Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143436.roa
File: AS143436.roa (raw, json)
Hash identifier: ANdg+hCsa5OTfXdxVcpufhKySG1yrvg+T714mbXuufc=
Subject key identifier: C1:E0:18:8D:2D:96:67:B2:AB:23:C0:56:6C:EA:4E:BE:1D:14:32:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0D049EE90FB9872B3B8B97A90574612A4556E802
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143436.roa
Signing time: Tue 26 May 2026 08:53:01 +0000
ROA not before: Tue 26 May 2026 08:48:01 +0000
ROA not after: Tue 25 May 2027 08:53:01 +0000
asID: 143436
IP address blocks: 240a:a312::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:04:9e:e9:0f:b9:87:2b:3b:8b:97:a9:05:74:61:2a:45:56:e8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:01 2026 GMT
Not After : May 25 08:53:01 2027 GMT
Subject: CN=C1E0188D2D9667B2AB23C0566CEA4EBE1D1432E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:ec:2e:e5:d2:60:85:48:09:54:9f:e1:9d:
a2:e5:f0:44:9a:14:b0:3b:e6:1d:b5:94:a9:a8:00:
20:20:f4:94:b3:67:3b:8b:b3:1b:ca:72:b6:85:bc:
2c:d3:ac:04:c3:88:0b:85:72:fe:d7:94:45:8c:ae:
42:a4:d2:88:36:98:aa:02:59:3b:a1:21:45:f9:d3:
96:e0:06:54:4c:9b:4a:33:3c:26:a3:09:52:65:39:
01:0b:90:80:f2:0e:3a:1f:ca:70:0b:5a:cc:8d:24:
e3:0d:55:e0:72:c4:c1:d9:4f:89:5b:bb:3c:66:53:
3f:18:ea:39:b5:b2:a7:c0:74:83:93:e4:91:5e:5b:
8a:f9:84:0f:59:f8:83:97:44:81:f9:fc:89:c7:65:
c3:b6:e3:5a:a3:2e:7c:07:11:a3:82:f1:3d:88:11:
dd:a5:5c:18:6d:ab:0f:ae:fb:4c:43:35:63:b4:f1:
3f:74:38:d5:20:04:31:4a:bd:36:46:f6:7f:5a:69:
83:33:a5:bb:9b:c3:94:ce:26:cb:ce:c5:f7:96:b6:
82:0f:66:12:6d:bd:0b:c4:12:90:c4:8f:d4:24:3e:
61:c6:f5:03:56:78:b8:77:1b:8e:fa:05:8e:a3:95:
69:05:23:eb:90:e5:b1:b3:71:60:7c:13:ce:33:f9:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E0:18:8D:2D:96:67:B2:AB:23:C0:56:6C:EA:4E:BE:1D:14:32:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a312::/32
Signature Algorithm: sha256WithRSAEncryption
a8:85:8e:db:5f:a6:d5:74:98:f6:97:ce:c9:43:9a:1d:c0:81:
27:8d:20:0a:4f:22:d4:30:dd:29:4b:97:a8:ad:22:79:6c:66:
10:33:c1:6b:48:c7:0e:9a:fc:ef:4d:8f:ca:6c:cc:6b:84:07:
33:23:ef:9d:ba:13:4b:14:9e:32:a2:63:47:72:a6:22:d8:e2:
4c:c7:a7:bf:96:00:b8:6a:5c:fb:c7:9a:fa:78:32:9d:28:1d:
0e:69:6e:44:4a:13:f5:44:9c:e0:61:50:f0:f5:ac:23:ad:af:
32:69:e0:ab:f2:ce:88:65:f1:2d:62:44:a6:d0:fd:55:21:3a:
bb:f4:6f:97:4d:b6:c8:bf:24:fa:25:a1:b4:1b:fc:79:00:a9:
a4:d3:bf:70:f8:a2:ea:4c:5f:b1:17:40:d4:63:28:ad:c7:27:
aa:97:45:97:38:38:a3:b6:3c:c6:f6:f5:ec:be:9c:44:1a:cf:
b7:b2:d9:19:37:b8:80:35:fa:0e:8e:ee:bc:43:23:90:09:6b:
18:f5:88:c4:1b:1d:b5:7e:cc:83:a2:a7:13:81:38:88:84:62:
48:ee:75:96:8d:e2:77:0e:d0:be:92:92:fa:5c:ef:8b:29:fa:
8e:d8:26:cf:b5:d2:30:3c:7f:df:c0:4e:a3:7d:41:73:44:3b:
12:d8:28:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:05 2026 by rpki-client