Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143485.roa
File: AS143485.roa (raw, json)
Hash identifier: WgjFaASsJxSrI3q/TgIZzKdx+tfVaOVdHZs82TBQQbM=
Subject key identifier: FC:BA:36:11:5F:EA:AC:DD:29:41:8D:9C:5C:C8:0B:93:BC:D3:E7:F7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 13A95DB80E14BDB89110A4F3CD48785D2E9BDB12
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143485.roa
Signing time: Fri 22 May 2026 07:08:55 +0000
ROA not before: Fri 22 May 2026 07:03:55 +0000
ROA not after: Fri 21 May 2027 07:08:55 +0000
asID: 143485
IP address blocks: 240a:a343::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:a9:5d:b8:0e:14:bd:b8:91:10:a4:f3:cd:48:78:5d:2e:9b:db:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:55 2026 GMT
Not After : May 21 07:08:55 2027 GMT
Subject: CN=FCBA36115FEAACDD29418D9C5CC80B93BCD3E7F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:53:16:67:13:46:cd:07:1a:2e:a7:ca:67:
a5:7c:2e:ff:37:ff:69:f8:d6:bc:9f:a4:23:4c:41:
fa:9c:79:44:f6:67:c5:26:b2:d4:2c:d2:40:47:9d:
d4:ad:40:f5:1b:9c:51:54:28:ec:cd:1c:55:bd:0e:
76:ee:87:09:9d:5e:77:5d:74:1c:99:36:5b:62:1f:
cb:ad:ac:b1:62:7d:88:d4:17:d3:34:0c:eb:f5:82:
79:e1:9d:da:ee:5c:e0:1f:24:6d:7a:85:c6:f1:e1:
d2:76:15:7a:0b:67:31:5a:05:86:f5:13:45:0b:b4:
30:4d:f0:dd:14:cf:68:9c:db:f1:6d:10:6d:2e:ef:
68:23:a6:66:d6:9d:01:39:5f:98:5d:7e:79:03:2a:
42:76:ce:e5:fc:d5:b4:72:80:14:47:2c:75:d9:99:
c0:6d:d9:ae:d5:44:dc:77:03:ed:96:a1:17:bb:04:
57:6d:21:2b:f9:40:43:18:42:c2:16:4e:d9:fe:0d:
b9:e4:a7:6a:3e:a4:05:27:32:c2:23:91:35:dd:a1:
d7:59:86:01:d0:fd:c3:77:0e:0c:39:79:f4:d9:f6:
55:61:a5:9b:b8:d2:c8:9f:b1:73:a5:6a:b6:70:72:
c2:7c:26:cc:1e:c8:71:c6:ee:fe:1e:bc:fe:7c:de:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BA:36:11:5F:EA:AC:DD:29:41:8D:9C:5C:C8:0B:93:BC:D3:E7:F7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143485.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a343::/32
Signature Algorithm: sha256WithRSAEncryption
61:1e:47:82:28:27:0a:8c:fb:d4:18:6f:d5:2b:7e:1c:81:9a:
71:89:ab:99:91:92:2b:4c:0c:76:82:f5:ab:e8:c7:f2:78:a6:
cd:31:36:72:7d:76:94:64:e6:47:90:b8:86:f7:8c:37:f5:ad:
a4:c3:69:6e:24:9b:67:5b:a5:95:db:21:8b:2d:bf:3c:78:7f:
1d:87:e8:ce:e5:d5:14:f9:ce:ed:cc:ef:f7:c3:ae:35:e4:e4:
c0:0c:bf:6c:94:d6:07:80:f1:ae:00:6b:7a:e8:4d:7b:cb:12:
9c:1c:ee:aa:1a:55:40:9a:44:27:6b:2d:9f:dc:3f:15:86:f7:
13:bc:18:e4:3c:28:37:0d:30:d1:4e:86:6c:de:94:cf:35:13:
01:d8:2a:01:a8:09:47:a5:71:5c:49:cc:63:54:c9:cf:c3:da:
55:1f:06:07:f0:3e:27:36:0d:3e:35:34:5a:46:60:c2:6f:f8:
6b:90:f1:0d:f0:e3:0d:78:9c:3b:5f:d0:ea:9c:cf:59:7a:62:
5a:7a:83:50:03:cc:ff:08:65:13:5a:e3:0f:57:37:57:67:57:
0e:3a:88:43:a0:1d:61:f9:87:d7:0e:f4:3b:81:cd:ae:bc:06:
a7:81:29:cb:87:bf:98:0a:39:58:24:06:5f:2f:ea:f1:9d:87:
e4:60:83:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:58 2026 by rpki-client