Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143514.roa
File: AS143514.roa (raw, json)
Hash identifier: B0fmKSq17xlkZ5cy0s0vD2rtJAFE6aFkqEiowkRmDbc=
Subject key identifier: 31:7E:0B:58:5D:F5:25:C6:E2:C5:16:3C:F5:60:6A:A3:5E:BC:B7:FD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4819920E6487196BB06025CD2C48CC944C52F339
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143514.roa
Signing time: Fri 22 May 2026 06:05:12 +0000
ROA not before: Fri 22 May 2026 06:00:12 +0000
ROA not after: Fri 21 May 2027 06:05:12 +0000
asID: 143514
IP address blocks: 240a:a360::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:19:92:0e:64:87:19:6b:b0:60:25:cd:2c:48:cc:94:4c:52:f3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:12 2026 GMT
Not After : May 21 06:05:12 2027 GMT
Subject: CN=317E0B585DF525C6E2C5163CF5606AA35EBCB7FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:20:b7:ef:f3:4e:31:54:80:4e:27:d7:32:
9f:46:74:b7:a3:e6:b4:5e:e7:76:e0:4c:cf:01:6a:
3c:38:f9:3a:ed:0d:95:13:fe:e3:e5:62:37:36:e6:
c5:d3:db:77:a3:fb:16:18:0c:29:b1:fa:79:9e:98:
f6:20:cb:e4:61:03:33:f9:09:ea:7f:40:5a:90:57:
4a:99:34:a8:a0:60:94:bd:1a:2e:62:e3:8f:4e:78:
d0:16:d5:ca:a2:d6:be:4c:25:e2:60:53:62:eb:97:
11:5b:7b:44:5b:b0:2c:60:96:2b:c0:5f:bc:0e:ae:
db:cd:45:0d:3e:b9:ef:4b:c1:43:61:ea:86:73:15:
e0:31:f1:de:58:3c:f0:b9:ca:41:25:90:ad:13:be:
37:a7:bb:25:b5:2a:fa:b9:27:30:1b:65:e7:92:fa:
2a:41:53:84:97:cb:b4:10:de:62:be:c1:85:fb:b7:
3b:4c:e1:eb:61:47:2d:ca:1a:0c:43:61:7b:93:31:
31:aa:0a:1b:ae:6f:f0:44:3a:68:3c:ad:f6:ff:47:
ba:5d:1f:7d:8f:be:e6:9e:47:8c:c8:95:84:dc:bc:
9d:4d:20:c7:64:a4:c0:b8:24:c6:9d:e1:fe:a9:33:
8b:9f:94:cf:7a:62:70:4a:0b:28:dd:1d:ad:1e:db:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7E:0B:58:5D:F5:25:C6:E2:C5:16:3C:F5:60:6A:A3:5E:BC:B7:FD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143514.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a360::/32
Signature Algorithm: sha256WithRSAEncryption
94:b3:9f:38:5a:5f:08:5e:3d:50:db:09:6b:e6:b2:a6:22:70:
31:e4:d0:c0:db:e8:3f:48:24:69:65:e6:93:d1:5c:92:ee:ec:
21:74:6d:ed:9d:68:95:cb:02:42:cf:fa:b5:ea:64:6e:0c:46:
72:58:bb:86:d6:3e:91:ca:0b:ba:71:6e:1e:eb:02:6e:bf:4c:
38:31:89:24:02:5f:14:42:37:00:3c:7b:18:47:8f:a7:25:87:
64:c6:f3:ae:25:48:ef:69:72:06:fc:9b:db:87:12:bb:e2:33:
95:21:0c:fc:1b:fb:b4:7c:d4:27:4c:e7:6f:53:be:15:ac:1c:
c2:55:4b:fb:bb:93:af:32:9c:3f:65:c4:8c:07:29:b8:5e:75:
f9:72:b4:98:a2:34:10:bf:03:4d:ce:41:da:6f:2b:8e:6d:7a:
6e:36:9f:ac:52:33:54:a0:dd:13:3d:c3:40:3e:ca:f5:be:af:
89:30:2b:d0:77:9b:51:52:72:fd:b2:9d:6a:d2:3b:29:7d:d7:
cd:d9:b1:ad:32:2a:55:53:c5:71:ee:55:a8:db:4b:ed:1a:ff:
34:ae:e4:a2:23:72:8e:6f:b1:0d:11:e9:4e:a9:96:8e:bc:c3:
91:57:1f:e4:77:2c:b8:0e:67:db:fb:c9:4c:b3:5a:f0:24:ba:
f0:ad:8a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:59 2026 by rpki-client