Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143484.roa
File: AS143484.roa (raw, json)
Hash identifier: L1JSkyP8mXAK9x+aZRkeutuxjvhNWFbnsKAXcX/tDQk=
Subject key identifier: 8D:79:DE:16:34:88:7F:86:65:25:7E:7D:B6:47:F7:9E:82:21:E1:49
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0C675E8F96A3EC8F3174B661B0DA7DE9A1ECC33C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143484.roa
Signing time: Fri 22 May 2026 04:08:02 +0000
ROA not before: Fri 22 May 2026 04:03:02 +0000
ROA not after: Fri 21 May 2027 04:08:02 +0000
asID: 143484
IP address blocks: 240a:a342::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:67:5e:8f:96:a3:ec:8f:31:74:b6:61:b0:da:7d:e9:a1:ec:c3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:02 2026 GMT
Not After : May 21 04:08:02 2027 GMT
Subject: CN=8D79DE1634887F8665257E7DB647F79E8221E149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:23:c8:7c:42:74:b5:41:0b:71:5b:56:8e:
34:94:2f:0f:a7:e1:f3:19:f4:18:03:31:30:49:89:
d2:c0:fd:30:16:ba:17:ae:3a:f2:71:be:3b:c4:a9:
69:09:23:de:de:af:6b:5e:c6:ee:81:55:2d:74:7a:
f0:69:9d:47:2d:3b:8c:fe:24:81:19:63:22:b5:d0:
fa:58:48:2f:fc:b9:29:82:ca:ea:a3:88:90:94:10:
c5:44:b0:92:37:0b:62:c9:62:46:cd:51:35:67:52:
1f:e8:4b:9b:6f:1f:ee:aa:4f:ea:a0:f5:19:76:03:
3c:be:35:44:a8:7e:6d:f8:00:48:81:83:83:df:de:
15:fd:14:29:e6:fe:70:7d:99:27:b3:dd:c4:a5:61:
34:42:a8:f8:8a:d9:ce:eb:47:f3:4b:dd:79:51:25:
2f:e9:c1:db:09:4d:89:7c:99:16:af:8e:52:31:7e:
5e:01:0d:4f:e4:73:05:fc:12:e4:5a:5f:73:8a:31:
7c:9c:81:56:ea:e5:a8:7c:55:e3:a6:22:98:98:4e:
2a:2b:da:89:07:9d:fe:b9:4a:eb:96:17:ae:5d:c6:
a1:83:b6:f8:8e:50:d4:a6:80:3f:93:83:b6:7f:4f:
77:0b:7e:3a:0b:9b:2e:ad:f6:07:d4:87:14:0e:35:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:79:DE:16:34:88:7F:86:65:25:7E:7D:B6:47:F7:9E:82:21:E1:49
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143484.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a342::/32
Signature Algorithm: sha256WithRSAEncryption
01:42:ff:00:c8:c2:db:57:cf:ed:1a:9f:46:df:bc:5d:b0:bf:
3e:76:46:0b:6c:29:7e:77:c9:de:90:76:03:5b:39:3e:fc:64:
3b:99:ae:e9:ce:fb:7d:a1:23:27:39:49:e3:01:db:b2:c6:a1:
88:ee:64:54:5c:3f:81:ce:9a:4a:01:b4:09:bf:25:2a:6b:c9:
f4:4a:1e:59:cf:cf:84:87:f5:eb:fb:e3:f9:34:fa:f8:ac:d3:
20:97:98:0e:21:64:65:14:10:7c:c2:f7:a7:7e:9f:74:f2:f1:
36:5d:f6:3d:92:66:42:f4:d0:9b:3f:11:24:4e:cd:1e:7d:36:
57:72:c4:e0:45:02:d0:67:fe:4b:e5:db:f1:c1:b4:b9:44:9f:
ed:87:fd:4a:07:1b:83:f9:91:29:db:d0:68:34:a9:c9:1d:e7:
3a:4b:1e:b3:08:f2:6c:8b:41:34:9b:a1:e8:f8:0e:f3:b8:9e:
94:c4:54:56:d5:d7:bb:07:65:be:5f:c2:e1:a9:46:62:17:1b:
4a:9c:ae:36:3b:9d:4a:df:00:b9:f3:77:27:41:10:96:31:d7:
31:4f:b2:43:3a:27:f4:fc:3d:fe:ce:79:19:c3:2f:c3:32:bc:
f3:6e:a4:3f:1f:ab:27:55:24:6c:de:72:83:bf:a4:b7:ce:b5:
15:c0:ff:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:40 2026 by rpki-client