Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143501.roa
File: AS143501.roa (raw, json)
Hash identifier: OyXBHjoCosebrxwi8NVJvLef+STRF6hrDCPpOIfsTo8=
Subject key identifier: 82:25:F2:57:1E:38:71:68:5C:03:32:DD:2B:D0:93:B5:AA:49:BA:AA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 29A45F0EDD3B7920A4825938C328BA43F8C25912
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143501.roa
Signing time: Tue 26 May 2026 01:13:05 +0000
ROA not before: Tue 26 May 2026 01:08:05 +0000
ROA not after: Tue 25 May 2027 01:13:05 +0000
asID: 143501
IP address blocks: 240a:a353::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:a4:5f:0e:dd:3b:79:20:a4:82:59:38:c3:28:ba:43:f8:c2:59:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:05 2026 GMT
Not After : May 25 01:13:05 2027 GMT
Subject: CN=8225F2571E3871685C0332DD2BD093B5AA49BAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:08:67:e0:a7:7b:7d:a6:32:e3:98:19:34:
6f:1a:e0:0c:3e:c3:43:ad:96:ad:23:41:65:7c:f5:
22:b6:a1:46:e9:2b:cb:ca:fc:87:6f:64:89:45:0e:
e6:dc:4d:56:90:e0:ce:7a:a1:c4:37:15:4c:a1:f8:
78:7a:10:bf:7b:f0:a2:97:01:97:6c:fa:43:68:c6:
17:ea:d7:f0:71:4e:d9:b0:5c:94:0a:7c:5b:71:65:
34:e7:87:a3:86:f7:f9:b9:e4:5b:a6:36:28:c6:a6:
dd:5d:95:48:f4:fc:c0:06:96:a6:82:c7:f1:b0:ed:
d9:ed:ba:03:27:99:31:21:c9:42:9f:bb:ec:21:32:
ac:fa:cd:e8:8e:a2:3e:82:46:fb:f7:1d:3b:1a:21:
3b:22:0e:5c:e0:8c:98:f1:ac:f3:cb:bf:ec:d4:66:
00:9d:48:f9:b1:63:5b:76:90:dc:cc:22:0b:80:f9:
ae:f9:1d:27:80:c3:fb:16:45:32:bc:3f:33:c3:e4:
bd:39:fd:6f:46:84:1c:74:75:a6:1f:c7:d9:da:d6:
a5:9b:e0:20:ef:cc:d5:aa:c1:02:a4:fd:71:cc:b2:
c4:02:87:0a:39:57:23:74:40:9c:17:ed:e0:30:71:
76:43:2b:8f:03:fa:2c:7d:f0:c6:ce:ae:d4:5e:2e:
cc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:25:F2:57:1E:38:71:68:5C:03:32:DD:2B:D0:93:B5:AA:49:BA:AA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143501.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a353::/32
Signature Algorithm: sha256WithRSAEncryption
68:e0:59:da:d3:09:a0:ba:ed:19:35:6e:8d:17:56:7f:79:ab:
71:62:2b:2a:6b:7b:fe:ea:0e:4e:98:79:b8:9c:fd:c2:bc:68:
f9:6a:aa:82:aa:98:63:8b:30:40:2a:75:f4:0c:df:1a:b7:2a:
d9:9e:fb:ae:11:6e:a6:fd:86:b1:f0:4c:33:ff:39:23:25:98:
1c:ba:12:94:44:10:4d:77:6a:46:15:af:7e:e4:fe:28:11:d8:
a5:16:eb:d8:57:ae:85:79:db:0a:14:36:52:83:36:b4:82:dd:
c6:11:41:d1:78:a0:80:a1:2b:25:c3:bf:f1:fb:32:7e:1b:2e:
e8:cc:3b:19:94:b1:76:9e:53:67:9b:f9:3d:9e:ce:e5:a0:9f:
64:60:14:d3:c1:19:50:92:d8:92:d1:b5:3f:f4:dc:7b:15:96:
14:75:33:43:3f:e9:5d:11:22:d3:9d:21:3c:75:f3:07:ba:5e:
93:f1:24:e9:36:03:ff:a5:41:92:40:78:9e:60:3a:68:21:06:
61:4d:11:8d:dd:12:1b:35:35:05:cf:cc:5c:b0:25:91:8e:69:
4a:84:9e:4e:9d:16:a3:ca:3b:1c:65:8f:91:ee:ec:41:0b:7c:
08:54:d9:89:21:79:77:b1:f5:a1:bf:63:1a:16:6f:93:ac:f9:
c7:b1:68:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:36 2026 by rpki-client