Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143429.roa
File: AS143429.roa (raw, json)
Hash identifier: aIc86oaA3Nti89j1M8PiBKEIn0E11+TFK0CTiP0GV1Q=
Subject key identifier: 39:54:17:B1:DF:FF:EB:3F:86:32:EB:E8:93:FD:2E:A4:A2:F2:95:53
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 73DC314C32D04A8F7FF38104AB67EBBA09921C20
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143429.roa
Signing time: Fri 22 May 2026 06:05:28 +0000
ROA not before: Fri 22 May 2026 06:00:28 +0000
ROA not after: Fri 21 May 2027 06:05:28 +0000
asID: 143429
IP address blocks: 240a:a30b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:dc:31:4c:32:d0:4a:8f:7f:f3:81:04:ab:67:eb:ba:09:92:1c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:28 2026 GMT
Not After : May 21 06:05:28 2027 GMT
Subject: CN=395417B1DFFFEB3F8632EBE893FD2EA4A2F29553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:d2:0f:6d:d3:46:b8:0a:22:bb:70:fa:27:
2d:e1:4e:c5:8b:c0:c3:be:bf:13:45:2e:bd:52:23:
5d:24:98:91:0d:90:14:8f:e0:27:94:04:31:22:e9:
aa:7f:0a:4d:d3:8b:8a:48:d0:f0:d7:12:5d:91:08:
24:72:25:df:d7:05:50:f6:79:54:65:76:e9:1e:72:
4e:d6:08:02:d1:25:01:1c:1a:3c:c5:b0:2f:9a:22:
4c:bb:c9:8b:27:7b:5f:d4:5d:f7:52:39:0d:42:4a:
60:c1:22:f1:2b:c8:e4:ef:e4:c1:c6:2d:45:77:82:
f1:1f:3a:5d:46:6e:06:cf:a5:bb:fe:46:2b:6a:d1:
af:35:c6:d7:57:a4:88:87:0c:b9:0b:97:31:0b:78:
78:23:63:d3:40:ab:1b:48:2a:eb:c4:d4:6d:4e:9d:
0d:0a:27:cc:56:69:d3:2d:42:c5:d2:bb:fe:11:ca:
2a:a2:4e:f3:7f:69:6a:fc:c6:71:94:96:72:87:a6:
71:56:98:92:06:96:34:ef:90:23:3c:56:cd:bf:f4:
7b:07:71:c3:20:54:d5:a7:6b:eb:c8:f7:93:20:03:
23:8f:d2:3f:2a:ca:51:f3:cf:a5:8f:2e:85:f0:bc:
e4:c5:13:ca:70:f2:34:bc:85:65:1d:29:20:25:7f:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:54:17:B1:DF:FF:EB:3F:86:32:EB:E8:93:FD:2E:A4:A2:F2:95:53
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143429.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a30b::/32
Signature Algorithm: sha256WithRSAEncryption
5c:a7:cf:9f:e0:e4:54:3b:2d:2c:25:c6:31:89:cb:16:d5:4f:
a3:f2:81:17:58:15:68:03:ae:c9:a2:22:53:f2:ef:fd:56:ec:
81:d5:14:71:66:3a:02:79:5f:81:c7:1f:36:27:e6:ba:8f:e7:
c5:d0:54:43:a0:24:55:6c:6e:9e:d7:67:ad:2a:3f:49:b4:a3:
04:d8:9d:79:55:20:85:45:bd:dc:eb:2d:9a:c3:9c:b9:65:c3:
6c:d7:f4:9b:e0:35:4c:7d:50:b1:e2:9a:81:8e:44:7f:96:c9:
f5:be:38:f1:eb:40:42:79:06:9e:3f:de:3d:24:45:af:bb:bb:
47:a5:87:3d:ba:2c:ba:15:9a:dd:6a:b2:9d:b3:73:5a:9c:25:
88:46:b7:eb:59:da:90:18:9d:5d:29:b2:01:ea:44:af:cf:ce:
96:be:aa:0b:b3:48:4c:43:6a:17:9d:23:7e:ec:61:ba:05:d5:
62:59:93:e8:fc:8b:e6:c9:0b:60:5d:22:85:0a:19:cb:cf:57:
dd:bf:04:92:f7:c3:22:d6:a0:96:83:fc:e0:63:4a:81:75:ed:
6c:5f:9d:ed:96:ac:ec:15:e3:d4:1b:e7:cd:88:15:05:c2:01:
a6:93:0b:81:64:0f:a6:1c:e0:33:ec:48:d5:93:45:4b:e5:0b:
07:94:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:14 2026 by rpki-client