Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143442.roa
File: AS143442.roa (raw, json)
Hash identifier: h6USpzVznRsdfnMwtwmZVmrT50M+w9pV5GND8SZ8/oE=
Subject key identifier: 58:12:93:CB:54:C6:D7:E9:B6:6C:F4:64:64:AD:4F:63:D6:8E:5E:D7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5484370071FE2D858CFD458FBFD9994E2A612653
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143442.roa
Signing time: Fri 22 May 2026 06:58:18 +0000
ROA not before: Fri 22 May 2026 06:53:18 +0000
ROA not after: Fri 21 May 2027 06:58:18 +0000
asID: 143442
IP address blocks: 240a:a318::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:84:37:00:71:fe:2d:85:8c:fd:45:8f:bf:d9:99:4e:2a:61:26:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:18 2026 GMT
Not After : May 21 06:58:18 2027 GMT
Subject: CN=581293CB54C6D7E9B66CF46464AD4F63D68E5ED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:f4:4e:83:f0:7f:80:94:4d:e0:54:d4:87:
92:e6:c7:12:65:56:13:64:83:42:e3:e5:57:64:3d:
8b:0e:6e:ba:78:99:dc:1d:33:a4:e1:d3:0d:2c:79:
66:69:3a:ff:3b:d3:56:d8:a7:a9:77:b4:05:e5:b2:
c6:32:8c:57:24:fe:ca:25:8b:8b:70:a1:e5:97:2d:
f7:60:89:d8:81:a1:f7:fb:4c:aa:b4:2d:67:8f:d4:
15:e1:f1:f6:3f:cb:96:a0:5a:9a:81:4e:f5:6a:8f:
91:83:f1:70:c1:ac:cb:1c:ab:e9:ad:55:21:e0:00:
6a:b5:87:09:8b:a1:ea:99:e2:1e:16:5d:37:9c:2e:
8c:ad:6e:67:13:4a:fa:7f:7b:8a:8e:de:f5:a9:71:
6f:22:06:5a:c6:36:fe:c0:2b:49:60:a5:ea:d8:43:
fa:52:ca:9f:65:69:16:df:2a:f8:ef:97:3a:72:4d:
14:85:d7:74:99:5d:61:c7:ca:1f:8f:f4:2c:65:d0:
72:db:a6:56:c8:4e:96:4e:02:f9:b4:e6:4d:c5:33:
2a:33:34:05:fb:ba:f7:ce:e5:4d:85:54:15:85:46:
17:29:f0:68:3a:ce:69:f9:f7:9d:b7:7a:44:ed:9d:
c9:23:3d:35:d6:a1:ea:1a:0e:71:fc:01:8a:6a:d3:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:12:93:CB:54:C6:D7:E9:B6:6C:F4:64:64:AD:4F:63:D6:8E:5E:D7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143442.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a318::/32
Signature Algorithm: sha256WithRSAEncryption
45:55:ab:e0:5c:84:71:10:17:47:0e:91:cf:6e:42:b9:58:2a:
89:f5:15:6a:9a:7d:13:c1:41:b8:4d:48:2e:24:92:79:89:39:
d9:f6:80:b2:0f:2a:6e:a9:d2:e9:e2:62:b3:2b:db:d4:b7:9e:
11:b4:6c:17:11:70:0f:45:69:0b:15:fa:95:a5:86:57:23:d4:
c3:51:d6:23:dc:a5:d1:3d:64:88:9b:be:41:8b:e1:57:34:62:
6d:34:5f:a1:4a:a7:0e:c5:6e:0c:48:f1:e1:5a:2c:f4:3d:f3:
b5:5a:9b:7d:09:6d:a5:38:fb:8d:af:cd:67:69:41:d9:ea:2b:
03:3d:b7:52:1f:da:a8:e5:4a:88:f0:10:25:be:13:4a:3d:ed:
37:bb:5a:e1:aa:59:b1:94:88:df:08:96:a7:95:ea:93:be:37:
a5:d7:26:c8:29:a8:ad:e9:a2:d7:25:94:e7:fd:54:c0:cf:b5:
1c:7b:0d:64:e8:77:3d:aa:24:38:a7:4e:b0:49:a6:0a:2d:ae:
10:c8:0c:e1:c1:5d:d4:e6:e4:5c:f8:b4:93:86:61:1b:0f:95:
ec:f7:91:4c:bb:30:2c:a4:e0:fb:32:bd:a6:95:b0:c6:26:46:
dc:75:fc:93:7b:01:5f:f1:a6:c3:94:1c:8b:33:d9:6e:a1:81:
9a:d0:a2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:27 2026 by rpki-client