Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143497.roa
File: AS143497.roa (raw, json)
Hash identifier: z+q7aiAEryEWjX0Tb9Z6EXvK2R1KGhCyjzNaK8jwdoU=
Subject key identifier: EB:14:21:27:94:2D:5F:0D:41:43:22:1F:62:ED:02:26:97:4E:87:7B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2E4D6AE975A0BA93422986F65D8CF39A44CECD4B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143497.roa
Signing time: Mon 25 May 2026 03:19:28 +0000
ROA not before: Mon 25 May 2026 03:14:28 +0000
ROA not after: Mon 24 May 2027 03:19:28 +0000
asID: 143497
IP address blocks: 240a:a34f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4d:6a:e9:75:a0:ba:93:42:29:86:f6:5d:8c:f3:9a:44:ce:cd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:28 2026 GMT
Not After : May 24 03:19:28 2027 GMT
Subject: CN=EB142127942D5F0D4143221F62ED0226974E877B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:71:29:16:74:7a:45:c6:6d:4b:56:9d:89:
82:5c:21:d3:14:fb:1f:c3:29:4b:92:2a:42:13:51:
d4:72:d3:d1:96:66:83:63:ac:21:89:c8:99:b5:3a:
7d:f6:c8:a6:cf:60:00:cd:97:56:a8:01:d7:f2:39:
88:c5:c8:e8:0a:06:5d:c0:d9:67:16:ad:98:36:09:
43:cc:dd:c7:d7:7c:61:c1:91:58:2a:32:20:c8:86:
3e:47:c5:66:54:66:71:f8:44:a4:49:5e:50:ad:44:
1b:f2:0d:88:16:cb:03:51:21:c3:82:fb:c1:7b:ca:
7e:87:45:da:23:83:23:8a:66:0d:48:b2:16:bc:46:
cf:1f:be:b9:db:9b:b1:2f:0e:1f:d0:df:02:ce:5f:
1a:8c:f5:3f:26:c9:4e:32:d7:8c:79:64:3d:85:4c:
29:44:dc:e3:ee:99:07:50:ae:bc:fd:1f:7e:44:8e:
e9:51:a5:a1:9f:36:8e:e7:cc:88:6b:60:b9:dd:2c:
5a:b0:0b:a4:4d:5b:42:c6:b9:54:74:67:29:af:07:
af:d6:f9:6d:11:76:be:ef:af:9d:04:60:fe:a8:e9:
cc:4c:ca:c6:c2:a0:da:e5:a4:db:7c:7e:fc:2c:65:
fd:13:d5:23:b0:d6:27:30:2a:41:d6:45:f5:6b:7f:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:14:21:27:94:2D:5F:0D:41:43:22:1F:62:ED:02:26:97:4E:87:7B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143497.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a34f::/32
Signature Algorithm: sha256WithRSAEncryption
8c:13:d6:7b:37:f4:dd:22:29:2d:66:6a:d3:bb:2c:aa:93:b3:
88:21:6d:cc:a5:fd:08:89:84:e8:a5:d7:ff:1e:e8:db:46:37:
5e:18:fd:6c:8a:15:9e:b0:0c:e9:27:86:08:ff:65:50:84:92:
ca:dc:fc:52:7a:e8:b5:ab:79:1d:e6:3a:b5:bf:9d:50:8f:0a:
3e:47:a7:b6:aa:d7:0a:28:d1:cc:81:33:77:25:fa:30:c4:d8:
88:92:61:ee:6e:56:b9:91:f8:0b:17:18:45:55:4c:44:55:33:
ec:4b:97:67:05:0b:08:8a:8d:c1:e2:0c:90:26:a8:8b:e5:73:
2c:e0:a9:d0:2f:61:96:9d:ad:8a:5f:7a:30:39:a8:71:71:29:
1c:ba:fa:0d:2a:21:6a:81:1c:04:4e:f7:53:7e:b3:ca:e1:ee:
bc:b0:9b:9b:2d:f8:61:7b:0f:ec:a2:6a:46:9c:ed:cb:1f:7a:
d2:c1:00:75:46:2b:02:29:ea:7b:d4:27:7a:74:19:44:0f:3b:
5e:54:30:4c:6c:02:64:bd:d0:3b:0d:07:59:86:25:af:b5:9f:
67:8e:c7:e3:21:03:ab:9b:be:89:43:ed:f6:79:1e:1b:6d:76:
77:bf:6e:18:a6:76:65:36:17:b1:cd:d8:c2:66:ba:13:ba:74:
db:88:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:29 2026 by rpki-client