Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143486.roa
File: AS143486.roa (raw, json)
Hash identifier: +KED0rR3N/eF4pl8Oc3mrDaPaBUWXuOfW2YE+Sqr7MY=
Subject key identifier: 12:5B:3D:EF:00:25:8D:22:F7:31:55:DE:B8:28:05:80:A2:67:17:75
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 79F860AA8DA5CCEC0D5C36D2452F72D673A6EFCB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143486.roa
Signing time: Fri 22 May 2026 07:24:54 +0000
ROA not before: Fri 22 May 2026 07:19:54 +0000
ROA not after: Fri 21 May 2027 07:24:54 +0000
asID: 143486
IP address blocks: 240a:a344::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f8:60:aa:8d:a5:cc:ec:0d:5c:36:d2:45:2f:72:d6:73:a6:ef:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:54 2026 GMT
Not After : May 21 07:24:54 2027 GMT
Subject: CN=125B3DEF00258D22F73155DEB8280580A2671775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:46:ba:20:d8:a6:76:77:e3:f9:0d:57:e1:
e3:4f:eb:e5:b4:04:1e:e7:24:75:41:a1:d7:08:fd:
fe:41:07:b1:29:b1:dc:66:41:a3:d1:49:12:28:a4:
7e:df:c9:9b:23:a9:4f:97:ed:eb:67:00:56:72:eb:
54:ad:2a:0f:84:37:1c:1b:82:1f:6d:33:da:dd:af:
71:6b:23:9c:ff:16:2f:2f:9d:36:b2:62:20:af:de:
8c:bd:b4:8d:f7:70:94:60:af:24:bf:37:39:14:c8:
8e:26:ae:aa:26:7a:15:07:d5:f8:bd:d0:ba:08:66:
25:e6:3a:a0:d0:ca:2e:c9:92:51:86:f3:f0:9a:bb:
cf:f0:f6:26:2e:7a:05:c1:53:e3:b6:5a:8a:51:10:
c1:97:7f:4a:8d:42:fa:60:7a:90:8b:e2:a0:c0:12:
79:d9:e8:e5:cb:b8:bb:ff:b2:5c:ed:66:a8:d6:74:
c4:59:5f:86:88:38:bd:3d:0f:71:ce:d3:3e:14:28:
55:85:4d:8c:7d:42:a7:7d:23:43:94:1b:6a:dd:26:
23:07:65:31:1e:1a:32:55:e5:4b:6c:7b:71:87:d2:
c7:e8:21:cc:75:f5:72:b8:30:5f:c3:46:81:28:38:
b4:5a:fd:51:fb:8d:1c:32:5b:67:e6:db:45:a5:26:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5B:3D:EF:00:25:8D:22:F7:31:55:DE:B8:28:05:80:A2:67:17:75
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143486.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a344::/32
Signature Algorithm: sha256WithRSAEncryption
ba:28:24:76:58:a6:3b:e8:a1:4d:dd:e1:f7:2b:49:94:c8:86:
17:d0:e1:91:72:28:f0:ca:58:0f:be:05:f2:98:21:9c:9f:91:
25:2e:3a:47:e1:9c:78:a1:38:06:e0:59:de:24:30:65:52:32:
6d:9e:2b:35:db:7e:98:df:b0:e9:64:4d:89:d8:ea:54:12:ca:
6a:f6:f2:15:ab:7e:2e:79:40:52:3c:9b:27:4a:1c:95:28:7c:
1a:89:9e:fd:6e:2d:1d:98:70:62:8a:f8:36:8e:38:c0:58:e8:
a9:0f:22:18:c3:7a:3a:82:4a:26:57:e3:1b:d5:f7:9e:12:f5:
9a:7d:4c:a0:c8:3d:fd:76:30:7b:6a:d8:84:62:57:06:d0:eb:
f2:86:21:49:ab:ba:8e:f0:7b:2c:1e:9b:48:d4:c4:9e:74:e9:
e6:75:1c:47:49:02:a2:f6:84:1d:30:2d:44:3a:d0:53:dc:b4:
0c:d4:55:55:5b:09:d7:21:09:c6:bf:b6:a2:7d:57:0e:a8:14:
3a:d0:45:f1:5e:b7:2a:3c:4c:75:8a:c3:7d:d9:bd:8a:5b:cd:
46:cc:99:7e:52:11:a4:6d:d4:ce:4a:81:c1:fc:08:73:a8:d3:
ce:9d:1d:8e:64:a8:2e:3c:ef:8c:4b:6a:05:46:6a:17:ca:1e:
30:4c:64:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:20 2026 by rpki-client