Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143444.roa
File: AS143444.roa (raw, json)
Hash identifier: DrZmCT+XGOnPWmBwstmFpNIxr3KNVxs6PBNPKXgl+7E=
Subject key identifier: C0:7D:7A:C7:85:25:6B:91:6B:62:71:55:74:62:1D:0E:BC:88:A8:F2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 26FADC928D16934EBEE8C21E6365B886CE3F70E6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143444.roa
Signing time: Tue 26 May 2026 01:13:17 +0000
ROA not before: Tue 26 May 2026 01:08:17 +0000
ROA not after: Tue 25 May 2027 01:13:17 +0000
asID: 143444
IP address blocks: 240a:a31a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:fa:dc:92:8d:16:93:4e:be:e8:c2:1e:63:65:b8:86:ce:3f:70:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:17 2026 GMT
Not After : May 25 01:13:17 2027 GMT
Subject: CN=C07D7AC785256B916B62715574621D0EBC88A8F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:e9:b6:8d:58:12:6c:ed:ae:62:9a:3b:11:
bf:2f:fd:9e:50:8c:4a:33:a5:3c:1e:fc:e7:30:01:
15:25:cd:c4:a0:86:3f:21:97:ef:27:7e:d8:13:61:
d8:d9:b7:74:81:6a:c6:35:66:04:43:3a:90:01:5f:
da:48:c4:45:51:1a:98:e4:67:18:8c:e0:19:d4:9d:
b8:ca:d1:0b:98:1d:81:41:f1:cd:93:16:6d:b3:dc:
b7:08:fd:ae:80:6d:fe:2c:1d:e0:fe:b6:bf:35:e4:
23:1a:00:c2:79:a4:8c:eb:c5:1d:27:8e:a3:a6:39:
e8:46:b1:28:91:24:da:a3:88:c5:3c:49:f8:51:9c:
2c:bc:ea:d3:1e:a6:ec:b0:d7:e9:26:70:32:2e:2b:
93:da:93:0a:3b:c9:0e:56:51:c2:4f:e3:68:3a:7d:
f5:29:82:37:e4:ef:fb:05:5b:fb:47:cd:94:b2:60:
93:84:98:26:c1:5d:fd:f5:f0:be:11:5e:76:2e:29:
14:c1:57:4d:89:a1:f9:7b:66:4b:44:47:16:41:ba:
f9:ce:c8:1d:67:21:7a:2b:cc:55:b2:ca:b2:74:85:
7d:d7:d5:5f:6f:b7:13:ec:54:26:b3:c2:74:fb:a1:
78:00:79:88:75:c6:7b:58:e1:84:60:9f:c6:f0:11:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7D:7A:C7:85:25:6B:91:6B:62:71:55:74:62:1D:0E:BC:88:A8:F2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143444.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a31a::/32
Signature Algorithm: sha256WithRSAEncryption
4d:ee:47:88:77:ac:96:c1:be:37:f7:53:c4:a9:38:7c:d4:60:
f5:fa:36:ff:72:b1:e6:3c:c7:7c:15:f0:f1:10:40:14:fb:86:
18:46:a3:e6:7e:23:f8:14:78:89:33:c0:c9:a4:df:22:a7:9e:
95:2b:41:a2:a1:34:81:b6:36:96:af:6a:ac:35:fa:f5:a8:71:
5a:d0:69:20:5f:64:ab:a5:db:6f:c5:16:03:bd:2f:9c:16:db:
88:1c:7d:54:68:a6:8d:a7:28:6e:3b:3f:67:15:13:46:b9:f1:
7f:fc:69:2c:16:0a:8f:c8:a3:2b:73:09:8e:77:30:90:5d:5c:
db:01:d7:ed:33:cb:c5:bc:c0:17:59:0d:84:0a:ec:c8:41:e3:
00:f7:d3:18:0f:cd:7b:98:23:60:22:de:b3:61:65:00:79:24:
37:df:7a:f1:86:9b:33:a7:3c:57:64:4c:e3:07:a1:55:22:2c:
c3:6c:81:bd:f7:16:27:15:19:b2:96:0a:20:07:b9:70:28:de:
b4:bd:15:17:75:db:d7:e0:a4:b3:25:cc:0d:49:c3:33:c6:d4:
00:f4:35:45:a3:0d:40:16:d9:11:f6:97:0f:b7:c6:d8:98:e5:
1b:9c:7a:ba:77:9f:5a:39:ff:1f:5a:1c:8e:62:b0:3b:a7:af:
79:d1:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:27 2026 by rpki-client