Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143448.roa
File: AS143448.roa (raw, json)
Hash identifier: 8wW27rsOrTxsIEAnOGTp3NXt/jPHNA/Y3cpYT9TdLCg=
Subject key identifier: D4:8A:3C:42:C4:1C:56:94:D2:82:E3:29:4C:A7:4A:92:A6:E5:8C:03
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6115FE315F963627493CAC771371D16C917A263E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143448.roa
Signing time: Fri 22 May 2026 07:32:10 +0000
ROA not before: Fri 22 May 2026 07:27:10 +0000
ROA not after: Fri 21 May 2027 07:32:10 +0000
asID: 143448
IP address blocks: 240a:a31e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:15:fe:31:5f:96:36:27:49:3c:ac:77:13:71:d1:6c:91:7a:26:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:10 2026 GMT
Not After : May 21 07:32:10 2027 GMT
Subject: CN=D48A3C42C41C5694D282E3294CA74A92A6E58C03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:9b:01:15:90:d7:ba:2a:52:22:a9:b5:d4:
d4:b5:2e:bd:6c:bc:04:07:46:c8:8b:6e:1a:a1:52:
93:11:26:85:16:d3:e5:51:3d:04:e9:c7:72:ad:b0:
26:bf:5f:0c:35:4f:b8:92:8f:5b:5a:f2:92:46:2f:
e5:8b:e7:ac:7f:05:40:14:77:ae:6d:e5:a5:c6:18:
7b:9a:43:35:82:84:1f:c9:8e:2b:99:4b:2f:96:fd:
11:01:5a:3f:cf:e8:90:8a:a6:c8:7d:64:e2:f4:c7:
c9:55:e1:6f:22:0e:e4:4a:69:7d:be:d1:3b:91:d2:
00:26:69:52:48:2b:74:70:01:91:a7:f7:1f:33:c5:
24:8d:45:b6:9a:86:dd:8d:0d:dc:c3:e6:ed:ee:f4:
58:20:2a:83:e7:30:e4:aa:2f:84:b2:c1:d6:59:97:
55:d7:3d:1f:5e:c4:4f:25:44:b2:0a:eb:33:f3:a7:
52:18:db:cc:e9:7c:44:e9:78:ca:0c:ea:9c:1b:c4:
93:a9:ec:1c:1e:29:d1:46:d2:a9:7c:d2:50:74:be:
1d:98:fb:32:44:99:4d:5c:06:f1:b9:dd:7b:25:79:
94:6f:f0:aa:47:08:b8:0f:e1:30:2f:6b:5a:fe:b3:
12:14:83:a9:f3:6a:85:80:f5:ac:86:78:3e:c1:bf:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8A:3C:42:C4:1C:56:94:D2:82:E3:29:4C:A7:4A:92:A6:E5:8C:03
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143448.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a31e::/32
Signature Algorithm: sha256WithRSAEncryption
8d:e2:94:7d:10:ef:18:d5:87:8a:94:ae:14:52:2b:da:a9:d2:
fa:72:5a:75:87:66:6b:cc:90:98:75:87:d2:c7:e8:f5:80:19:
f6:ef:0b:76:e6:94:7f:7c:9d:13:79:e9:31:6d:26:01:39:89:
31:7b:4a:d2:15:0a:d1:22:78:65:55:f1:c0:01:41:4f:c6:01:
3e:21:79:79:06:13:65:a6:e8:e3:e8:29:f6:45:59:b3:0e:cb:
02:1f:28:3c:7e:54:46:15:25:25:1c:07:20:8b:d0:dc:95:1e:
0d:93:4a:45:11:05:19:62:a7:7d:55:de:14:12:1b:ba:9f:22:
3f:9a:29:04:be:51:7b:dc:07:59:65:63:96:6f:66:0a:78:23:
5b:23:3c:e9:9c:0b:c4:77:7d:48:cc:71:a6:77:87:46:bf:10:
32:f7:5b:44:8f:54:80:e6:30:9f:56:d6:22:7e:19:d1:15:79:
e2:c0:f1:72:27:79:f2:ab:5f:e6:fb:7b:e2:ee:46:44:ee:74:
24:81:a8:c2:2c:a8:6c:cc:26:70:14:71:1f:a3:9c:5c:0f:ef:
75:bd:8f:18:73:49:dd:a6:56:32:59:91:7e:50:d7:97:4c:b7:
6c:a3:48:65:d3:3c:a2:4d:2b:46:08:76:ff:60:df:01:bf:f1:
d2:87:b6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:17 2026 by rpki-client