Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143433.roa
File: AS143433.roa (raw, json)
Hash identifier: Dt+srg4cuhZ7r4PaN9xqDwTPM+tbgBY5umv3ATMC3rg=
Subject key identifier: F9:D5:D7:3F:24:7C:C5:4D:09:E1:03:7C:FD:4C:6A:54:43:28:5F:DF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 079C8776A47378F2F304E6F94637726D7D94EB83
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143433.roa
Signing time: Fri 22 May 2026 07:08:49 +0000
ROA not before: Fri 22 May 2026 07:03:49 +0000
ROA not after: Fri 21 May 2027 07:08:49 +0000
asID: 143433
IP address blocks: 240a:a30f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:9c:87:76:a4:73:78:f2:f3:04:e6:f9:46:37:72:6d:7d:94:eb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:49 2026 GMT
Not After : May 21 07:08:49 2027 GMT
Subject: CN=F9D5D73F247CC54D09E1037CFD4C6A5443285FDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5c:ea:9a:e7:c8:22:be:b0:36:11:38:6f:15:
b6:78:71:80:f9:11:02:f3:50:c8:a2:e1:49:41:64:
3e:bd:15:94:d3:12:3a:03:46:b9:fd:e5:f6:9f:19:
1b:84:9c:e7:18:ea:a0:d7:15:40:28:40:58:0c:07:
71:fb:16:48:8a:16:d1:d9:79:59:7a:3e:53:a9:23:
58:7b:82:25:6a:8e:ac:9e:9d:4b:62:ba:98:fd:83:
9f:4f:30:38:00:72:9f:92:95:dc:4c:1e:8d:59:31:
54:3d:68:31:87:8b:db:63:99:cc:39:89:a7:f7:07:
b6:10:55:19:69:e2:8f:23:46:cd:76:d3:3a:5d:4c:
3d:0b:5d:ab:32:ba:ae:ab:cc:db:bc:91:bd:a1:d4:
1b:7a:7a:66:07:9e:95:48:61:6d:92:dd:d1:69:9f:
21:62:bd:31:78:d4:f1:a0:cf:bb:57:06:91:ea:4f:
4f:9c:39:25:80:4c:c1:78:a9:c8:a6:0c:d4:7b:25:
12:4b:44:00:01:d2:b9:69:81:4a:32:6b:e6:0f:a6:
12:0a:ab:ab:c9:e2:02:84:bf:48:c4:40:d6:71:a5:
dc:11:5b:87:8d:08:0f:8e:71:d5:f0:f5:d8:0f:f0:
53:97:31:20:66:7e:f2:73:0d:63:24:c8:11:22:64:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D5:D7:3F:24:7C:C5:4D:09:E1:03:7C:FD:4C:6A:54:43:28:5F:DF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a30f::/32
Signature Algorithm: sha256WithRSAEncryption
a3:8f:15:0d:f3:3c:51:ab:cf:a6:0c:72:1d:30:10:60:4e:ed:
c8:39:67:60:ee:2a:06:d0:65:78:28:3d:3b:56:74:e0:23:b0:
f8:e2:a1:72:b5:36:69:ce:4b:49:3f:a2:21:d7:3c:77:a4:49:
b8:99:53:10:df:ad:de:88:94:9e:07:06:a9:a1:77:48:d9:3a:
ca:00:74:f5:01:46:e4:b8:f0:a3:15:74:16:7d:7f:a2:c1:46:
2c:5d:6d:3e:fb:91:4e:ed:a2:ba:5c:a4:54:db:ce:fb:23:f5:
83:d3:23:aa:58:cc:67:9c:4a:b2:b7:e2:28:d2:39:8a:4f:15:
d0:50:1b:f0:3c:42:ac:bf:51:2f:65:e9:1f:dd:dd:91:23:1d:
2d:36:54:5f:bf:d6:2c:73:80:70:98:5e:70:f5:94:ab:1d:75:
67:1c:95:e6:2c:73:20:83:72:6d:d0:cd:a0:94:fd:75:15:7e:
39:31:34:46:76:51:6e:f0:02:56:f8:46:e9:e4:e8:e0:12:10:
98:a1:e7:90:22:32:69:3f:c0:34:11:c9:38:a6:30:4a:c3:64:
4b:28:a5:c1:e3:9d:ae:69:45:fa:1d:e1:ac:79:b0:20:0a:4a:
5f:3a:30:94:c3:9b:af:60:1e:b3:0a:15:9d:65:20:10:13:cc:
24:7f:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:22 2026 by rpki-client