Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143504.roa
File: AS143504.roa (raw, json)
Hash identifier: rKx3YM9V4mveGnicVKJAML0dm0tinwpGieBjrH+G7Pw=
Subject key identifier: 4F:76:1E:5E:16:1B:D2:04:AA:B2:D5:40:E6:93:5C:02:04:A3:7B:AE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 40A66F19146DD6E4E76F5662C4A9A771059D985B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143504.roa
Signing time: Fri 22 May 2026 06:46:15 +0000
ROA not before: Fri 22 May 2026 06:41:15 +0000
ROA not after: Fri 21 May 2027 06:46:15 +0000
asID: 143504
IP address blocks: 240a:a356::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a6:6f:19:14:6d:d6:e4:e7:6f:56:62:c4:a9:a7:71:05:9d:98:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:15 2026 GMT
Not After : May 21 06:46:15 2027 GMT
Subject: CN=4F761E5E161BD204AAB2D540E6935C0204A37BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:a1:0b:fb:a0:5d:2d:cc:62:12:a2:4c:3f:
8d:4c:b6:13:95:06:a4:69:35:53:a8:78:c2:c3:c8:
04:55:6a:6e:68:27:50:b9:7e:cf:f3:4e:fb:7e:84:
b4:e2:8f:10:af:c0:6a:04:7d:8c:35:b1:34:31:1c:
39:e4:c7:20:9d:17:cf:9f:14:f6:7e:b2:ca:98:15:
13:81:bf:4d:2d:e5:bb:c9:5f:26:c0:2e:01:85:cf:
99:18:20:45:f1:f5:63:79:83:d8:39:d5:8b:25:9f:
d7:7f:83:48:da:7d:82:18:47:e2:65:14:28:59:e3:
7f:47:aa:7e:fe:15:a7:e4:f0:13:24:6b:b7:df:a6:
e6:ac:cf:da:43:f4:84:c0:95:2c:1d:33:a6:10:8b:
a9:06:24:da:42:46:ea:5d:cc:cc:56:8a:2c:59:f7:
59:b6:51:9a:98:4d:36:36:ec:5f:00:d5:c9:6c:1b:
cf:4b:f2:8a:f3:82:77:f5:08:b3:6d:dd:f7:64:cb:
38:e1:b2:62:d9:4a:c8:79:95:62:88:ac:3d:e8:44:
08:21:20:3d:8f:96:b5:e3:2b:24:68:85:6d:f7:85:
b8:40:50:59:35:0d:33:cb:00:cd:94:af:79:66:02:
3c:d8:9c:61:7b:26:36:f0:96:7e:f3:07:4e:e4:4a:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:76:1E:5E:16:1B:D2:04:AA:B2:D5:40:E6:93:5C:02:04:A3:7B:AE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143504.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a356::/32
Signature Algorithm: sha256WithRSAEncryption
2a:6b:43:b8:a5:f4:08:45:e1:c4:bf:37:59:ca:b1:e5:70:2c:
8a:a2:89:3f:23:55:cd:54:b5:4a:a7:69:0d:86:a3:82:1c:45:
08:bf:d8:89:57:73:11:9c:0f:06:e0:79:5d:dd:ee:b5:0a:75:
8c:cd:84:6c:eb:3c:cb:b7:84:98:b7:a1:91:98:d9:ef:e4:d6:
4a:9b:04:e6:11:cd:97:30:15:a9:48:8b:de:c1:5d:e6:f4:95:
a2:c7:d0:46:02:c4:04:d7:c3:0d:25:72:f4:fd:7b:fd:2e:b6:
67:a2:7d:86:e1:43:ae:80:d0:a5:38:f1:00:36:59:7d:00:25:
ed:3d:0a:39:23:25:3d:25:0d:4a:93:48:85:9f:06:2b:c0:fc:
46:f7:ff:05:a1:55:c1:0b:86:2c:3e:88:a2:8e:79:0f:df:94:
d0:69:2d:97:0a:4e:c5:f8:13:24:90:ec:0c:fc:ef:43:a2:fa:
28:eb:0d:9c:63:24:52:a5:dd:6a:1b:47:98:fe:cd:94:1b:a0:
e5:6b:a2:ce:0a:aa:eb:de:e4:c1:f7:56:4f:f8:e3:3d:37:f0:
3f:66:dc:94:95:1c:19:03:e3:7b:b1:3f:7a:54:9e:f1:cd:1c:
b2:d4:5c:bc:88:88:24:06:50:fe:b8:b7:5c:ae:41:f4:69:90:
e0:6f:7d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:59 2026 by rpki-client