Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143489.roa
File: AS143489.roa (raw, json)
Hash identifier: l5LVKX8u7RCF/+RK+wHk9rizU7vMYsHjdkfaLuzXZyw=
Subject key identifier: 28:92:79:99:FB:DD:63:11:92:64:BD:6E:59:49:B5:9C:15:D7:18:65
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4FE23D5A66AAC225CCBB4BD83A66341641229F8F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143489.roa
Signing time: Fri 22 May 2026 04:08:28 +0000
ROA not before: Fri 22 May 2026 04:03:28 +0000
ROA not after: Fri 21 May 2027 04:08:28 +0000
asID: 143489
IP address blocks: 240a:a347::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e2:3d:5a:66:aa:c2:25:cc:bb:4b:d8:3a:66:34:16:41:22:9f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:28 2026 GMT
Not After : May 21 04:08:28 2027 GMT
Subject: CN=28927999FBDD63119264BD6E5949B59C15D71865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:aa:6b:79:ae:af:a7:1c:09:c4:2b:cf:38:fd:
82:85:17:78:1f:e9:7d:63:0d:b3:ec:14:b0:3a:27:
ce:3a:8e:45:31:ee:50:0a:5a:84:ef:56:12:e5:50:
6e:aa:cf:6f:a7:f2:ae:9d:41:3e:46:1d:fe:ca:f4:
25:58:c6:b7:52:a5:83:22:2c:e5:f5:3c:a8:cc:2c:
8b:15:3c:86:8b:76:9d:28:f4:f0:e9:80:da:4e:a2:
b0:ec:6e:9c:22:99:29:ab:13:ef:83:18:8c:f0:b6:
74:63:fc:29:0a:04:78:4d:50:8f:ee:07:e7:4b:0e:
25:8b:da:a1:6c:38:82:29:29:f5:77:7b:42:eb:66:
1c:1e:ec:b8:59:cc:33:76:cc:57:04:d2:41:a4:88:
c3:20:36:ed:14:91:87:e9:04:6d:16:e7:10:d9:27:
46:fd:19:54:aa:ee:d8:d3:b9:f1:0c:28:a9:f6:4c:
70:ce:f1:13:9c:1f:fe:c9:f9:09:af:02:16:d9:da:
6c:56:d9:e9:40:5e:0e:b7:c3:0c:9c:41:d0:94:22:
37:ce:1f:20:dc:61:2b:52:c4:3a:c3:a7:0e:35:34:
59:8f:19:da:fe:fd:fb:bb:89:d2:ec:33:ac:1a:a7:
b8:cf:40:76:8d:27:76:f4:ed:62:57:60:c0:dc:e2:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:92:79:99:FB:DD:63:11:92:64:BD:6E:59:49:B5:9C:15:D7:18:65
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a347::/32
Signature Algorithm: sha256WithRSAEncryption
bd:3d:42:cd:09:cb:08:e5:73:49:20:91:52:c7:34:a5:d2:e5:
a3:0d:61:57:26:9a:73:7a:49:05:6c:5c:90:12:af:73:4e:a8:
46:3b:93:c2:48:dd:1a:5d:20:59:3c:dd:1b:c3:24:88:c4:b7:
2d:1c:e6:df:03:bd:8e:6c:57:b7:e7:60:49:8f:18:cd:14:9b:
aa:44:81:59:a9:2f:ef:cc:21:c2:71:21:44:eb:fc:21:34:97:
0a:7d:13:ed:35:19:9e:ae:36:7a:18:a9:7c:de:52:da:1d:16:
d7:8c:69:20:5b:be:9c:a0:24:21:63:02:8f:8c:d9:3c:a6:13:
c0:71:da:70:c9:e2:78:e7:53:02:de:46:af:eb:15:52:e9:d9:
40:e0:ce:6a:6a:35:ea:0e:1c:b2:c5:a9:37:dd:df:e0:ea:32:
e1:73:0e:03:f7:d7:fe:e1:b3:1d:ce:5c:00:4d:24:ab:4d:23:
ae:05:31:49:6f:ef:2b:45:31:2f:9a:08:2f:9d:d3:94:14:88:
90:36:a1:19:a5:10:0b:46:d0:e1:88:fc:7b:4b:4b:c2:b3:81:
01:30:3f:f8:15:98:b4:60:30:ad:ea:bc:5f:30:77:d2:8d:7c:
b0:ba:cf:ca:06:78:dc:01:03:d8:fd:75:e9:df:3c:6f:b7:29:
d6:3c:02:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:51 2026 by rpki-client