Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143522.roa
File: AS143522.roa (raw, json)
Hash identifier: poPoS/SXg2e8jkhnMYO1AuqlliakpaFWHonPPx2KEwI=
Subject key identifier: 1D:88:A9:F3:C5:0B:36:25:17:26:A6:00:22:59:28:A6:93:7B:37:36
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 35A141B3F4CBA5618166FFF03F993D3513507590
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143522.roa
Signing time: Fri 22 May 2026 02:47:48 +0000
ROA not before: Fri 22 May 2026 02:42:48 +0000
ROA not after: Fri 21 May 2027 02:47:48 +0000
asID: 143522
IP address blocks: 240a:a368::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a1:41:b3:f4:cb:a5:61:81:66:ff:f0:3f:99:3d:35:13:50:75:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:48 2026 GMT
Not After : May 21 02:47:48 2027 GMT
Subject: CN=1D88A9F3C50B36251726A600225928A6937B3736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:58:43:c5:35:de:ea:ce:c6:b2:0c:38:1c:
59:7d:c1:95:33:ef:78:da:e7:28:c1:ac:a0:fb:b0:
66:25:50:f9:4b:36:c4:d2:cf:50:9d:b2:51:7c:e3:
05:e0:58:68:31:29:79:ea:d4:c5:89:8b:2c:55:f8:
52:3a:b9:86:4c:95:d0:eb:49:02:6c:47:ef:11:d3:
4f:63:60:03:ad:c8:f1:65:13:cb:09:08:b1:54:6c:
55:d3:84:09:9f:eb:53:04:d2:df:3c:e4:79:a4:b2:
c2:22:8a:0b:ce:d0:21:46:f6:f7:30:62:ec:ba:63:
30:3c:3e:dd:d8:ba:e2:52:42:2a:64:9d:cc:a5:77:
33:5b:53:55:51:c0:b5:c9:4e:06:b2:fb:db:b2:57:
a1:42:fd:b9:82:7f:df:85:cd:43:6b:73:f5:24:9f:
d2:e9:39:8a:16:1b:83:5f:86:66:3e:15:bd:9b:e1:
09:9d:79:98:e6:d3:39:93:97:9b:44:95:ec:10:a7:
db:8e:97:a4:6a:42:2b:a1:3f:b0:f2:76:1a:4c:9e:
50:46:e2:0d:3a:13:ce:e8:af:58:7b:8e:69:e7:a4:
18:e7:87:ef:12:10:bc:b0:e5:6a:e6:06:fc:99:a3:
78:cc:27:3d:45:7f:94:11:55:13:66:79:5e:77:56:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:88:A9:F3:C5:0B:36:25:17:26:A6:00:22:59:28:A6:93:7B:37:36
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143522.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a368::/32
Signature Algorithm: sha256WithRSAEncryption
a6:8f:1a:b0:56:d8:ad:61:30:64:64:94:8a:0c:6e:dc:73:12:
84:7a:06:bb:24:44:42:8b:58:e5:c7:72:cd:a8:4a:49:95:bf:
7e:e3:10:f1:99:eb:b2:aa:0a:d9:cd:2a:81:14:50:96:c7:b8:
f3:44:db:32:02:c3:63:03:27:cd:bc:91:99:b5:ac:f6:1f:f6:
00:91:29:0e:fb:e3:6e:d5:43:9c:74:8a:cf:d3:20:e9:48:04:
74:e7:28:f1:39:eb:d2:7f:7b:10:97:08:8c:20:81:71:32:4e:
3f:1c:3b:48:d3:52:9f:f9:16:f0:b6:24:a7:70:87:54:6c:fb:
3a:49:10:36:be:49:3c:35:02:a6:3c:23:d1:24:c1:56:b7:f0:
c8:03:f6:96:81:70:57:66:28:a9:39:7f:95:34:69:11:de:f4:
7b:ab:4b:f2:ca:b9:bf:2c:fa:19:43:6c:ee:d9:60:5a:c8:a1:
a9:04:b1:7b:61:90:ac:65:86:ba:5e:a3:26:ae:7c:55:90:a6:
7a:6d:5f:07:e5:60:c1:e4:7e:28:c9:0a:f7:12:86:68:ac:8e:
74:16:5c:71:13:80:60:40:00:11:14:62:fa:64:b0:00:09:14:
1a:83:98:fa:ce:4d:0d:80:65:ff:da:4d:a2:d8:e0:7a:ae:31:
67:02:87:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:54 2026 by rpki-client