Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143424.roa
File: AS143424.roa (raw, json)
Hash identifier: 2dhzZqwApi/jAE0tlbALM3ixBSnVElkjO84cDuaR+W0=
Subject key identifier: A9:FD:1F:FB:BB:24:EF:8E:68:41:4A:CD:09:E5:AE:B4:C0:E2:FF:31
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0FD5EF2A8ABF39D8B6381840FFBA08A40C2FE56E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143424.roa
Signing time: Fri 22 May 2026 06:58:44 +0000
ROA not before: Fri 22 May 2026 06:53:44 +0000
ROA not after: Fri 21 May 2027 06:58:44 +0000
asID: 143424
IP address blocks: 240a:a306::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d5:ef:2a:8a:bf:39:d8:b6:38:18:40:ff:ba:08:a4:0c:2f:e5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:44 2026 GMT
Not After : May 21 06:58:44 2027 GMT
Subject: CN=A9FD1FFBBB24EF8E68414ACD09E5AEB4C0E2FF31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:85:38:c7:c0:28:97:31:70:f2:b9:22:7d:
8f:3c:e3:1a:3e:9e:41:2d:d4:60:ea:49:a7:92:b0:
7f:a1:bd:b2:19:31:29:8e:dc:c4:26:75:e1:9d:e8:
66:e4:fa:43:3e:cc:68:8e:52:77:1c:b0:a1:33:77:
72:d2:32:79:bd:e6:b0:db:8d:25:e5:93:34:61:ee:
3d:f6:fa:10:9b:e6:51:24:25:42:23:60:a8:42:66:
5e:98:28:3a:a0:b1:b4:8c:97:a3:5f:75:e2:1b:72:
a3:e3:d9:36:cc:b9:b6:66:65:f1:d5:5b:c5:da:47:
44:5c:32:fe:56:2b:6b:9a:ac:5a:92:83:4f:1c:43:
88:ab:9a:23:1f:c6:88:1a:1f:11:1c:63:57:9c:15:
6e:70:85:84:20:07:8e:39:71:a1:1c:1f:09:2f:f6:
ff:b7:8b:29:0d:0e:89:e8:d5:34:e5:80:1a:c1:d0:
6b:f0:41:81:d0:dc:02:42:93:4c:bb:b7:78:45:9b:
36:2d:9f:99:d8:39:d6:43:9b:24:ba:0a:ff:30:92:
39:19:5c:39:d9:de:fd:17:ef:0a:7c:06:d8:f6:d9:
1e:fa:fb:f4:7b:1f:40:34:8c:91:67:e0:5f:d7:cd:
3a:61:dd:e3:69:16:b9:7a:ce:c9:29:2a:ea:c0:ad:
7b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:1F:FB:BB:24:EF:8E:68:41:4A:CD:09:E5:AE:B4:C0:E2:FF:31
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143424.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a306::/32
Signature Algorithm: sha256WithRSAEncryption
8a:46:8d:46:3a:09:16:36:b6:98:32:ff:c3:c6:24:6f:b3:24:
6d:da:fc:d7:3f:08:1a:34:8d:27:17:10:21:97:8b:72:3f:8d:
7c:2a:da:c3:86:ce:a0:3b:1b:f9:dd:c9:09:f8:b0:9d:d6:b9:
5f:e4:87:49:31:93:bb:b1:34:0a:c5:15:8b:d9:f7:a5:7b:71:
72:48:f2:37:f5:7d:a2:b2:42:e8:b7:15:c7:4c:b8:dc:db:4b:
56:bb:41:1f:8d:dd:01:05:3f:3d:29:15:42:5f:2b:f0:da:cb:
dd:db:d0:1b:a3:d9:0a:a5:58:0d:19:c7:4e:50:42:08:c9:81:
5b:e0:5e:a4:38:30:13:b3:eb:e0:db:14:00:d4:6c:90:91:4a:
1d:07:76:0f:de:b7:94:bb:f8:51:8e:c1:84:e6:02:f8:f2:24:
72:fc:ec:d5:7f:40:62:8c:53:8e:0a:95:6b:73:bd:18:fc:e2:
55:e5:8a:6a:98:39:d7:cf:6d:f1:71:ae:99:b4:55:fd:39:95:
17:17:7e:d4:19:d1:a1:af:7f:e6:ff:69:18:8f:8d:a8:d0:91:
b8:5d:17:8a:20:fe:00:0a:a1:04:b2:db:fe:86:59:33:d3:12:
1f:99:d7:ca:28:6f:ec:b0:61:bf:54:5a:fc:cb:89:61:12:0b:
30:f6:48:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:26 2026 by rpki-client