Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143441.roa
File: AS143441.roa (raw, json)
Hash identifier: dJq4qyLmDI++URdkjBekkv/EgVRzjnm+aFf7MM89d04=
Subject key identifier: 7D:31:0B:17:41:DA:CC:69:A3:AB:A0:DF:CC:98:E9:22:26:2E:76:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6A49C224CFE4C5957AF32D97D13CB31C7D0E883A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143441.roa
Signing time: Tue 26 May 2026 08:52:59 +0000
ROA not before: Tue 26 May 2026 08:47:59 +0000
ROA not after: Tue 25 May 2027 08:52:59 +0000
asID: 143441
IP address blocks: 240a:a317::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:49:c2:24:cf:e4:c5:95:7a:f3:2d:97:d1:3c:b3:1c:7d:0e:88:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:59 2026 GMT
Not After : May 25 08:52:59 2027 GMT
Subject: CN=7D310B1741DACC69A3ABA0DFCC98E922262E762E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:73:6c:35:21:30:ce:48:69:e1:21:cb:3c:a6:
b4:f8:d1:b0:7c:31:2d:a2:78:91:87:3b:eb:3b:8e:
8b:98:78:d2:40:58:42:ca:75:25:7b:90:bd:a0:0d:
08:6d:ae:ad:27:35:f8:37:e8:3e:8e:bd:d2:de:1b:
07:4d:92:8b:1e:89:7f:06:32:9b:6d:f2:00:7b:75:
23:c9:85:a0:59:4c:7e:86:36:45:41:f4:87:66:e7:
14:45:b4:23:eb:8b:39:b3:9d:01:cd:12:28:f5:c0:
ec:45:2b:a5:31:37:22:22:53:0f:10:45:a4:0c:e0:
7a:89:b6:a4:f9:d6:1f:be:b3:b5:39:c8:7f:44:b7:
b5:d7:a2:00:1b:85:cb:be:33:81:a3:aa:75:2f:fc:
f7:43:0d:63:ce:96:22:68:67:53:4f:56:e9:15:04:
01:93:73:57:b8:43:6e:5e:52:8c:67:b5:b0:cf:c1:
0f:c9:7a:62:09:fd:a8:3b:8e:78:7b:eb:9a:96:ac:
64:15:6d:dd:6a:38:4e:a3:b1:a5:45:b1:4f:82:64:
fb:3f:f2:78:fd:fe:25:f4:d7:b9:33:55:9f:94:2f:
a1:65:f1:70:c8:5f:4b:18:75:c4:33:79:f0:57:3c:
71:51:2e:5b:e8:82:55:64:91:61:d2:2b:04:9c:e8:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:31:0B:17:41:DA:CC:69:A3:AB:A0:DF:CC:98:E9:22:26:2E:76:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143441.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a317::/32
Signature Algorithm: sha256WithRSAEncryption
02:7e:80:4f:53:38:af:a5:ef:09:af:71:bc:7a:8b:ee:58:e4:
ab:4f:e3:34:51:94:54:f5:0d:bb:65:59:7d:75:a2:19:e5:d9:
83:cd:b2:43:0f:7c:85:35:75:1a:ec:d8:dc:32:af:3c:ab:c4:
87:cb:47:f7:b0:f9:ac:6c:c3:7e:0c:40:c9:b0:23:44:72:e1:
60:18:2b:9c:0a:9c:9e:12:1f:45:6b:d5:9c:2a:c7:8c:a6:0d:
10:03:36:3d:c5:15:30:3c:d8:7a:ca:33:08:82:07:67:9f:17:
95:f9:ea:eb:bb:ae:df:ba:0e:aa:40:ca:16:f0:b7:86:f9:89:
79:e8:dd:b4:f3:26:b0:b3:95:ab:2a:63:4d:f1:d4:a5:ea:6c:
a8:7f:79:e9:67:49:d8:70:60:07:8b:16:b7:e2:10:11:a9:04:
c1:59:b2:97:0e:27:9e:94:30:d7:d3:1f:e7:fc:c8:ec:f5:42:
34:01:6b:24:54:0d:e4:12:04:f0:f7:ae:c5:6f:3d:eb:91:1b:
69:1b:a3:ee:b7:da:1a:bb:03:28:e8:47:ce:0c:17:b7:75:bb:
07:b8:11:78:4d:0e:bc:20:2b:9c:65:70:81:2e:54:32:c0:79:
d6:83:5f:dd:21:ca:01:a9:20:52:95:5a:cb:57:f9:87:5e:3c:
f6:81:3d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:30 2026 by rpki-client