Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143517.roa
File: AS143517.roa (raw, json)
Hash identifier: GsUQPcCpMkjFSQeXqyYWFv1BE2/caJxe421J7YUSuqg=
Subject key identifier: 55:1F:67:0F:03:9E:B4:A2:8A:F8:C5:F4:A1:58:A2:06:3D:54:EB:9A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 44C4F39FC4D7EEDDE415C3A866CE92A0403191B0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143517.roa
Signing time: Fri 22 May 2026 07:40:47 +0000
ROA not before: Fri 22 May 2026 07:35:47 +0000
ROA not after: Fri 21 May 2027 07:40:47 +0000
asID: 143517
IP address blocks: 240a:a363::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c4:f3:9f:c4:d7:ee:dd:e4:15:c3:a8:66:ce:92:a0:40:31:91:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:47 2026 GMT
Not After : May 21 07:40:47 2027 GMT
Subject: CN=551F670F039EB4A28AF8C5F4A158A2063D54EB9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:37:b8:4b:67:78:53:5c:79:a6:89:01:ec:
5e:b7:46:da:e1:8b:fa:16:49:ba:04:31:5b:5b:ff:
47:7a:25:47:6f:4b:7a:c4:e7:84:b3:1c:7a:52:19:
1a:59:79:c0:af:6f:0e:59:05:87:78:03:4f:a1:f9:
c2:cd:a2:30:8e:8f:1d:2f:1b:88:ba:35:eb:af:71:
0a:53:6c:6f:e5:57:8f:d8:59:83:56:1f:77:5e:93:
65:79:1c:70:3d:91:17:54:de:30:46:80:a1:87:55:
09:b1:fc:d7:00:7b:c9:57:d7:2e:8c:00:ab:16:04:
52:9d:73:3f:fc:a6:b4:80:c0:50:c4:9c:82:43:43:
bf:8d:9d:8f:f1:8d:a0:2a:aa:e3:e5:c4:a3:0d:5e:
3f:97:d3:82:7f:6b:aa:78:67:9e:43:ea:c0:60:5f:
df:90:f8:60:22:87:9c:77:f6:92:fa:cd:94:e3:64:
5a:4e:52:da:ee:4b:61:67:61:b1:cc:53:85:6a:6e:
c1:4e:5a:66:51:6a:0e:02:25:68:6f:7e:91:7d:52:
58:4e:7c:15:c9:c7:09:b0:25:65:ac:95:0d:07:3a:
4f:d0:0e:70:fd:80:49:ba:e8:3a:5e:48:00:35:30:
1d:b9:ea:de:ef:7b:78:da:4c:9c:f3:b5:96:3b:a7:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1F:67:0F:03:9E:B4:A2:8A:F8:C5:F4:A1:58:A2:06:3D:54:EB:9A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a363::/32
Signature Algorithm: sha256WithRSAEncryption
5b:ac:de:d4:92:65:ae:76:f0:5a:38:41:31:d4:8e:bc:08:09:
de:15:d9:12:e4:b6:a5:d6:ee:18:2d:f5:2d:3e:3b:f3:8a:3b:
ef:98:3e:d3:d5:26:5a:d5:c0:3f:2a:73:61:e0:50:52:1d:b3:
54:63:bb:5e:8d:62:a5:f1:b5:dc:51:c5:39:93:76:8a:7e:d7:
e6:6e:38:20:5d:04:b8:d6:4b:d4:77:1e:5a:f8:58:b7:8c:36:
9b:67:3d:4f:67:31:aa:23:a8:6a:e1:4b:cc:94:00:30:9f:14:
48:2e:17:65:2c:73:17:cf:0e:83:0a:4a:be:02:f1:15:80:b5:
cc:db:d8:1c:f4:ce:a1:e4:45:e5:9d:0a:eb:1c:e5:18:28:2c:
39:dc:14:89:b4:19:ba:1b:93:3e:0c:4b:8d:11:b8:32:66:84:
dc:ce:f7:cb:21:4b:69:44:72:cc:22:84:6f:4d:8e:dc:72:18:
40:15:a3:bc:ed:75:b1:c4:65:8c:a2:b8:c8:ef:9b:f0:d6:a8:
af:ec:7e:36:0a:b3:6c:5b:31:f6:64:36:77:28:9a:36:82:68:
85:e4:88:09:f0:2f:ea:b3:52:49:15:df:2b:86:22:48:37:5f:
ee:16:b2:56:5e:ed:7a:b9:f9:29:5f:c7:16:e4:37:b7:e1:d2:
3b:03:2c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:08 2026 by rpki-client