Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143515.roa
File: AS143515.roa (raw, json)
Hash identifier: we1w9J+bjyTvNvJS9nK3OpE9eFA8cZTcxrYNgH30c04=
Subject key identifier: A9:49:6C:16:BA:EE:33:6E:CC:87:08:8F:DD:D9:BC:2C:2C:09:50:49
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 34713C6B0C009833CCFF0C63A6EE05776C7A0F2D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143515.roa
Signing time: Fri 22 May 2026 06:46:10 +0000
ROA not before: Fri 22 May 2026 06:41:10 +0000
ROA not after: Fri 21 May 2027 06:46:10 +0000
asID: 143515
IP address blocks: 240a:a361::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:71:3c:6b:0c:00:98:33:cc:ff:0c:63:a6:ee:05:77:6c:7a:0f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:10 2026 GMT
Not After : May 21 06:46:10 2027 GMT
Subject: CN=A9496C16BAEE336ECC87088FDDD9BC2C2C095049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:c6:aa:17:28:f9:44:8d:1e:14:93:08:4e:
a9:02:63:5f:f9:27:fc:99:b1:9b:8a:6e:78:f1:a4:
46:ce:4a:23:7f:11:20:c8:3a:4b:58:ab:2f:41:c4:
e8:5a:e2:03:f0:e3:1f:38:3f:66:0a:f9:ed:b2:0b:
11:94:1c:d1:1a:4f:70:a0:e0:d5:dd:13:96:29:ad:
11:8c:13:6d:12:42:1d:25:20:6d:6c:27:84:fa:ba:
19:cb:31:7c:fc:93:39:65:b1:c4:6c:3f:4a:92:03:
52:81:e7:99:87:0a:d9:5b:cb:89:ed:0c:85:39:53:
14:2b:01:3b:fa:56:26:3b:3e:9f:c5:e0:f2:2a:ff:
8d:30:3d:a2:a7:99:e8:67:b0:6a:5f:cd:53:a3:d6:
51:b3:9d:67:36:d1:ec:3a:47:9c:8f:b3:3a:bb:76:
28:af:1a:30:2f:7c:a4:a0:b6:75:f6:bb:d0:43:ed:
6f:56:e1:16:62:3a:52:a4:07:de:b0:16:08:4c:0d:
6a:d8:af:bc:09:04:cd:28:55:e0:fb:c4:7d:77:ab:
5a:ec:f1:1a:a4:97:a4:03:97:d6:06:44:7f:f4:92:
6f:07:d6:a6:87:da:81:7e:5e:19:0c:02:e5:13:c9:
96:9a:e3:41:7a:41:54:1f:86:66:55:61:24:e0:a1:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:49:6C:16:BA:EE:33:6E:CC:87:08:8F:DD:D9:BC:2C:2C:09:50:49
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a361::/32
Signature Algorithm: sha256WithRSAEncryption
9d:9d:9c:3b:96:ad:f5:f4:7c:a6:4f:4c:78:43:8c:99:bf:7e:
2b:eb:b2:1e:7b:3e:f5:50:14:16:17:55:71:03:bb:a9:cd:42:
15:05:b0:7d:10:75:11:dc:57:b0:56:b0:84:7e:15:55:83:51:
65:9a:6b:92:27:c7:0c:64:87:a8:3e:c6:7d:1d:f5:93:e3:96:
c6:0e:01:5c:e6:84:f0:12:9d:36:b9:56:20:8d:9d:f3:38:00:
5a:87:92:db:00:a2:90:bc:2d:a7:7a:a3:9e:f0:e2:b3:2f:42:
49:ad:21:a1:f7:da:75:c2:1c:e5:63:63:94:4c:6b:5c:1a:52:
d0:9f:01:b1:2d:c7:5a:87:39:c8:8b:fa:55:5f:ca:0e:71:2e:
3b:63:72:5c:ee:f1:58:bd:6c:76:04:16:58:86:75:2c:c0:ac:
17:b1:e0:86:9f:f5:99:89:6a:a8:5b:0e:fd:80:90:7b:3f:e9:
98:97:4a:d2:c5:da:46:5c:d2:b9:62:2e:5c:74:aa:46:7a:ee:
58:49:d0:50:e5:48:74:11:0d:07:9d:1b:f6:5e:36:48:52:93:
44:51:6d:8c:53:20:18:10:0c:a2:30:3d:07:b3:4c:65:70:5d:
21:32:73:cb:51:b6:b9:83:86:56:9c:1d:9b:69:00:f9:44:82:
7b:8b:cb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:27 2026 by rpki-client