Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143505.roa
File: AS143505.roa (raw, json)
Hash identifier: XjQFCfZ7Sxsh71/3yWyQIO9wrTsD8W8i47FoIPFjLQc=
Subject key identifier: DF:16:E5:26:63:3B:77:E2:5C:E4:75:59:CE:C6:E3:C8:A1:B3:B9:47
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 126890DFDE99B72262801E6F1F93D17BFC23344E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143505.roa
Signing time: Fri 22 May 2026 02:47:54 +0000
ROA not before: Fri 22 May 2026 02:42:54 +0000
ROA not after: Fri 21 May 2027 02:47:54 +0000
asID: 143505
IP address blocks: 240a:a357::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:68:90:df:de:99:b7:22:62:80:1e:6f:1f:93:d1:7b:fc:23:34:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:54 2026 GMT
Not After : May 21 02:47:54 2027 GMT
Subject: CN=DF16E526633B77E25CE47559CEC6E3C8A1B3B947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:84:d5:8b:66:10:93:bf:b0:c5:ef:5b:9a:
f3:fb:79:00:08:67:53:ca:cb:40:c6:e3:e6:a3:cf:
23:4a:c8:91:0e:89:a8:eb:1b:ac:9f:0c:6d:e8:1e:
ed:ec:d7:c7:d3:fd:ca:69:0a:85:1a:d1:10:ed:1b:
08:b4:fb:a5:3d:f6:ec:99:9e:57:96:92:5c:55:17:
05:d6:8a:06:53:d8:78:c6:8a:dd:8a:a4:b7:8a:c1:
38:4e:9b:68:c0:05:bf:46:f4:62:8d:bc:5a:8d:6d:
1b:5d:a5:d4:23:d2:70:dd:c0:7d:8b:78:22:8d:ab:
b2:a2:b4:95:c8:bf:c0:62:3b:be:eb:e7:73:fc:53:
6e:4e:6d:ab:91:0c:c7:22:3c:30:52:34:b0:1f:ad:
45:74:20:ab:41:40:3a:f2:85:d0:26:ae:70:3b:aa:
35:86:3d:5d:e7:45:4b:4e:3f:74:7b:2f:a9:ed:ea:
d9:b3:81:82:4e:31:da:b5:0a:e6:04:4d:ff:9c:31:
91:83:fa:e7:f3:ca:7d:be:da:90:05:35:f3:b2:0c:
6b:25:ed:b1:e8:11:f5:17:8c:e5:4e:75:33:2e:ee:
3c:b9:35:41:b0:12:1e:d4:0e:21:57:81:a2:4e:a8:
8a:98:7e:cb:93:1b:b6:c4:d8:82:4d:53:66:97:07:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:16:E5:26:63:3B:77:E2:5C:E4:75:59:CE:C6:E3:C8:A1:B3:B9:47
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143505.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a357::/32
Signature Algorithm: sha256WithRSAEncryption
61:10:ea:f3:9e:59:f8:b6:3a:3a:95:f5:07:91:67:bd:b3:29:
59:23:ec:6e:d8:5b:bc:d9:31:49:9d:86:e3:73:dd:73:93:5d:
4a:45:41:dc:57:63:89:4b:cd:de:91:eb:c8:3d:6a:90:00:c9:
8f:20:a0:33:66:50:74:06:fe:97:65:65:a9:bb:da:ba:95:e4:
6d:ac:f6:33:22:ff:f2:ca:87:40:33:08:1c:3d:d7:56:2e:be:
38:42:29:c8:be:fd:dc:5a:f6:2b:cc:b0:a4:75:62:61:67:ab:
d5:99:43:aa:e6:f6:a0:57:1c:4e:ae:16:d9:da:9a:cd:bc:e9:
8c:4d:aa:eb:38:47:d4:bb:2a:44:2d:da:4e:13:ba:93:11:98:
eb:17:a0:83:70:da:44:95:dc:55:34:a2:7d:59:40:04:0f:88:
3a:f3:7d:4f:91:ea:fd:4b:61:ca:0b:9a:8a:be:0f:7a:4c:70:
d5:37:2e:54:b0:51:ea:d9:39:0d:3f:a2:d0:bd:7f:42:77:64:
c0:e7:e4:5a:34:12:f8:67:3a:ce:06:d6:d1:49:57:25:f7:d0:
9f:0d:72:b1:29:c2:d9:5c:c1:5d:3e:f8:54:6a:0b:83:b6:c4:
07:d7:3c:af:3c:e8:80:77:56:e5:8c:63:75:89:ba:77:bf:32:
a8:1b:da:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:35 2026 by rpki-client