Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143473.roa
File: AS143473.roa (raw, json)
Hash identifier: 2YdrfnQKevxrdqoAx23nT9Pdknl5N3tG7iQF7bhARUc=
Subject key identifier: 31:70:85:8B:63:81:FC:73:07:60:14:8C:BC:B4:45:75:0E:19:0C:A6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4AB38C773B90C8259FEE83A9C20F676D295883C9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143473.roa
Signing time: Fri 22 May 2026 06:05:11 +0000
ROA not before: Fri 22 May 2026 06:00:11 +0000
ROA not after: Fri 21 May 2027 06:05:11 +0000
asID: 143473
IP address blocks: 240a:a337::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b3:8c:77:3b:90:c8:25:9f:ee:83:a9:c2:0f:67:6d:29:58:83:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:11 2026 GMT
Not After : May 21 06:05:11 2027 GMT
Subject: CN=3170858B6381FC730760148CBCB445750E190CA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:97:54:21:b2:f1:64:0f:34:23:30:eb:a8:
c1:99:2f:e8:bb:01:38:7a:29:0c:9e:ce:d7:c1:7e:
cb:4d:93:5e:80:59:71:77:00:a0:3e:12:cb:3a:3f:
eb:ae:4f:2f:02:4f:b0:af:92:7b:fc:58:a9:84:db:
32:05:66:3e:72:04:f6:2c:a9:6d:c7:17:2c:f7:40:
63:02:96:77:66:6e:14:cd:62:73:4e:e2:a9:1c:10:
76:1e:45:2b:c8:a6:15:2c:68:7f:79:09:c5:01:c9:
92:e6:ec:0b:35:de:10:8f:b4:6a:d2:d3:41:07:8e:
7b:a3:73:c9:22:bc:ac:c3:65:a7:ab:0c:7e:1c:d3:
c4:f9:bc:e3:dc:d9:40:fa:39:63:03:d0:55:8b:23:
62:67:50:7d:a5:81:df:5c:7c:80:bd:4c:dd:7b:a1:
19:6b:f0:f6:6e:d8:4d:01:b2:ea:f6:1c:d1:65:71:
02:48:25:70:d7:c7:22:17:b9:67:e0:ed:15:8a:b9:
a9:03:c0:03:a4:a4:8a:18:c2:c9:26:22:6c:2f:51:
b5:ee:16:c4:f6:ab:88:6d:13:b9:bc:62:22:d8:d6:
7c:74:68:c9:aa:b1:78:6d:be:6a:aa:6e:8f:7e:10:
59:fb:48:be:b4:3c:90:48:bf:7f:ee:b0:3a:4e:d6:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:70:85:8B:63:81:FC:73:07:60:14:8C:BC:B4:45:75:0E:19:0C:A6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a337::/32
Signature Algorithm: sha256WithRSAEncryption
80:fe:2b:0f:9d:69:54:7c:bb:0c:6f:cf:ab:12:03:cd:32:30:
7b:2d:ae:53:8c:41:36:42:e6:f8:a6:ac:fd:f8:17:4d:c6:e3:
84:33:a8:88:d3:6d:bd:65:fe:e8:2e:dc:c9:bd:91:06:70:7a:
e7:e1:33:55:c5:7b:ad:f5:5b:b7:ee:c0:53:bc:7e:51:46:bc:
e1:66:65:94:19:3a:8f:a8:7f:c9:d5:6a:23:bc:f1:c5:05:8e:
0c:35:20:0a:f4:26:87:a7:61:64:af:a1:d1:45:6c:bd:a6:05:
00:94:be:25:e1:26:75:26:eb:a4:c1:8e:68:0a:20:13:1c:df:
d9:f0:90:f9:80:c4:69:dc:e4:38:f6:7d:86:8c:69:a3:ab:09:
2a:66:7d:05:0f:00:7d:42:2b:37:83:f9:02:cf:2a:36:a2:70:
c2:6f:ea:c2:04:00:e7:b4:c2:10:4a:fa:14:ba:e7:bf:19:1f:
c0:9c:36:8f:f9:97:ed:d8:2c:26:98:1a:7c:bc:47:30:fa:12:
78:2d:d2:13:a5:47:c7:63:67:b7:40:0f:6f:c0:71:e1:57:b9:
77:92:5c:a7:0f:25:f4:b0:82:69:ff:ca:d6:f5:f2:53:47:d8:
70:d5:04:f5:bc:85:1a:8d:c9:62:b9:ca:80:cd:95:7c:c0:01:
86:78:cf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:42 2026 by rpki-client