Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143509.roa
File: AS143509.roa (raw, json)
Hash identifier: SclwTbf5u2hNeDj2pMfbFjWHzg3LrC+VU0b5JYoxzOY=
Subject key identifier: E8:5C:94:B3:41:52:3B:96:BD:AD:2B:66:0D:71:5B:FF:0C:5E:D6:53
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0D101126D8274BC885DED0CF0B846CEADB35E564
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143509.roa
Signing time: Fri 22 May 2026 07:40:58 +0000
ROA not before: Fri 22 May 2026 07:35:58 +0000
ROA not after: Fri 21 May 2027 07:40:58 +0000
asID: 143509
IP address blocks: 240a:a35b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:10:11:26:d8:27:4b:c8:85:de:d0:cf:0b:84:6c:ea:db:35:e5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:58 2026 GMT
Not After : May 21 07:40:58 2027 GMT
Subject: CN=E85C94B341523B96BDAD2B660D715BFF0C5ED653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:01:8a:ed:23:84:cd:12:76:ad:cc:ae:8e:
99:44:87:33:23:25:13:1a:6c:68:8e:f6:96:50:7d:
55:7a:ad:98:11:92:c3:a3:90:72:08:50:ce:e6:90:
e4:3e:c4:0b:b0:2b:58:84:5e:5c:fb:58:7e:8b:36:
c8:78:1c:a7:0a:46:59:82:99:c8:4c:1d:c2:5c:19:
24:cf:31:c7:3c:cb:9d:b4:40:fb:42:60:04:e3:6d:
73:88:26:15:a6:c5:5d:cb:63:ce:57:ae:98:7f:75:
36:5b:77:d0:db:c3:03:21:41:29:6e:ea:4b:fc:5a:
8e:d8:e7:58:6b:ea:63:a3:eb:73:21:cc:6f:e3:25:
69:42:2a:b5:f8:3b:fa:b5:4d:ed:b5:17:04:c1:b9:
4c:33:4c:bf:14:4d:3e:ac:4a:56:9a:b6:f6:6d:3d:
12:a4:0a:1a:cf:a4:76:ba:0c:d8:81:15:c9:11:cd:
0a:86:3e:73:6a:21:b2:da:53:7b:5d:e2:c7:12:e4:
e7:a4:2f:b2:5a:88:83:0d:b3:64:a1:b1:ba:7f:7f:
a8:39:1c:4d:4b:66:8e:97:3f:d4:ab:40:ec:20:79:
79:25:1f:5a:88:37:ad:e5:26:0e:bb:9c:b8:18:c3:
c4:47:03:c0:00:3e:70:91:a6:2d:bf:3a:c4:37:12:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5C:94:B3:41:52:3B:96:BD:AD:2B:66:0D:71:5B:FF:0C:5E:D6:53
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a35b::/32
Signature Algorithm: sha256WithRSAEncryption
0f:45:18:e9:d8:14:a5:c8:4a:82:3e:ac:18:50:67:28:79:55:
10:44:69:e5:bd:37:8c:87:5a:33:61:74:06:f1:63:09:36:d4:
87:b9:ce:b0:c5:0f:2c:6a:fc:52:b5:9b:a3:c3:cb:63:aa:40:
fd:e2:b2:3d:0a:13:f0:8f:f0:c8:4c:e3:92:b9:80:55:29:0e:
c8:7d:b2:93:b8:a0:6c:21:85:7b:d3:b1:b3:4f:ab:1a:a0:6b:
4f:12:29:03:48:2a:62:21:e4:77:ca:86:f3:59:14:11:58:a1:
e7:90:a3:5b:ab:93:8b:03:81:ca:a0:4c:97:93:4f:4a:92:f0:
45:31:cf:dc:9f:42:c9:8e:12:1c:0c:d0:c2:bc:c2:e8:5a:b7:
40:08:3d:6b:8a:20:b7:22:e3:90:ae:b4:4d:8f:63:bb:99:3c:
34:64:84:ea:75:be:f7:09:3c:58:08:fd:cd:43:08:31:2a:2d:
c8:94:67:1e:9a:2e:9c:2c:76:97:4b:58:b1:0f:e1:e6:43:c0:
d5:70:eb:f1:7b:9d:78:3a:c4:e4:5c:d0:16:31:b7:2a:f6:4b:
97:f7:38:1e:28:da:87:81:20:f7:58:bd:1c:58:c9:92:76:7d:
2d:e4:3e:33:53:09:c7:de:31:37:ea:27:72:9d:94:ad:2d:67:
8c:b1:7d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:55 2026 by rpki-client