Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143452.roa
File: AS143452.roa (raw, json)
Hash identifier: 9yt4XnmgdZjTjU+TsBuGU1a8RZ12SH3sxwBHOfLRgng=
Subject key identifier: F2:5A:17:F0:BF:8C:EE:57:72:B2:21:55:05:8D:3F:AC:D2:CA:BB:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 183257FE590B2B75FCF33E84B83EE1A381DE9E75
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143452.roa
Signing time: Fri 22 May 2026 06:58:33 +0000
ROA not before: Fri 22 May 2026 06:53:33 +0000
ROA not after: Fri 21 May 2027 06:58:33 +0000
asID: 143452
IP address blocks: 240a:a322::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:32:57:fe:59:0b:2b:75:fc:f3:3e:84:b8:3e:e1:a3:81:de:9e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:33 2026 GMT
Not After : May 21 06:58:33 2027 GMT
Subject: CN=F25A17F0BF8CEE5772B22155058D3FACD2CABB70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:08:9a:93:c2:54:55:fb:20:34:82:1b:32:
68:fc:3a:6c:3a:41:6a:d2:44:26:74:a5:b9:c4:7d:
08:6f:47:e1:73:56:1f:cb:95:38:23:3b:ac:49:49:
4a:65:79:f6:ec:72:27:dd:d2:96:5d:2c:ab:6c:af:
08:e2:b8:c9:27:c9:aa:df:10:73:6f:4f:2b:5e:7b:
fb:cf:c2:11:f7:c1:2e:83:c3:af:4c:7e:ff:96:cf:
9e:c9:f0:3a:46:06:1f:62:2a:c7:83:e6:82:63:47:
82:63:78:63:a0:bd:3d:86:59:a1:50:58:2a:d3:88:
5a:3b:ec:44:36:c2:92:94:8a:88:79:f2:8e:f8:5e:
98:03:b9:65:e6:70:4b:4e:0e:0f:0c:5a:bd:8c:ba:
03:8c:5b:33:59:a8:5c:e9:d9:7f:4b:48:53:ba:b1:
69:18:f6:86:95:a6:96:c9:3d:cc:7e:31:05:f0:da:
f6:b0:34:ee:47:af:85:cb:dd:84:28:8d:62:93:db:
c8:fe:f0:21:3b:97:ca:24:82:4d:b0:c0:0c:76:1a:
78:af:db:5a:f0:e3:29:be:5a:c3:1f:c9:85:fa:e3:
bd:f5:0a:eb:84:29:c7:e2:69:97:78:c6:1c:e6:d2:
9a:59:2e:8c:2a:67:2b:77:2f:bf:ff:4b:ac:b2:e3:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5A:17:F0:BF:8C:EE:57:72:B2:21:55:05:8D:3F:AC:D2:CA:BB:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143452.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a322::/32
Signature Algorithm: sha256WithRSAEncryption
0c:fd:ad:8c:8c:44:ba:e0:a6:a6:64:d7:00:d0:a4:aa:7b:0e:
c4:c2:41:f3:83:d3:13:67:08:cb:be:a2:a4:2b:c4:74:dc:a9:
84:a2:52:01:af:bb:fe:83:5e:a6:2d:4d:0f:72:e5:b2:57:8a:
3d:ec:00:45:42:28:c4:b5:c8:c2:3b:b0:b2:82:62:fe:e7:98:
16:ae:f5:07:37:33:2d:e0:41:76:0d:4f:a7:86:bb:e9:19:8f:
75:49:13:00:84:c5:91:ba:04:65:80:87:69:28:6b:9a:3c:c1:
68:3a:8e:0c:c2:62:02:5c:4d:da:dd:1c:80:68:e2:04:c7:bf:
15:4c:e0:b7:da:61:55:8b:00:91:a9:65:5e:dc:ca:bc:b1:57:
ed:0a:d8:88:c2:54:7e:48:ba:0b:83:bc:70:36:84:2f:fb:43:
14:7e:4f:66:ed:57:aa:0d:fe:58:57:66:01:c4:c4:79:98:71:
05:65:16:fe:0e:6f:5d:de:ee:1e:9a:b1:c8:c2:93:7f:50:88:
31:46:1f:8f:8e:48:6f:50:92:96:be:25:2d:81:e6:8d:ea:32:
b7:6c:ae:fe:3d:22:3d:f1:ea:2a:ae:34:10:e8:33:fc:60:1b:
94:59:30:ad:a3:80:e6:48:4f:67:8b:06:62:8c:17:6c:49:0d:
c9:96:f6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:48 2026 by rpki-client