Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143472.roa
File: AS143472.roa (raw, json)
Hash identifier: /ci0LwgXaYMix8rWJxX8zYC4+eorT1s/dNjLIS93UJc=
Subject key identifier: 5B:FB:43:43:37:72:7D:B9:CC:B4:10:AF:6E:72:74:2C:42:CE:37:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 425064F8CD41DBEA9797A0296E1B86E711AE33A0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143472.roa
Signing time: Fri 22 May 2026 01:50:30 +0000
ROA not before: Fri 22 May 2026 01:45:30 +0000
ROA not after: Fri 21 May 2027 01:50:30 +0000
asID: 143472
IP address blocks: 240a:a336::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:50:64:f8:cd:41:db:ea:97:97:a0:29:6e:1b:86:e7:11:ae:33:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:30 2026 GMT
Not After : May 21 01:50:30 2027 GMT
Subject: CN=5BFB434337727DB9CCB410AF6E72742C42CE378B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:d2:42:ee:68:01:8e:8d:c0:9b:1f:91:5c:
c6:95:65:56:03:07:e7:17:cb:f1:85:4e:95:0c:c5:
a9:6e:09:c0:81:74:dc:f0:5c:99:b9:7f:1d:ac:7e:
4b:64:bc:a1:8f:f4:95:db:09:cb:ba:e3:77:1f:4d:
1e:87:1a:11:eb:54:cc:2d:39:63:63:e7:9c:db:84:
f6:96:14:cd:41:bd:81:54:ec:19:9e:c8:29:5e:e2:
26:1b:a5:65:ec:cd:a3:b1:1d:e6:02:d8:b0:1e:cc:
68:e1:63:9b:2d:9a:09:91:26:08:23:af:89:cc:ff:
12:45:81:1f:74:79:2b:fc:97:8d:58:89:b4:43:cc:
4c:75:10:94:e9:5a:ff:e0:2f:98:94:82:6f:90:27:
ab:f4:03:21:b0:d0:a6:ac:a5:63:ba:df:78:41:76:
60:ac:19:d4:26:73:bc:4d:51:61:ac:84:07:f3:af:
d7:f2:ef:db:67:29:53:47:b6:bc:d9:22:69:5e:1b:
13:63:6d:21:bf:83:d1:63:89:8a:70:8f:02:3b:2d:
38:32:7c:4c:98:53:c5:ca:1e:fd:a6:2e:9f:6e:a2:
7d:05:62:4a:df:26:79:b4:3c:18:f7:8c:81:77:af:
29:b3:99:1f:1d:c5:ec:bd:d3:a7:51:fb:5f:8b:41:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FB:43:43:37:72:7D:B9:CC:B4:10:AF:6E:72:74:2C:42:CE:37:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143472.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a336::/32
Signature Algorithm: sha256WithRSAEncryption
1c:4f:f9:48:ea:2d:37:dc:76:89:5f:0b:43:11:79:e3:56:75:
5c:26:ec:84:4a:9a:27:24:14:a7:e7:03:d7:eb:6d:47:6d:71:
64:9e:91:e7:d9:93:d0:0f:f3:23:9d:c7:a3:73:da:d1:80:f5:
34:6d:23:7c:29:ff:be:9f:63:fc:3f:ca:62:8c:ae:cd:07:65:
74:ee:89:2c:c6:6e:82:c5:2e:ef:39:2c:56:f5:1d:81:4b:45:
37:79:b3:b5:63:66:3e:2f:ee:7c:bd:98:65:4f:ad:d7:7b:0d:
46:7f:f9:89:2c:6c:aa:c6:90:55:b8:af:95:89:e4:cb:a9:f4:
89:ed:2e:12:7c:18:b5:a4:96:59:86:e0:45:04:5b:5d:ba:9a:
b8:18:98:45:bd:64:c7:93:bf:c8:5d:e1:09:bc:aa:82:ad:17:
7e:8e:69:a4:3c:ad:3b:06:6c:ce:6a:05:99:f0:c9:8e:57:ad:
02:5d:8d:fd:f5:4d:03:0e:28:c4:2c:11:58:a5:f8:a6:78:3d:
aa:19:08:e6:2e:df:c4:a1:96:90:75:9b:f5:d3:1f:3b:eb:9c:
67:30:24:80:c6:74:57:f3:c1:df:0c:4c:0c:63:e7:bc:9a:ad:
8d:46:c1:54:7a:d0:4c:6b:a9:6c:a0:af:69:10:c3:92:5f:4a:
b6:44:37:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:51 2026 by rpki-client