Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143445.roa
File: AS143445.roa (raw, json)
Hash identifier: CBNl8hIzMhXAmo/m1akbo+3hDqVhOZwNy8l+00WtKkQ=
Subject key identifier: C3:04:67:68:D7:25:98:1D:F1:10:CB:41:46:E5:CB:4A:6D:25:28:DA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2380725C84A746C713F09FF16184354BD9B6F409
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143445.roa
Signing time: Fri 22 May 2026 04:08:32 +0000
ROA not before: Fri 22 May 2026 04:03:32 +0000
ROA not after: Fri 21 May 2027 04:08:32 +0000
asID: 143445
IP address blocks: 240a:a31b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:80:72:5c:84:a7:46:c7:13:f0:9f:f1:61:84:35:4b:d9:b6:f4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:32 2026 GMT
Not After : May 21 04:08:32 2027 GMT
Subject: CN=C3046768D725981DF110CB4146E5CB4A6D2528DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:bc:fc:e5:0e:68:b9:32:5c:66:a0:ab:3c:
d6:ff:d2:68:55:32:a2:85:05:da:f0:ec:92:63:b3:
19:69:e4:96:b5:ea:03:16:de:20:37:67:a5:a0:9f:
01:8a:b8:30:4f:f7:34:67:aa:52:7a:41:eb:f2:ac:
57:2e:06:7f:33:24:e2:ed:d2:eb:57:bc:13:d6:32:
65:38:d5:c9:44:7b:89:6d:ef:39:d6:20:b1:8d:ed:
f6:a4:37:85:f6:bb:65:96:5c:4f:04:cd:50:29:f9:
af:2c:ea:d6:0f:55:54:14:50:ce:e1:59:17:aa:1e:
ae:6e:9f:f6:75:0e:cd:c7:ab:85:e9:e3:4e:8b:14:
72:9e:f4:79:fd:ee:43:45:cc:6e:ea:dd:c8:79:11:
2a:be:96:0e:01:3a:66:b1:dc:77:aa:c5:f2:5e:03:
f1:56:01:83:51:66:69:ea:10:03:02:0d:7b:3d:71:
3e:51:4c:9b:b0:08:da:c3:91:75:fe:9a:61:5d:bb:
6f:ea:53:cc:16:78:10:38:5c:0f:30:2d:18:51:c2:
65:5c:80:39:4f:55:5c:b9:31:99:46:d9:29:fb:b6:
53:8a:cb:04:6f:dc:61:43:04:6e:a2:6e:83:81:73:
17:99:f8:6a:2f:36:5a:bb:77:ca:50:51:1f:e2:58:
9b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:04:67:68:D7:25:98:1D:F1:10:CB:41:46:E5:CB:4A:6D:25:28:DA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a31b::/32
Signature Algorithm: sha256WithRSAEncryption
11:2f:9a:1e:b5:0a:e7:dc:83:21:85:75:3f:a6:f7:77:4a:de:
3b:7b:17:97:9b:7a:c5:27:5a:67:3a:ea:a0:59:49:c6:93:4e:
86:96:38:e6:8a:65:c9:ca:28:ea:d6:3f:63:ca:bc:38:2f:90:
70:04:35:5a:30:62:a8:d7:75:d8:1f:2f:f8:d8:d9:cf:f2:48:
87:da:24:d0:bb:0c:52:7f:87:cf:76:4e:53:22:9a:c6:9f:0e:
87:e8:e2:e7:f6:48:aa:10:ca:c0:9d:8f:0a:f1:e2:4a:4a:af:
31:27:45:44:70:a2:1b:bf:cf:8c:9c:77:fe:88:33:02:d4:ac:
35:bf:9a:a4:e4:e3:80:81:ea:77:24:ec:98:f6:d1:92:f3:11:
fd:46:b2:f2:b6:2c:5b:fd:e8:75:58:e1:0e:ce:e5:f4:a5:e5:
a8:e8:3f:17:04:a2:a9:cd:85:42:98:07:72:6e:0d:00:28:d1:
45:2e:cc:49:b7:35:c4:dc:b9:d5:3c:b9:ae:ab:5c:06:45:9f:
2b:ef:4f:7e:97:b9:fc:61:49:9e:71:85:3c:05:b3:e7:dd:ee:
3e:fc:26:67:39:11:f1:8b:34:a5:26:81:14:ae:c7:5b:a8:ed:
c6:41:d7:10:ff:da:ee:11:95:b7:cd:55:35:82:13:37:2e:21:
90:ea:f1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:33 2026 by rpki-client