Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143438.roa
File: AS143438.roa (raw, json)
Hash identifier: NQfabwEBMGNr5KJ+aNdb4FhbLBQEcwjj5ODmS1ZHuME=
Subject key identifier: 45:CC:3A:65:6B:3A:5D:23:46:C3:19:18:53:41:72:AA:BB:6F:B9:05
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 12178EFD8E44B17238367EE2B96FD0E1A070D196
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143438.roa
Signing time: Mon 25 May 2026 02:22:43 +0000
ROA not before: Mon 25 May 2026 02:17:43 +0000
ROA not after: Mon 24 May 2027 02:22:43 +0000
asID: 143438
IP address blocks: 240a:a314::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:17:8e:fd:8e:44:b1:72:38:36:7e:e2:b9:6f:d0:e1:a0:70:d1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:43 2026 GMT
Not After : May 24 02:22:43 2027 GMT
Subject: CN=45CC3A656B3A5D2346C31918534172AABB6FB905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:33:e8:49:e7:02:e9:a1:84:40:32:8c:a8:
b4:18:27:be:5e:3a:81:4e:1f:31:a6:b2:19:7d:2f:
3e:db:0d:03:29:7c:c6:65:56:ae:4c:08:4a:b0:78:
1c:8b:6b:e4:a8:29:60:de:0f:99:1f:72:88:b1:6a:
b5:f4:08:60:d4:90:5f:fd:4c:fa:5d:e5:70:db:8b:
f2:64:f5:19:8f:f7:25:9e:63:5b:72:aa:1f:4e:9c:
b2:21:0d:f6:64:e6:d2:30:22:25:8f:f5:97:7d:93:
d9:82:e0:fa:56:76:4b:88:28:43:d5:4d:0b:ef:ed:
62:67:47:ad:d9:3e:cb:53:99:7c:48:d5:43:1c:40:
38:7c:91:40:16:bf:cd:6e:67:ab:d1:c3:eb:c8:6e:
16:b6:b7:ac:9a:92:2f:c7:06:fa:c6:e5:95:1b:4c:
fb:df:9c:8e:4a:d1:5c:e7:35:e4:5b:5f:74:d2:c7:
f6:f6:35:bc:7a:e6:e2:92:11:86:04:e3:8d:f3:48:
30:43:7d:77:11:c1:24:7a:84:e3:61:bb:3b:24:e3:
d2:0a:29:69:b9:c3:ba:9f:82:e8:74:81:5c:24:44:
6b:5e:6f:22:d8:1f:3f:a1:26:50:51:48:a6:0c:88:
30:0b:c5:a7:ca:93:a0:7b:49:73:e9:34:8f:63:00:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CC:3A:65:6B:3A:5D:23:46:C3:19:18:53:41:72:AA:BB:6F:B9:05
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a314::/32
Signature Algorithm: sha256WithRSAEncryption
93:1e:99:2c:78:ee:60:00:a5:69:a4:12:e3:9e:47:2f:dc:4d:
40:82:fc:ed:d7:1c:d3:38:6d:80:ca:c8:a7:77:db:8b:75:63:
bf:26:4b:e1:01:99:7b:65:24:8c:95:29:21:c8:88:7a:3a:9b:
9c:cb:5b:6a:d9:c9:ee:71:e1:2d:00:e4:1e:44:e6:0c:03:68:
59:97:68:c4:d8:ae:8b:6a:02:a2:08:01:d7:b0:88:73:d7:88:
ce:9b:ff:b1:f4:24:b5:10:03:37:35:bb:a5:ac:f0:be:ed:5f:
97:d2:40:ec:cc:5f:6c:88:39:d6:14:e7:ab:04:0b:63:32:04:
4b:42:a3:81:3e:cc:d1:71:a4:74:ae:26:ea:48:9f:14:72:35:
9b:99:1d:86:19:1f:3b:79:3f:1e:56:65:e7:07:02:b9:f5:dd:
47:05:51:0b:5b:b8:c2:2e:c8:7f:83:a8:87:e4:30:fc:dc:72:
fa:c5:c7:bf:d7:0b:47:0f:bb:96:b3:01:a7:39:45:a0:e6:a7:
27:ab:d0:16:eb:57:2a:ca:df:94:4d:4e:a8:c4:e0:3e:fe:a0:
94:79:eb:94:49:84:48:c7:36:49:45:fa:32:bb:da:be:2d:80:
e1:5d:6c:50:21:fe:9d:3b:3f:e8:ec:50:1b:15:7a:ed:b6:c9:
37:9a:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:59 2026 by rpki-client