Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143502.roa
File: AS143502.roa (raw, json)
Hash identifier: hWYCq3hW4GbAA2l3ga8vvcm0i+0hlSJXVhOf8q1JoVA=
Subject key identifier: 80:A3:88:CF:21:43:8A:97:EC:6E:4E:A6:26:04:22:A2:44:97:94:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0E48566AEEEBA9623D56781E5ECE09DBABBF85C6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143502.roa
Signing time: Fri 22 May 2026 02:47:26 +0000
ROA not before: Fri 22 May 2026 02:42:26 +0000
ROA not after: Fri 21 May 2027 02:47:26 +0000
asID: 143502
IP address blocks: 240a:a354::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:48:56:6a:ee:eb:a9:62:3d:56:78:1e:5e:ce:09:db:ab:bf:85:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:26 2026 GMT
Not After : May 21 02:47:26 2027 GMT
Subject: CN=80A388CF21438A97EC6E4EA6260422A24497942E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:e0:51:39:6f:0f:5b:b2:bb:fa:26:98:e6:
a8:c6:fd:42:b6:86:2c:83:14:cd:18:8e:64:0d:ae:
4d:96:be:5c:42:52:e8:d6:36:4e:70:22:70:0f:db:
82:c2:7a:3d:aa:bb:9e:5c:31:f5:07:76:cb:ee:3c:
88:ad:3a:63:64:11:fa:de:5f:0e:a3:ab:ad:62:fb:
50:02:ff:cc:47:da:45:ba:d5:ab:ea:78:dd:b0:94:
58:0f:5d:49:08:c5:d8:dc:ac:c8:34:c8:85:b9:fa:
cf:1a:61:64:11:7c:72:e4:2f:b2:fe:66:11:97:8a:
7e:c2:ea:82:f0:8f:28:c0:6a:61:f1:35:5f:d5:9d:
bf:99:41:45:9f:32:b0:19:a1:30:c6:98:40:31:90:
76:ac:ec:c7:cc:27:3a:7c:cf:d7:43:15:fc:fa:47:
b6:45:d5:5f:98:41:cf:0f:64:1c:9b:f3:68:61:fa:
c8:3b:91:fc:a9:f7:39:40:e2:28:61:00:af:d7:77:
07:72:d6:56:fb:32:b2:63:c1:4c:17:c3:f1:6a:a9:
3d:e9:a8:f0:f0:ac:7a:06:49:e9:34:94:4d:d6:d0:
ff:8a:8c:1d:1d:75:90:ab:8d:43:93:f8:48:0b:ce:
41:9e:b1:ed:17:d0:3a:57:32:7a:52:8a:8d:2a:76:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A3:88:CF:21:43:8A:97:EC:6E:4E:A6:26:04:22:A2:44:97:94:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143502.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a354::/32
Signature Algorithm: sha256WithRSAEncryption
a0:9b:a2:d6:96:df:a5:f3:a1:6d:94:c2:78:cc:4d:15:37:35:
a3:f7:cc:60:44:a5:29:9f:11:be:51:32:54:05:37:9a:8d:1c:
7b:82:c8:18:67:fe:36:7f:8e:a7:0a:e2:38:49:32:b8:4b:1a:
92:93:2c:d1:47:2e:a1:45:ad:d9:ec:4d:80:e6:6b:e2:90:25:
d6:e2:db:01:27:78:b3:7a:80:36:1a:fb:33:53:5e:1a:23:13:
e9:ee:eb:aa:b5:22:aa:98:73:a6:72:9f:c6:06:76:39:ff:f4:
2f:b0:b5:8b:67:c5:e6:24:fa:1b:1d:f6:33:cd:65:a0:d9:9b:
ad:0b:f7:22:94:e2:c5:99:1e:1d:12:1d:f6:37:27:96:f7:4e:
7a:62:20:45:f0:5a:08:5c:13:4e:66:d5:0e:53:71:e6:77:73:
fb:12:f6:2b:f7:13:24:98:44:ee:45:c5:45:e8:a2:b0:ff:38:
01:47:bd:00:5b:de:f9:bc:75:00:40:9f:0e:9f:eb:52:8f:56:
d3:4e:a2:8e:f5:e6:c7:56:e9:a0:46:0d:36:9d:7d:4d:1f:76:
d3:12:ea:fe:8e:77:0d:bb:7e:a5:e3:89:e9:fc:f6:29:cc:e1:
99:b5:e1:a5:42:aa:06:39:e4:8e:57:57:c9:08:f6:72:66:93:
e6:2a:15:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:41 2026 by rpki-client