Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143479.roa
File: AS143479.roa (raw, json)
Hash identifier: a3FlFd4f1TGjIape21PoXHIU1iEYrEdN4rLW6GKs8j8=
Subject key identifier: 1A:CC:86:EA:F8:78:0D:05:A9:84:0C:B7:CD:F4:B6:83:F0:E9:F7:98
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7A49BB76F6333915443C8BBD952A9F9833B6645A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143479.roa
Signing time: Mon 25 May 2026 01:19:57 +0000
ROA not before: Mon 25 May 2026 01:14:57 +0000
ROA not after: Mon 24 May 2027 01:19:57 +0000
asID: 143479
IP address blocks: 240a:a33d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:49:bb:76:f6:33:39:15:44:3c:8b:bd:95:2a:9f:98:33:b6:64:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:57 2026 GMT
Not After : May 24 01:19:57 2027 GMT
Subject: CN=1ACC86EAF8780D05A9840CB7CDF4B683F0E9F798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:a8:64:8d:b1:cd:36:73:23:53:23:d6:dd:
d0:d1:a8:c9:35:fd:b7:73:aa:40:4d:ca:82:f4:2a:
03:63:59:7f:53:c0:d8:ca:3b:60:77:3d:f9:42:83:
7b:6a:27:d5:ab:81:b6:24:4d:01:c3:30:50:18:e3:
b5:78:52:ff:37:65:7d:c5:4e:05:39:1c:48:03:46:
11:1e:51:a0:a1:5f:f1:20:4b:bc:f7:86:f8:03:a2:
03:5e:08:24:8f:c6:c1:c2:ce:7e:fc:98:95:2d:67:
ae:ba:fb:74:28:f1:6d:04:c5:0e:a4:14:59:b9:3c:
48:04:9e:50:3f:10:e9:5f:4c:6d:a6:cb:7f:61:0e:
91:c5:1b:0d:09:95:f1:35:27:0d:b3:11:ce:fb:de:
7f:65:21:59:4f:4c:09:17:55:55:9b:67:2e:74:bb:
44:48:aa:b3:1b:cf:8f:64:8a:e9:19:71:b5:c2:8c:
2a:29:1a:8c:bf:85:89:28:f0:dd:1e:df:7c:39:7b:
6d:10:ac:cc:20:51:7d:3d:94:e3:85:61:60:e6:2e:
6a:98:90:59:1c:a9:37:cf:7d:08:ba:cf:87:a2:78:
26:5f:43:4e:8c:83:3b:b9:c8:f7:72:ee:7d:1a:01:
d2:61:66:dc:74:f3:bc:45:af:10:97:df:a1:eb:f0:
75:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CC:86:EA:F8:78:0D:05:A9:84:0C:B7:CD:F4:B6:83:F0:E9:F7:98
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143479.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a33d::/32
Signature Algorithm: sha256WithRSAEncryption
1e:75:96:99:be:9f:7c:ad:6e:73:68:79:43:eb:d6:60:24:95:
63:64:1e:51:f4:02:27:4b:9b:2b:87:2b:e1:9b:31:41:68:0d:
a1:ae:c6:35:aa:10:2a:ea:99:fe:8e:93:58:29:6f:29:d3:30:
a4:87:41:81:c7:d8:67:d5:f1:c2:ec:8c:4a:20:58:d5:67:75:
98:16:82:e7:e7:71:25:4d:c0:60:46:c8:fd:d5:c4:e9:27:bd:
a2:0f:6f:e1:f4:c3:53:4b:97:84:4a:b1:ce:cf:34:77:d2:7d:
84:a2:71:ac:a9:ae:0e:48:11:ba:56:8e:f7:fd:d0:a6:34:b8:
28:82:26:cc:15:0c:ea:cd:0b:0e:53:6c:64:dc:64:5c:03:f2:
73:02:87:75:2e:51:6c:58:d0:a8:97:2b:89:a0:60:1d:62:9f:
9d:50:b1:d9:96:36:17:14:54:26:71:e9:1c:82:e9:9d:98:f9:
84:ac:6f:bd:c2:16:d9:c5:f6:d8:53:23:78:5d:ea:02:26:48:
00:c4:ed:da:75:94:af:0b:eb:08:66:e5:60:53:e3:6b:f4:8d:
04:50:d2:18:32:14:63:55:18:c7:9c:c5:95:78:a4:b1:50:c4:
f9:fd:63:27:8d:32:4c:e4:e9:82:a8:d8:98:2a:47:01:a4:2b:
04:56:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:43 2026 by rpki-client