Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143459.roa
File: AS143459.roa (raw, json)
Hash identifier: VnG/m0lthO206+FNQhPU90RoD1CX3eb1sGFHtQCe6Zc=
Subject key identifier: 9D:43:66:D4:47:34:2F:72:FC:46:48:1A:D6:53:64:B3:8F:C0:64:F0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 772D081D3019AE760FE18758D8970FCDC73C71D0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143459.roa
Signing time: Fri 22 May 2026 04:08:16 +0000
ROA not before: Fri 22 May 2026 04:03:16 +0000
ROA not after: Fri 21 May 2027 04:08:16 +0000
asID: 143459
IP address blocks: 240a:a329::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:2d:08:1d:30:19:ae:76:0f:e1:87:58:d8:97:0f:cd:c7:3c:71:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:16 2026 GMT
Not After : May 21 04:08:16 2027 GMT
Subject: CN=9D4366D447342F72FC46481AD65364B38FC064F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:ee:66:c0:48:dc:4c:da:33:64:ab:ea:87:
12:84:ae:2e:b6:4c:c7:0f:f4:ee:e7:fd:5c:a0:3b:
a0:62:c0:eb:a6:9e:61:07:8f:4c:a6:c2:64:4c:48:
21:3e:d3:bc:b5:f5:f8:52:de:f7:ec:19:c8:a6:0b:
20:15:49:57:eb:5f:e6:4b:4d:ad:03:89:51:1a:09:
2c:1c:6d:68:3c:e0:d5:d9:86:c9:f6:b3:fd:cc:82:
86:4a:d7:4f:65:ee:a8:28:79:27:4e:03:99:a0:45:
0e:8b:c3:90:29:44:b2:69:ca:ae:63:6b:8d:68:5b:
61:b2:d1:b7:94:73:af:24:4d:d3:29:95:34:1c:ff:
1b:3d:56:3a:46:f3:8f:1e:04:e9:a7:8f:a6:78:66:
9d:13:82:03:dd:9a:de:61:af:dd:36:23:3e:b7:aa:
f7:e8:f4:7b:b7:e5:52:be:75:74:e9:1d:c3:2b:c4:
a4:2b:8e:01:3b:88:37:ef:14:b1:74:de:96:ff:fa:
45:ba:8e:a2:a3:4f:28:4d:85:b7:bb:f9:1a:9a:32:
bd:e4:d1:84:24:0d:b9:be:63:f5:26:91:09:ab:be:
84:0c:6d:12:e8:95:ba:d0:4c:a5:14:d8:c5:d0:58:
bd:e1:56:c4:66:f6:db:80:98:c2:b5:52:43:1a:d5:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:43:66:D4:47:34:2F:72:FC:46:48:1A:D6:53:64:B3:8F:C0:64:F0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a329::/32
Signature Algorithm: sha256WithRSAEncryption
5a:c8:06:4c:b2:9d:ae:d4:34:c3:10:42:a8:db:63:b7:b9:d5:
9a:45:20:df:2c:5e:e3:0b:17:df:db:a4:cf:67:a1:73:a1:31:
dd:b6:83:ae:26:67:f3:d6:24:85:f4:40:96:40:21:81:da:c4:
9b:ce:c6:46:71:9f:3b:e1:40:9f:c6:4c:3e:88:f2:f5:48:05:
9d:59:00:c2:fb:9f:69:cc:56:1e:88:7d:2f:79:48:fa:cb:bf:
9b:80:a3:b8:ff:67:72:63:5c:56:f3:bd:ee:65:52:d8:14:81:
af:4a:6f:de:b5:be:49:45:a5:8d:e8:b0:ff:7e:12:0f:2d:a4:
1a:62:0b:4f:b4:75:d7:91:e5:7e:22:d0:bf:ef:a2:8d:0e:13:
3e:e6:16:7e:d5:bf:d6:be:41:0c:6e:b3:fb:5c:ee:ca:fe:7c:
bc:12:d0:df:72:9f:7e:8f:27:7d:82:b6:eb:50:7a:fc:98:d5:
8a:f2:ac:18:99:7c:65:78:82:d2:41:d8:0c:21:6d:11:22:b9:
5c:9a:78:ab:b3:6b:c3:cc:f8:82:f5:e4:ff:bd:9d:bb:6b:57:
69:68:8d:9f:e7:04:7a:a8:f5:1d:a9:cd:bf:fb:50:77:fa:57:
f0:4b:00:c0:46:ad:01:b0:fa:c2:a2:51:32:70:fb:25:56:b5:
86:09:b2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:40 2026 by rpki-client