Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143491.roa
File: AS143491.roa (raw, json)
Hash identifier: gZHBIg0gQfxoGbO/S2rxyF3s/01JKlOQiC809vaYrmw=
Subject key identifier: 86:9A:BD:5F:BC:03:25:99:F0:DC:9D:A3:25:DD:99:FC:10:D2:56:27
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2D097F92C19A1B713A05F8C93A385FD4D5D7F068
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143491.roa
Signing time: Tue 26 May 2026 01:13:04 +0000
ROA not before: Tue 26 May 2026 01:08:04 +0000
ROA not after: Tue 25 May 2027 01:13:04 +0000
asID: 143491
IP address blocks: 240a:a349::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:09:7f:92:c1:9a:1b:71:3a:05:f8:c9:3a:38:5f:d4:d5:d7:f0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:04 2026 GMT
Not After : May 25 01:13:04 2027 GMT
Subject: CN=869ABD5FBC032599F0DC9DA325DD99FC10D25627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:03:ef:7b:65:fc:2f:c0:31:30:6d:52:26:
10:72:3e:63:06:3e:7e:fb:03:41:bf:3b:5a:13:51:
7a:93:64:15:86:df:dc:16:a3:c0:bf:cb:95:8c:f1:
af:fe:8c:43:54:de:45:35:9d:4d:5b:9f:79:85:da:
52:2f:ca:f7:75:6c:ca:f0:5f:93:87:c4:d6:6f:4e:
22:2d:3c:65:ca:f8:d0:f0:70:27:e9:4a:32:2e:5c:
55:4e:f0:13:b5:ec:1d:fd:6f:3b:76:34:64:f9:f3:
b2:2b:d3:bd:ee:76:af:36:c1:50:d4:d7:2e:96:9c:
7d:22:13:12:b7:e0:a9:c6:7a:0f:f7:d8:4e:e9:75:
2c:b2:81:c6:03:7c:0b:ec:18:94:63:df:a2:6f:42:
7e:56:35:38:aa:e1:4d:a7:2f:b5:f9:85:59:72:01:
03:36:7a:fb:ef:e5:ba:20:41:7d:46:50:31:a4:73:
39:2a:6d:40:59:31:ed:97:08:43:98:2a:5e:aa:d5:
b2:2c:2e:ed:48:a9:a0:f7:dd:2f:97:6b:28:20:ad:
04:77:fa:f4:d2:77:5a:9f:d4:92:7e:db:cb:79:a9:
98:70:b0:1e:66:b7:e6:cc:f9:e7:7c:c6:6b:21:6f:
c9:d2:4c:eb:f4:9c:cb:df:f8:86:41:27:ed:79:d8:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9A:BD:5F:BC:03:25:99:F0:DC:9D:A3:25:DD:99:FC:10:D2:56:27
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143491.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a349::/32
Signature Algorithm: sha256WithRSAEncryption
b4:a1:c5:d5:08:b2:42:2a:7e:38:55:45:23:75:42:d0:67:77:
9e:c7:92:34:ea:f2:37:a1:5e:1f:90:09:e2:46:6c:ee:01:fd:
00:3c:de:31:ec:75:0d:13:b0:0c:72:ef:0b:e4:09:45:6e:6d:
27:af:c4:a9:b5:00:65:60:70:9e:e9:80:c7:b6:c9:8b:b4:d3:
b1:55:fe:6c:4c:73:ec:f4:bd:e9:8f:a4:9b:2a:5e:fe:ea:49:
d1:a2:4b:e8:f1:6e:eb:25:26:c0:9e:d7:2d:d9:d9:4f:02:20:
c6:2e:c9:d2:69:92:43:9e:85:f3:1c:21:2f:e0:a9:20:5b:fa:
1c:9b:4b:fc:6c:8c:6c:52:15:04:c1:4a:6a:d4:d8:65:ab:29:
53:72:b6:15:59:a7:89:13:32:e1:7d:ba:9f:9e:0a:6e:d3:32:
5b:ba:c7:a4:6a:27:f1:eb:52:83:61:d3:48:9b:8d:79:77:b6:
31:89:bd:0b:db:ec:b6:f2:b2:fa:05:3b:5a:94:45:20:dc:b7:
07:cf:a3:2c:d1:65:01:3e:ee:48:64:27:60:fe:cf:53:92:d8:
8d:de:5c:4d:00:e7:de:2a:48:db:7e:a1:96:82:ff:66:8f:28:
5b:42:45:cb:41:40:75:97:c1:f4:5e:29:b4:3b:57:ab:25:12:
ec:68:fb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:59 2026 by rpki-client