Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143518.roa
File: AS143518.roa (raw, json)
Hash identifier: ahYYGLZBrzqFQ3pVWIRzHRfs+Fd5NPqAUlh3DyhTJJ0=
Subject key identifier: EE:3F:DF:6A:FD:A4:E7:3E:8D:23:F6:7C:DF:6C:66:4F:92:0F:CE:AE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 052C2F8C94586FD039B868FBFC4F7E137DFEF57F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143518.roa
Signing time: Fri 22 May 2026 01:50:07 +0000
ROA not before: Fri 22 May 2026 01:45:07 +0000
ROA not after: Fri 21 May 2027 01:50:07 +0000
asID: 143518
IP address blocks: 240a:a364::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:2c:2f:8c:94:58:6f:d0:39:b8:68:fb:fc:4f:7e:13:7d:fe:f5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:07 2026 GMT
Not After : May 21 01:50:07 2027 GMT
Subject: CN=EE3FDF6AFDA4E73E8D23F67CDF6C664F920FCEAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:6d:58:ca:7a:8d:f4:72:53:ec:fa:0b:4e:
92:b4:76:f2:30:83:87:cc:53:2b:d5:38:05:00:cd:
95:70:48:cb:c9:e3:4d:7b:f1:aa:52:19:07:08:9f:
77:37:f1:0b:42:3f:b3:61:e2:1b:27:d2:08:c4:64:
5a:34:c8:e0:f2:0d:3a:35:60:0c:fc:d1:6e:c9:d4:
ac:a4:4f:0d:69:03:4a:1a:92:14:88:a1:c0:db:ae:
b5:c5:e4:8b:cc:0a:80:7a:16:95:d5:96:c3:e1:9c:
5d:4f:12:90:60:d0:2d:f9:8e:fe:fd:46:62:6c:8d:
77:16:62:60:d7:0b:0d:ac:2b:86:71:d5:da:83:05:
43:a8:5e:60:14:f8:e0:2a:45:e8:2a:d5:ec:69:6f:
19:14:18:6b:49:45:c6:11:59:39:78:df:32:03:01:
83:9e:2c:47:e4:26:b1:05:83:37:37:36:07:3c:c5:
5d:f7:fe:3d:64:d9:e6:ed:87:12:b0:ec:50:99:a6:
f9:46:bd:7c:2c:ae:8d:8f:fc:57:0d:7d:25:7d:73:
06:c4:40:56:18:b7:41:d2:ee:26:f9:df:09:e3:c7:
da:cb:0f:24:e7:1a:64:ac:ac:11:ca:40:de:1a:08:
10:e5:10:85:36:60:82:f8:ec:a8:b1:a5:89:3d:04:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3F:DF:6A:FD:A4:E7:3E:8D:23:F6:7C:DF:6C:66:4F:92:0F:CE:AE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143518.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a364::/32
Signature Algorithm: sha256WithRSAEncryption
95:65:fd:03:ce:a1:38:91:ca:7d:22:b1:9f:24:ea:7d:ac:31:
e5:d4:79:8d:ef:a0:3a:44:65:be:04:3f:f6:9c:57:96:38:ef:
9a:71:8d:8d:e9:63:26:c9:16:5a:f4:3d:7d:61:f3:e8:ad:25:
68:c5:83:71:6d:82:d9:06:63:2c:89:a4:32:41:7c:de:69:15:
5c:4c:cd:bd:7c:92:f7:6d:c3:cf:d4:c1:61:03:5e:59:f7:db:
a5:b4:88:b6:c3:61:56:58:04:77:3b:50:c2:d0:65:4e:eb:17:
99:10:da:d5:74:3d:1c:59:fe:6b:44:f8:33:af:10:85:a5:e5:
8b:7f:74:ea:f2:2b:95:53:cf:3d:f5:3a:42:a4:35:9b:ea:57:
7f:7a:d3:3b:67:dc:fe:e5:e2:96:c1:18:fb:26:1e:22:7e:c1:
75:2b:bc:d8:6b:cf:c8:70:f5:79:26:a9:e9:dc:20:2a:45:3c:
dc:f1:c6:70:3a:f2:cd:ea:42:ca:d6:a4:d9:8e:ef:03:64:1f:
13:04:e7:f0:20:d5:cc:7a:cd:0c:7c:75:54:bd:a1:dd:dd:03:
49:d9:ac:73:db:13:dc:20:c7:61:10:91:e7:37:46:c5:97:f8:
ad:5e:c1:b7:e2:db:4a:ae:de:28:90:18:65:b2:00:da:d4:fe:
57:93:ea:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:13 2026 by rpki-client