Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143506.roa
File: AS143506.roa (raw, json)
Hash identifier: 9WU/b52UTXHVsROTUGxADmxaw23ycWmRLxrg80YD/xs=
Subject key identifier: C8:40:DB:23:1D:32:5A:A9:07:46:1C:14:57:F9:1D:3D:21:40:F1:6B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D06BEE4196784227557574E8D326C28788D6528
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143506.roa
Signing time: Mon 25 May 2026 03:19:37 +0000
ROA not before: Mon 25 May 2026 03:14:37 +0000
ROA not after: Mon 24 May 2027 03:19:37 +0000
asID: 143506
IP address blocks: 240a:a358::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:06:be:e4:19:67:84:22:75:57:57:4e:8d:32:6c:28:78:8d:65:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:37 2026 GMT
Not After : May 24 03:19:37 2027 GMT
Subject: CN=C840DB231D325AA907461C1457F91D3D2140F16B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:14:0f:c0:d2:1c:61:af:f2:46:4f:7a:f1:
fb:b2:38:fe:26:2a:87:d5:e9:1b:73:2e:ba:b4:14:
d5:cd:48:7d:df:1b:d1:d9:7e:a9:72:99:b2:60:69:
67:36:b0:d6:f0:7e:73:f7:8c:5c:cb:fc:79:b7:ba:
83:44:f1:59:70:be:56:0e:6f:d8:33:b3:59:08:e9:
65:25:09:44:1e:c7:e4:c2:29:73:39:c8:a4:96:fe:
32:89:37:6c:31:78:88:e3:4f:7a:58:9d:2a:47:54:
c0:30:ac:f3:9d:c8:2b:ba:67:e9:2f:ac:ca:74:40:
ab:73:6c:e9:f1:94:14:62:15:d3:58:c0:71:4b:45:
37:3f:05:25:95:7c:0d:95:0e:d1:11:cc:97:1c:22:
dc:83:51:40:1a:ce:9d:26:95:79:88:f5:f6:2e:7a:
2a:ad:af:d9:a8:9d:94:2c:6b:d9:ac:11:ff:a8:a5:
9a:54:ed:6c:c8:21:21:38:73:13:77:c6:51:36:2e:
78:6a:be:45:72:b7:be:a0:6b:a4:2a:9b:3f:20:18:
2f:37:0a:f8:32:9b:b7:c9:46:cc:72:69:31:fe:02:
44:d2:29:a3:1f:2e:9e:01:c0:9e:0d:6b:0e:98:aa:
73:c6:26:a3:05:6f:3c:9a:ca:c9:f0:ac:34:04:7e:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:40:DB:23:1D:32:5A:A9:07:46:1C:14:57:F9:1D:3D:21:40:F1:6B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143506.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a358::/32
Signature Algorithm: sha256WithRSAEncryption
6e:2b:08:e7:2f:a2:d6:34:f0:3e:67:fb:ec:ac:1d:08:43:b2:
50:03:b5:4e:5c:9d:67:73:12:7a:f5:d9:f2:53:34:ea:69:2b:
84:56:16:1c:65:7d:92:f5:e7:b6:9d:d3:8e:83:38:97:9b:71:
54:5a:ea:c2:cb:84:d6:6a:11:c6:4b:8d:f5:e2:76:b6:f5:e4:
62:fe:e7:e3:3b:ce:73:e7:6b:14:ce:92:cb:d6:d5:0b:ee:98:
31:3c:30:bf:67:42:66:d7:4a:01:0e:8c:de:48:bd:5b:62:82:
d0:e2:92:e3:eb:7c:00:59:59:06:24:97:39:8e:8a:c2:2c:bb:
69:b3:6b:af:09:81:d7:e7:10:ba:5b:93:a2:bd:5a:33:38:53:
09:e0:2e:8f:74:9a:5d:95:1a:d2:fd:b1:b6:e0:3c:a0:c4:f1:
16:c7:65:0d:d9:5b:40:d8:d5:ec:79:e2:20:0e:96:12:e7:28:
80:01:88:33:7a:db:b8:d5:04:2c:85:b4:6c:63:23:dd:c7:c5:
80:78:42:53:a5:1f:32:8c:a9:cb:d3:46:2e:d7:71:00:29:2d:
0b:bc:01:d8:c2:e7:4e:68:5a:0d:ec:50:da:98:84:53:af:6d:
e9:38:86:33:7a:5b:57:34:5d:e6:aa:1f:03:ab:9c:05:d9:f3:
be:6d:4d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:56 2026 by rpki-client