Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143461.roa
File: AS143461.roa (raw, json)
Hash identifier: CuI0CeyM3GNAAmM47WJagd6CwS4MhR7h/mU08+mOISk=
Subject key identifier: 70:A1:00:61:B4:67:AF:1F:1B:94:77:78:8F:C1:87:03:80:01:D3:DA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 629B0970CFD0C783A28392BB0D1F3965FE5E52AF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143461.roa
Signing time: Fri 22 May 2026 07:32:24 +0000
ROA not before: Fri 22 May 2026 07:27:24 +0000
ROA not after: Fri 21 May 2027 07:32:24 +0000
asID: 143461
IP address blocks: 240a:a32b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:9b:09:70:cf:d0:c7:83:a2:83:92:bb:0d:1f:39:65:fe:5e:52:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:24 2026 GMT
Not After : May 21 07:32:24 2027 GMT
Subject: CN=70A10061B467AF1F1B9477788FC187038001D3DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:40:f0:9e:55:43:cd:46:3e:81:99:33:86:
77:71:2b:78:4a:4f:e9:5c:b7:76:86:bc:fd:7b:9f:
1a:48:b5:d8:dc:ef:b1:4c:4c:9a:05:35:80:c1:1a:
ad:16:d0:e9:46:80:b1:e7:d0:2a:7d:c1:ae:50:ba:
9e:85:3b:9f:19:0a:cf:97:54:2d:53:ba:33:a2:e4:
29:b3:05:49:95:f1:b2:22:ef:09:33:40:85:40:cb:
9b:b0:d2:51:81:f9:8c:f6:57:a8:04:10:0a:5f:d4:
dc:a1:74:6b:e1:cf:31:a8:fa:09:a6:48:ae:12:52:
ca:71:5b:65:53:8b:b5:5a:5c:9e:e8:ef:7d:25:27:
6a:9c:49:9f:07:72:47:a6:27:d3:c9:28:dc:1d:02:
eb:59:71:f9:25:32:c9:bc:c5:e8:07:4c:c3:ef:bc:
ff:60:ff:16:c1:f6:0f:b4:43:ce:af:d6:9c:3e:b6:
85:96:ad:30:65:8b:4d:ac:00:6d:4b:6c:2a:12:31:
df:cb:8b:4f:0b:e5:c9:73:be:49:77:73:16:21:dc:
46:9d:9d:0c:b9:b8:d7:96:b1:e8:d4:91:66:74:0f:
98:a6:d3:76:04:cb:c6:9e:8c:42:c9:17:40:5a:07:
84:68:5d:36:a2:db:23:7d:10:0e:9d:ef:90:cf:4a:
6b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A1:00:61:B4:67:AF:1F:1B:94:77:78:8F:C1:87:03:80:01:D3:DA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143461.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a32b::/32
Signature Algorithm: sha256WithRSAEncryption
94:4f:dc:ce:f2:84:ad:76:a7:80:39:e9:27:05:5f:95:1f:8b:
40:8c:e9:79:c3:79:ea:03:d8:ca:a2:1a:3a:4b:9a:ee:42:61:
6f:f4:47:94:ef:b2:77:e0:67:40:34:8b:5f:98:7e:30:7e:32:
8c:78:56:19:fc:c0:f7:80:5b:cc:d0:a9:34:40:32:3f:d4:85:
69:2a:36:be:29:67:0c:a0:78:93:1a:30:e3:31:9e:5c:42:71:
cc:a2:d2:b4:e8:2a:58:56:c4:d7:26:51:92:a1:07:f4:f1:77:
f8:12:10:6c:e7:8b:46:bb:9a:05:12:67:8b:63:e1:d7:92:de:
c5:ed:db:67:52:44:bb:7b:c2:72:4e:77:f7:9d:2f:5c:bd:e5:
3f:9a:e7:8e:53:d6:4e:a2:2d:13:cd:41:f7:aa:73:cc:00:92:
23:f5:ff:f6:2e:b5:8b:42:99:f3:ab:b7:35:68:b3:a8:f2:56:
2e:26:50:df:06:12:f3:9b:7e:aa:c3:93:15:58:66:06:37:10:
64:b8:cc:6b:8a:3e:07:29:fc:48:14:cf:91:6b:de:ad:04:d0:
19:76:75:3d:31:f8:81:87:4a:13:23:0e:79:e6:cc:96:aa:2b:
e6:be:e5:65:58:f6:4a:9d:49:71:52:7c:2a:da:f1:29:3f:7b:
fe:39:5f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:18 2026 by rpki-client