Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143453.roa
File: AS143453.roa (raw, json)
Hash identifier: evAr9/mXF7UykTP59AyzUHEhGuoPdcEbm2PMFgkZL68=
Subject key identifier: D5:0A:31:C5:86:66:B5:29:15:BC:64:B0:CF:AB:F6:F4:1E:2B:3D:75
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7B4B85C192295EF1AE208BE5A628F3491A778D4E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143453.roa
Signing time: Mon 25 May 2026 01:20:30 +0000
ROA not before: Mon 25 May 2026 01:15:30 +0000
ROA not after: Mon 24 May 2027 01:20:30 +0000
asID: 143453
IP address blocks: 240a:a323::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:4b:85:c1:92:29:5e:f1:ae:20:8b:e5:a6:28:f3:49:1a:77:8d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:30 2026 GMT
Not After : May 24 01:20:30 2027 GMT
Subject: CN=D50A31C58666B52915BC64B0CFABF6F41E2B3D75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:94:35:f9:17:77:9b:65:0a:51:df:dc:8b:
25:77:6a:a3:17:63:e7:3b:58:33:55:08:2e:92:1f:
00:7e:8e:52:9e:e2:ad:5b:23:57:70:0e:b2:25:23:
49:d7:66:26:68:d2:55:bc:81:8a:e4:f5:d5:c0:3b:
65:f2:6f:d0:94:67:14:63:aa:68:83:8c:55:67:db:
77:1f:d2:37:15:a5:5b:26:ca:7b:6a:34:30:c2:23:
66:95:1e:3f:42:5f:53:b0:5b:4f:8a:26:bc:4e:d7:
90:e5:98:84:4e:ae:1a:8c:34:e5:0b:9e:20:f6:f6:
86:8d:79:d6:5b:78:0e:2a:59:63:60:9b:fb:df:74:
06:22:b3:1c:88:ce:91:d5:64:f6:65:09:1a:b8:b7:
04:6d:aa:03:3b:92:b6:ca:1e:a6:b2:49:7c:e6:3c:
fa:49:b2:f4:e1:19:a9:2f:58:d4:54:df:10:57:90:
f4:7c:7c:85:b4:96:02:bf:48:a5:71:5a:47:7b:85:
63:30:5d:c7:09:b2:e9:37:2d:ef:72:7e:65:f7:aa:
a4:54:b8:52:6d:11:dc:9b:36:cb:a0:1b:07:ed:cc:
7b:4f:8a:e5:3f:20:f7:6f:1a:90:94:6c:fa:e3:13:
da:f4:ed:5b:ac:91:13:7d:cd:34:27:80:6c:60:2a:
6f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0A:31:C5:86:66:B5:29:15:BC:64:B0:CF:AB:F6:F4:1E:2B:3D:75
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143453.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a323::/32
Signature Algorithm: sha256WithRSAEncryption
84:77:25:8c:d3:e4:ef:44:4a:27:19:78:c4:fc:ba:c3:39:3d:
6f:8a:46:78:13:28:9f:c3:02:a8:77:05:44:1d:1f:8d:87:32:
cc:08:fa:2e:23:ad:a7:aa:ba:0f:74:98:09:79:18:c1:8c:d4:
7a:9a:e1:8e:e0:f5:55:9b:f4:69:11:85:03:08:04:55:ba:0e:
ab:ec:47:a7:dd:89:bd:e9:63:bb:f9:be:f7:56:56:39:e6:2e:
98:99:06:29:1b:9e:0e:ad:a0:ed:d3:11:65:81:ea:10:7f:f7:
b5:4a:d9:c7:c0:1b:5a:78:f3:ca:70:41:56:a1:44:22:8b:88:
86:ac:b0:63:f9:fd:72:d9:90:57:88:1a:d3:89:12:b4:91:df:
e2:19:4c:b7:86:b0:01:8a:3c:37:fc:1d:b3:c4:f9:e9:39:ae:
3d:78:9f:a4:6a:38:e8:de:92:e2:0e:ab:70:dc:15:22:73:b9:
e9:8f:23:7b:06:45:51:51:a3:a2:d8:08:07:77:aa:63:9a:0c:
de:41:32:b2:d8:83:c5:2d:99:41:09:1a:ce:c7:53:0b:01:bc:
9d:52:39:2b:97:6b:b9:d7:0a:f7:03:f0:84:98:3a:e3:51:67:
c2:94:80:e4:4b:e4:d3:3e:c9:3e:01:a4:9a:c9:ed:a0:e9:e8:
bd:b4:ee:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:13 2026 by rpki-client