Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143500.roa
File: AS143500.roa (raw, json)
Hash identifier: bQrz4m/zY0eA2ljTrtGy7n7tLLBpeK1s3fkanXganxA=
Subject key identifier: 60:05:4D:AB:70:69:6D:2D:43:5C:A1:13:F6:A2:F1:8C:A3:B0:62:57
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2F633F91B02D985BE234298D82392FB10DCCDEE0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143500.roa
Signing time: Mon 25 May 2026 01:20:03 +0000
ROA not before: Mon 25 May 2026 01:15:03 +0000
ROA not after: Mon 24 May 2027 01:20:03 +0000
asID: 143500
IP address blocks: 240a:a352::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:63:3f:91:b0:2d:98:5b:e2:34:29:8d:82:39:2f:b1:0d:cc:de:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:03 2026 GMT
Not After : May 24 01:20:03 2027 GMT
Subject: CN=60054DAB70696D2D435CA113F6A2F18CA3B06257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:05:cc:2b:71:32:80:b0:5f:c2:70:75:ed:
27:b8:a7:5e:15:ef:54:d7:4f:62:31:17:fe:f2:41:
e7:62:b7:3e:12:5e:70:7e:ab:48:6c:68:24:e1:07:
41:f0:2b:1f:37:1c:3b:d4:3d:7f:9f:b4:ae:97:68:
ea:16:77:84:d9:43:0d:21:3e:ff:f4:cf:02:b5:b1:
20:52:9f:ca:14:65:3c:e0:0c:ee:97:a1:7c:60:d0:
cc:85:1f:15:ff:e9:98:24:a6:7a:e3:f8:ef:d6:ea:
72:f1:ba:e4:02:20:ef:6e:92:bb:f9:c1:90:70:df:
ba:8a:9f:49:1e:e0:67:58:de:81:06:70:f2:19:1c:
f8:f7:eb:60:d5:90:65:13:1f:9b:3d:b1:c4:b0:dd:
6a:47:b2:5d:d2:be:87:a0:7e:c3:54:4d:2b:2c:be:
dd:5e:6c:65:87:a6:c2:a4:0c:bf:d7:b2:65:3a:b8:
bb:77:b0:57:05:3f:30:ae:e9:fd:5b:95:58:3b:2b:
e1:01:27:cf:2e:30:ac:11:1d:63:6a:64:59:05:f2:
3c:8f:62:1a:69:fb:57:c3:25:e4:ba:ea:5f:30:df:
62:11:71:d1:ce:7b:3e:fc:59:7d:13:27:8b:fc:82:
3a:e7:6a:04:e0:f9:12:a4:6a:1d:8d:1b:fe:55:9f:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:05:4D:AB:70:69:6D:2D:43:5C:A1:13:F6:A2:F1:8C:A3:B0:62:57
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143500.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a352::/32
Signature Algorithm: sha256WithRSAEncryption
82:15:ca:da:2f:84:63:a4:41:b7:c9:a1:33:f6:26:ed:5a:0c:
c9:03:4b:34:54:d5:cb:77:79:bb:63:da:16:b9:61:6c:15:57:
22:70:04:c5:2f:43:98:18:d5:74:48:e4:df:18:7d:11:e1:79:
bd:bb:59:ee:a7:25:ac:14:b5:78:1b:dd:7d:25:d8:0f:c6:66:
fe:7d:94:6e:f1:b6:63:1e:e8:29:b8:c0:77:d9:2f:32:5a:32:
4c:3e:d2:75:1f:64:7d:c8:c4:e6:79:e4:a5:60:f3:b8:a4:02:
d7:52:e2:70:cc:5b:69:55:cb:24:67:6c:37:c5:42:f5:bd:6b:
1a:54:8f:41:13:30:67:5f:30:ae:1e:bc:e3:e7:7a:a0:82:4a:
75:d0:48:6a:ac:55:d6:12:39:80:a9:27:4e:6e:7f:1a:6b:20:
99:85:a5:05:0c:e6:7f:e8:98:7b:af:2f:af:78:fb:67:d1:73:
ab:cf:7d:9d:bc:4d:ad:5d:65:17:ce:6f:eb:1e:ca:b1:8a:52:
76:44:65:73:05:11:e3:94:77:86:c0:c7:ff:f1:e3:92:f0:d9:
34:32:9d:ba:62:00:51:ef:f1:77:9e:eb:5e:53:8b:9d:96:f7:
75:c0:eb:4c:ce:78:3f:53:03:fa:e7:f9:d6:04:6e:ce:c3:6a:
d1:8c:99:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:49 2026 by rpki-client