Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143508.roa
File: AS143508.roa (raw, json)
Hash identifier: rjfZvgaOoYAPGl38cuEyhxOgW6L1ocbi+3QYBVJkKfw=
Subject key identifier: 55:F7:56:5A:ED:76:3F:81:F1:80:D3:68:A7:30:7F:BB:10:F3:AB:A0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3024D650A1B52E96DAE3F91F9A3E926442EACD62
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143508.roa
Signing time: Tue 26 May 2026 06:12:56 +0000
ROA not before: Tue 26 May 2026 06:07:56 +0000
ROA not after: Tue 25 May 2027 06:12:56 +0000
asID: 143508
IP address blocks: 240a:a35a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:24:d6:50:a1:b5:2e:96:da:e3:f9:1f:9a:3e:92:64:42:ea:cd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:56 2026 GMT
Not After : May 25 06:12:56 2027 GMT
Subject: CN=55F7565AED763F81F180D368A7307FBB10F3ABA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:65:a3:6e:43:6a:88:7c:99:76:d4:65:f2:
e5:7f:cd:c9:80:6a:ce:22:1d:89:98:84:4c:6c:59:
c3:a8:00:2c:a2:be:3a:f8:1a:c3:b0:4b:67:51:20:
ec:90:f1:64:5d:ae:75:ae:b6:ce:81:ed:a0:91:5a:
75:ea:cf:b3:c9:86:09:61:32:b9:db:af:ff:0b:d8:
12:bc:9f:8d:99:3d:e3:90:68:07:83:a0:73:51:89:
be:44:a3:35:c0:9f:e5:63:5e:8d:4b:e8:74:00:63:
d9:67:f6:86:05:fe:5d:aa:c9:1a:be:73:c9:2d:c6:
c1:e1:65:11:38:ac:51:5a:17:3e:91:84:7e:c0:b7:
37:7a:6c:ee:30:66:2e:82:21:be:6f:d2:d8:92:8a:
34:f4:f8:d3:29:75:29:02:ec:67:8f:16:6c:94:62:
52:b1:bc:ed:66:d5:ee:75:43:dc:54:c8:50:ae:09:
44:bd:81:77:76:2e:33:10:11:b0:7c:35:63:c6:5a:
37:fe:17:bd:20:73:64:b2:2f:48:20:e8:34:4d:81:
f6:e6:59:00:75:f5:31:b5:af:7a:53:80:b5:9d:c0:
b3:60:bb:01:9c:64:17:c0:dc:11:41:28:0e:68:b2:
99:26:86:25:c7:e6:2f:e9:b1:bf:ae:2c:6b:e9:e0:
4e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F7:56:5A:ED:76:3F:81:F1:80:D3:68:A7:30:7F:BB:10:F3:AB:A0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143508.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a35a::/32
Signature Algorithm: sha256WithRSAEncryption
b4:ea:f4:fa:d3:f1:79:b0:a2:47:5d:8d:ae:84:b6:5e:a2:16:
fd:8b:4e:ed:cc:cc:fd:d0:6f:40:2a:6f:e1:40:a1:7c:f6:72:
e5:00:5a:51:84:f4:21:60:70:bc:f1:3f:4d:cf:e5:02:50:45:
26:4c:20:73:e8:1a:03:b5:93:bb:e1:84:d4:8c:e6:45:ed:d5:
33:10:ad:7d:01:07:72:28:af:33:43:59:86:25:bf:14:95:de:
4b:c5:ab:7f:b4:cc:ae:ae:62:7a:57:a4:02:e0:8a:2f:40:53:
97:45:94:ad:52:e1:b3:e5:a5:8b:c3:cf:01:76:f6:b0:12:7c:
7c:9f:69:1e:f4:cd:85:33:b5:24:96:be:b5:6e:de:b7:00:06:
ac:1f:96:ec:18:a2:d6:92:7e:dc:91:6f:60:ea:d6:22:63:2e:
03:1b:ed:d8:cb:09:fd:17:10:0a:23:88:78:c5:71:cd:05:e9:
54:c8:4f:84:c0:1d:41:a8:b6:ae:58:b7:52:a5:5a:0f:7a:b8:
08:48:b5:5a:0a:20:f3:e3:83:1d:f1:4f:c5:31:86:87:d7:85:
8a:d9:c1:06:b5:c3:d0:81:7d:9e:c9:25:22:46:e3:97:ef:c8:
30:48:93:9e:1c:05:96:97:28:8f:05:f7:c9:f9:ff:03:a2:d2:
07:be:83:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:54 2026 by rpki-client