Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143527.roa
File: AS143527.roa (raw, json)
Hash identifier: l3Kg05qR+H1TVHDDX6uMdv7K7hYBpaMR1m9VHh7NQj8=
Subject key identifier: 03:55:73:AD:E5:9B:A6:4D:94:C2:58:FC:4C:AA:22:E9:91:A0:A0:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2DD40249040B2FCAA0168A8979C03390328D73B2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143527.roa
Signing time: Mon 25 May 2026 06:28:18 +0000
ROA not before: Mon 25 May 2026 06:23:18 +0000
ROA not after: Mon 24 May 2027 06:28:18 +0000
asID: 143527
IP address blocks: 240a:a36d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d4:02:49:04:0b:2f:ca:a0:16:8a:89:79:c0:33:90:32:8d:73:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:18 2026 GMT
Not After : May 24 06:28:18 2027 GMT
Subject: CN=035573ADE59BA64D94C258FC4CAA22E991A0A01C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:63:1c:0f:09:5d:77:b1:f2:a1:8c:85:96:
de:93:37:21:79:c3:27:51:69:a2:29:11:31:f4:1d:
62:14:9d:2c:83:a1:31:32:5a:b1:f4:40:aa:3d:8a:
0f:b7:53:a1:bf:6c:b6:41:f6:48:70:c5:d3:42:d2:
f1:34:e3:db:7c:2a:e0:55:2a:7c:a9:e4:c3:8b:d8:
0a:df:53:75:2c:bf:6d:f4:64:f0:e8:19:7a:ba:e2:
8b:e2:cf:d2:6c:25:75:8d:82:c4:24:fc:cc:90:18:
29:89:21:2f:3e:d3:60:ac:c7:5e:57:ec:5f:0d:da:
3b:a6:db:b6:88:0c:e8:f5:b5:96:64:54:a3:ca:d9:
ec:f3:0e:7f:c3:18:75:11:d8:34:68:6e:73:25:c4:
b7:23:04:69:89:5f:b5:74:a2:2a:6c:de:1c:48:ca:
21:16:7b:af:36:9b:21:ae:74:6f:93:c5:7f:10:eb:
0e:48:eb:86:85:07:df:2c:00:32:05:a2:b1:a4:ae:
2b:7c:ae:a8:76:88:4a:b5:90:d1:da:b7:7e:d7:6b:
93:2e:59:6b:03:c9:41:c9:9d:a4:23:28:b8:ab:6c:
cd:95:bf:17:8b:0c:93:47:49:b1:8c:ef:c0:b6:8f:
22:b5:02:08:b5:46:96:1a:8a:66:5b:d0:1a:bc:c4:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:55:73:AD:E5:9B:A6:4D:94:C2:58:FC:4C:AA:22:E9:91:A0:A0:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143527.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a36d::/32
Signature Algorithm: sha256WithRSAEncryption
00:02:f1:49:0b:f8:13:02:b1:15:9e:4f:77:63:85:5f:47:4e:
00:31:ee:6c:31:b6:3e:c9:17:c9:80:6b:c2:6d:fb:2a:72:55:
2a:f2:e0:a0:b3:b8:ea:96:25:36:ce:8f:16:53:cb:c4:f3:44:
c4:58:da:53:25:47:45:c0:62:8a:34:04:63:36:eb:27:33:a7:
74:dd:fe:37:4d:25:40:94:12:6d:63:ff:f4:44:96:11:ba:76:
d3:5e:43:2b:dc:f6:7b:0a:91:78:23:54:bb:e8:25:c8:6b:ca:
a2:c8:9e:a0:96:21:3c:27:a2:9b:ae:41:0d:00:ef:c5:86:a9:
45:c1:9f:ae:3a:37:84:b3:93:ac:9f:6c:eb:05:11:5c:d5:5e:
b6:ed:36:27:9e:ed:dd:6c:c9:dd:aa:b1:43:67:87:95:5e:06:
eb:1c:a9:81:f7:ae:de:2d:c1:1a:f6:98:7d:7f:19:4a:ee:47:
4c:5f:7e:3f:c2:7b:1e:c0:a3:60:e7:d1:5c:00:a9:e4:df:91:
94:d1:fd:eb:fd:c5:bc:3c:bd:b5:a5:e6:0b:94:d4:dc:7e:08:
db:99:ab:47:56:9b:1f:da:b6:56:d4:fc:dd:f8:5d:28:ff:e4:
ce:cc:06:7d:be:0c:48:1b:8f:6a:61:37:3e:fa:31:c6:4a:7a:
bd:71:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:06 2026 by rpki-client