Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143503.roa
File: AS143503.roa (raw, json)
Hash identifier: DrZv6NbqlNyVl8mxXxvkDPh6KJlbWCJGT9pDLPwJPOs=
Subject key identifier: B4:AA:0B:1D:7F:59:D1:E9:C9:C2:37:70:2F:0D:A8:FF:4A:88:9E:23
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5E6F41B771B8874D1CA924078507FB34A8EEFB30
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143503.roa
Signing time: Mon 25 May 2026 01:50:58 +0000
ROA not before: Mon 25 May 2026 01:45:58 +0000
ROA not after: Mon 24 May 2027 01:50:58 +0000
asID: 143503
IP address blocks: 240a:a355::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6f:41:b7:71:b8:87:4d:1c:a9:24:07:85:07:fb:34:a8:ee:fb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:45:58 2026 GMT
Not After : May 24 01:50:58 2027 GMT
Subject: CN=B4AA0B1D7F59D1E9C9C237702F0DA8FF4A889E23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:41:d9:d5:67:77:e0:b5:be:cc:6d:ff:40:
79:19:13:ff:3d:b5:3f:72:4b:e5:e1:1b:3a:6e:22:
33:b2:be:00:eb:c0:f6:dd:75:31:58:71:79:4a:2e:
a4:c7:92:fa:70:1d:f8:49:b4:17:af:df:92:2b:4e:
96:49:da:9f:aa:a3:fd:99:ab:28:90:6a:56:0c:54:
73:9b:99:4d:c1:c4:90:56:e9:4d:e0:ff:3b:0c:d0:
fd:d8:de:c0:53:f0:f7:7c:07:a8:d4:c0:52:dd:1a:
b4:a6:eb:13:5b:49:3f:d9:82:57:10:2d:52:f1:c4:
43:b0:d9:5c:cc:01:f7:10:ea:4f:ad:d9:9b:07:c8:
f9:52:59:b4:b2:ba:4a:09:e0:bf:6a:47:4e:ca:87:
7b:c7:3d:29:42:61:04:58:73:fe:60:ee:51:1b:54:
03:85:6f:17:80:0b:3a:a1:43:65:fc:12:f9:a7:af:
64:08:7a:07:bb:ad:8b:6c:ad:5c:f6:3b:d0:a9:d8:
77:82:81:05:10:75:b3:22:f4:aa:12:d6:d3:49:2f:
57:97:04:df:11:b4:44:83:7a:3d:a9:4b:13:3c:27:
6e:2a:3b:db:7b:61:ec:8a:86:02:ac:30:80:5b:fb:
85:e6:82:53:19:67:ea:76:64:b2:0e:7e:44:83:48:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AA:0B:1D:7F:59:D1:E9:C9:C2:37:70:2F:0D:A8:FF:4A:88:9E:23
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143503.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a355::/32
Signature Algorithm: sha256WithRSAEncryption
10:e2:e5:9e:8a:40:96:0c:68:e6:a5:8e:c4:af:57:36:ab:f0:
db:56:42:e0:06:13:9e:84:7b:1f:65:41:7b:a1:fd:0c:a0:46:
e2:93:0b:37:6a:b1:86:ab:57:2a:93:8e:20:81:95:de:0a:61:
eb:2b:29:f9:03:ec:a1:f5:71:b5:ab:61:a4:10:c9:13:6b:39:
30:e7:13:c9:fa:80:b3:02:cc:b5:2a:b0:ce:4b:43:81:ca:18:
b2:2d:24:a9:b1:d4:6d:69:dd:ab:3b:45:30:5f:5b:4d:26:3f:
dc:bf:4c:c6:c2:6b:6e:ec:d9:d2:d7:99:bc:5a:29:fc:ee:41:
43:26:32:da:08:a6:c4:c1:ac:c3:e6:90:ee:9e:60:87:f9:3f:
98:7d:bc:5c:ee:aa:bd:07:98:67:fe:39:9a:e5:94:31:38:80:
15:b1:d2:36:24:6a:bf:47:9a:ba:57:d2:a7:3d:f4:f0:b3:a8:
02:51:9a:2d:36:f9:82:36:d7:78:69:de:70:3d:f9:9c:fe:54:
1f:46:77:6e:df:37:c5:77:a3:89:94:27:25:f1:4a:05:7c:ac:
b3:c0:04:d2:3d:27:e2:a6:93:b3:48:10:60:f3:ba:ba:0c:c4:
c6:c9:02:66:90:51:c3:ca:3c:1f:00:52:9e:9a:a5:ff:55:26:
58:36:55:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:37 2026 by rpki-client