
Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143524.roa
File: AS143524.roa (raw, json)
Hash identifier: PTnUkDPoUNAJgdCi3kJyu8RR1ryjGVdEj26C+tvtEQs=
Subject key identifier: 2E:7B:BC:51:62:81:2B:75:AE:AE:67:1F:15:C4:09:1A:BC:77:3C:FA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4CB589AEA5C112C462B29717EBFE5CEEEFC38105
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143524.roa
Signing time: Mon 25 May 2026 03:19:50 +0000
ROA not before: Mon 25 May 2026 03:14:50 +0000
ROA not after: Mon 24 May 2027 03:19:50 +0000
asID: 143524
IP address blocks: 240a:a36a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b5:89:ae:a5:c1:12:c4:62:b2:97:17:eb:fe:5c:ee:ef:c3:81:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:50 2026 GMT
Not After : May 24 03:19:50 2027 GMT
Subject: CN=2E7BBC5162812B75AEAE671F15C4091ABC773CFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:70:38:cf:4b:c6:a7:7c:7a:f4:6d:d8:0b:
5d:44:c8:1c:d6:eb:34:cb:5d:79:e1:b5:a5:af:1c:
99:e5:1a:c6:e4:07:43:21:9e:ad:48:e8:f6:6b:b1:
d6:2c:4e:a3:72:2d:0d:83:58:b5:08:1d:81:ef:fd:
95:c0:10:29:13:f5:c6:23:70:bf:98:ca:36:03:14:
7d:a5:86:c5:e5:c9:69:1d:fb:1b:01:60:d0:29:6a:
e4:f2:29:e8:f3:4b:be:bf:15:ff:53:f2:c9:6f:23:
57:11:80:4a:61:7f:0c:11:d2:9d:43:4a:05:84:45:
66:d9:d7:2e:0a:e2:87:37:3d:94:b0:8e:78:ec:09:
cc:29:5e:bd:56:bc:6a:fb:07:72:a5:89:23:a4:5c:
1d:5a:b8:60:e6:85:ab:43:94:68:63:3c:98:e7:91:
ad:70:c4:da:26:f9:c2:85:c5:1c:55:66:ac:a7:fc:
30:a9:fc:18:bb:8e:18:17:a6:87:f9:a0:a4:e5:53:
78:87:da:d8:81:1c:ad:db:1d:1b:7f:14:7e:fc:06:
a0:6d:c6:3a:08:85:e8:cd:6d:30:cb:fa:39:fb:f9:
0a:87:f3:58:91:1e:5f:c1:00:15:a3:ee:bd:28:e7:
c2:52:f2:f6:33:25:b5:21:7c:67:1e:3a:4c:5d:0a:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:BC:51:62:81:2B:75:AE:AE:67:1F:15:C4:09:1A:BC:77:3C:FA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143524.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a36a::/32
Signature Algorithm: sha256WithRSAEncryption
a1:d9:30:b4:3f:1e:71:58:51:d1:b4:a4:6c:76:27:3b:8e:00:
45:90:b2:7b:34:cc:20:45:a7:f8:d1:a8:da:6e:63:64:99:89:
d2:cf:bc:e3:2c:f8:6f:7d:d4:33:ff:a4:3c:1f:d4:20:9c:a4:
39:48:87:a2:9c:60:ed:92:69:82:80:3e:a7:08:e5:ca:df:1e:
d2:52:b7:43:1a:42:61:4d:bf:b9:61:1d:dc:bd:21:a3:d0:3b:
e2:85:2a:d8:73:cb:f4:a5:60:3e:db:22:7b:a5:c4:4a:ea:ea:
08:25:0a:b8:4d:39:ca:48:ce:60:cb:d3:4e:20:f9:0d:45:de:
8b:14:00:e6:75:c6:26:ca:d4:50:ce:f5:b7:5d:68:8a:60:b8:
51:7c:8f:f2:76:e2:5f:62:d0:19:ba:d5:2f:9c:54:9d:1f:18:
d1:37:37:b8:31:91:0d:bb:b4:d3:f4:42:7b:2d:ef:b7:db:ae:
46:29:51:ca:fe:59:18:cf:13:c9:ba:49:5e:95:1f:c7:6f:30:
18:47:f1:38:3e:7b:14:72:2e:10:47:ce:be:81:4d:86:eb:d8:
e0:b5:77:b2:10:c6:c7:fa:5a:36:02:06:fe:4b:d6:76:5f:0c:
ec:75:bb:e3:30:50:57:1c:77:d7:0e:e4:1a:42:e4:8b:bf:8e:
1c:17:af:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:49 2026 by rpki-client