143419.roa
Signing time: Fri 22 May 2026 02:47:27 +0000
ROA not before: Fri 22 May 2026 02:42:27 +0000
ROA not after: Fri 21 May 2027 02:47:27 +0000
asID: 143419
IP address blocks: 240a:a301::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:3b:9d:23:bc:bd:90:9f:6a:16:0f:69:37:3f:88:36:0a:79:a5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:27 2026 GMT
Not After : May 21 02:47:27 2027 GMT
Subject: CN=34221A3B3AAF91538D8F7C8CDEC14610136C5CAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:b6:07:55:97:98:92:42:a2:cf:d5:a2:d9:
73:8a:6b:aa:b0:11:b1:b4:13:dd:d7:62:b7:9c:d7:
1f:1c:f8:aa:a0:81:42:c0:84:1b:8c:f5:83:de:38:
bc:23:44:57:de:64:ee:00:4e:74:22:58:89:64:86:
be:be:95:04:87:f9:f5:c4:d5:30:69:8c:af:d8:65:
18:e5:f3:fd:12:18:a8:79:35:81:97:22:55:ef:18:
c6:51:27:00:74:51:90:5e:0b:3c:aa:3a:71:c1:91:
31:f6:bf:fe:3b:88:33:be:0a:07:88:fd:96:d2:fc:
cd:68:d1:6f:ed:71:de:2d:d6:be:55:13:17:f8:70:
9d:8d:7e:0e:86:e7:a2:b6:56:76:9e:9a:f1:a0:10:
c9:95:98:82:ca:de:93:16:89:5e:da:14:30:b5:3f:
27:d3:26:99:bd:57:ea:19:8e:c2:83:a8:9f:1b:8e:
b0:89:1a:a7:19:e5:f6:bb:ac:b8:77:26:62:0c:7b:
15:b0:da:00:b0:19:6c:a5:b4:85:74:b2:8d:ff:ef:
d7:ff:b9:c2:57:e5:e7:fb:5e:4b:a7:ef:01:c5:b9:
3c:89:94:46:58:95:96:04:14:d3:55:5c:80:75:dd:
9d:b6:58:b1:86:99:9d:f3:2f:5c:c6:f8:de:6e:b0:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:22:1A:3B:3A:AF:91:53:8D:8F:7C:8C:DE:C1:46:10:13:6C:5C:AB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143419.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a301::/32
Signature Algorithm: sha256WithRSAEncryption
46:e5:af:b0:9b:94:fd:a6:bb:3a:5a:f6:e6:a4:54:2e:73:d4:
e2:ac:5e:88:45:ce:d4:1d:51:6c:a8:57:37:d3:04:71:7d:5f:
77:38:99:01:f5:fd:63:47:cc:67:3d:6f:c2:54:fa:c2:3f:9f:
60:21:fb:20:4a:d5:ad:24:4e:83:c7:f3:c6:68:a1:1d:bc:d8:
a3:ca:09:72:8e:61:24:d2:ca:cd:ed:39:14:be:5e:d8:d7:f5:
35:b8:57:cc:d3:e3:8e:ff:ab:d7:51:8b:38:83:e6:03:2a:a1:
08:80:53:24:a3:b8:67:e9:93:7a:30:6d:2d:4b:63:e8:a8:09:
02:52:d4:13:df:f5:06:0d:30:c8:94:fd:96:37:23:4f:84:59:
48:cd:f4:d1:f2:d8:6c:06:e9:69:2e:ec:fa:be:4c:3f:d0:5c:
16:cc:5c:20:80:c2:a8:5f:d4:16:15:ab:51:46:e2:8c:d8:ff:
5f:00:e1:80:c8:72:49:ec:b6:45:40:d2:e4:b1:e5:8b:28:c7:
e6:0b:29:04:ea:a8:7d:e7:22:95:b8:7f:89:a8:cc:06:20:42:
9d:40:c0:71:45:6f:94:08:2f:2a:b2:99:88:1a:ba:fd:c5:7b:
ab:13:4f:95:7f:9c:5f:19:fd:1f:fb:62:dd:d4:61:e3:9f:f9:
6b:3a:51:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:33 2026 by rpki-client