Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143480.roa
File: AS143480.roa (raw, json)
Hash identifier: Lh27BkIsrMwbhI9HdTM0Jz1wq1ndZ13N+rKhJBC2Cl0=
Subject key identifier: A2:1E:EE:A5:0E:C0:9E:35:C1:F2:B8:57:35:6D:9D:FB:6C:A9:D7:0C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 07902086B4981599749B8703540FB55B7C5F0017
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143480.roa
Signing time: Tue 26 May 2026 08:53:06 +0000
ROA not before: Tue 26 May 2026 08:48:06 +0000
ROA not after: Tue 25 May 2027 08:53:06 +0000
asID: 143480
IP address blocks: 240a:a33e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:90:20:86:b4:98:15:99:74:9b:87:03:54:0f:b5:5b:7c:5f:00:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:06 2026 GMT
Not After : May 25 08:53:06 2027 GMT
Subject: CN=A21EEEA50EC09E35C1F2B857356D9DFB6CA9D70C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:a2:f7:5a:b6:45:f0:70:c9:7c:44:95:67:
39:85:b0:8f:27:6c:2a:29:99:7b:06:63:1a:c2:bf:
23:bc:ab:3e:74:83:eb:a1:72:4f:04:df:98:b7:a9:
fe:32:73:ac:46:89:7c:6b:3b:4e:4a:54:f4:c9:7f:
34:4a:83:a0:6c:4f:72:f0:34:94:23:64:1c:e3:24:
2b:dc:fe:63:4b:b3:9a:ca:c8:6b:d2:86:06:f1:45:
d7:1d:d2:d2:ae:67:fc:ce:9d:4f:4c:0a:5a:36:27:
e6:ac:51:f1:bf:41:8f:0e:68:6c:ae:ba:6c:ac:52:
45:d2:82:ca:7e:74:d0:1c:ec:08:f3:de:fc:be:40:
b8:59:33:fc:a3:e2:51:1b:30:cd:29:22:6c:ac:55:
61:57:4b:41:2a:45:15:f7:20:e0:4e:82:84:6d:06:
03:4e:cd:c5:d9:a3:5c:c9:4d:0b:78:49:d5:16:32:
89:34:81:34:5e:f6:fd:b8:06:83:fd:4d:35:29:9c:
85:6f:be:5c:4c:90:4b:12:5f:e7:34:fe:a2:ab:77:
a2:64:cb:69:50:50:dd:b2:e9:3b:4f:65:24:de:64:
68:b8:28:81:39:e9:98:ca:8d:8f:aa:bc:0a:7e:ee:
70:d3:83:9c:52:c1:f7:3f:a7:16:78:98:96:e1:f1:
2f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1E:EE:A5:0E:C0:9E:35:C1:F2:B8:57:35:6D:9D:FB:6C:A9:D7:0C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143480.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a33e::/32
Signature Algorithm: sha256WithRSAEncryption
3e:70:7c:e2:1d:e9:c4:d1:51:82:13:9f:ba:05:3e:53:69:00:
92:2a:53:58:15:6d:40:b8:29:5b:6a:f1:65:05:e4:2c:a7:82:
67:d9:c5:d6:a2:16:ac:b2:d3:06:a6:80:0b:cf:5b:2c:e7:a7:
76:cd:f5:16:86:cc:6e:ff:aa:51:18:ce:c3:25:33:62:30:81:
45:88:52:ce:9a:0b:10:33:ea:2e:bb:20:2c:e5:c8:86:7f:07:
01:8d:d5:bd:a6:46:0b:c6:40:10:ee:1d:6b:4f:52:9f:b4:61:
06:73:ea:9a:f2:3e:59:a5:d5:06:2b:78:fd:ea:34:00:31:52:
d0:f2:86:59:df:7c:18:dc:0d:30:f5:e5:ed:6d:66:9e:aa:80:
f7:af:ca:b0:83:97:d8:4c:2d:97:26:84:88:07:a4:c8:ae:49:
ea:0a:75:7a:d8:be:64:59:bc:a0:61:a8:14:7b:34:4f:30:f2:
12:d2:ad:ad:6b:a4:fe:56:9f:ee:a4:b4:c4:f5:17:2c:c8:7c:
c8:06:f2:56:1e:1a:92:4a:fa:17:ad:43:50:a3:38:54:4b:14:
33:df:fd:d1:af:19:61:9f:9f:f6:11:76:77:aa:55:78:da:7c:
9e:4a:10:41:31:b8:c4:b4:9c:a7:79:c7:d2:c5:92:25:2a:6a:
3b:1a:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:15 2026 by rpki-client