Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143529.roa
File: AS143529.roa (raw, json)
Hash identifier: XqjfEqQPh5gTepyO0nJm4p0VEcyqqXdDaW6xdaIoSU0=
Subject key identifier: FF:8B:44:44:63:DE:33:6A:D7:32:AA:AC:4B:D6:87:7A:94:3B:DA:C4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3110CA3964540AF5DEFB75CAC622300506B50CC5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143529.roa
Signing time: Fri 22 May 2026 01:50:09 +0000
ROA not before: Fri 22 May 2026 01:45:09 +0000
ROA not after: Fri 21 May 2027 01:50:09 +0000
asID: 143529
IP address blocks: 240a:a36f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:10:ca:39:64:54:0a:f5:de:fb:75:ca:c6:22:30:05:06:b5:0c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:09 2026 GMT
Not After : May 21 01:50:09 2027 GMT
Subject: CN=FF8B444463DE336AD732AAAC4BD6877A943BDAC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:11:58:21:41:0c:74:d0:b4:cb:bb:01:9d:60:
4f:3c:ec:d3:15:0a:6c:48:34:47:05:9a:b0:2c:3f:
db:8b:21:5f:95:99:ae:5b:a5:fd:41:60:a6:83:39:
73:ea:bc:72:c1:81:66:5e:94:4a:e7:66:0f:47:6a:
2f:5d:a4:4c:ff:28:9e:ca:33:45:b7:1b:14:74:3f:
d3:9c:8b:8a:18:96:eb:13:3e:1d:cb:c5:b8:4d:a2:
48:80:77:8e:a1:4f:e5:a0:70:c4:35:2a:aa:94:c5:
f8:8b:89:af:cc:fa:26:08:9a:36:70:07:63:6d:6a:
3e:d8:c1:83:7e:2b:30:de:c9:51:75:5b:f2:25:e9:
f7:f1:af:a8:2d:29:0d:9b:ed:0d:c3:f3:d9:55:e9:
92:a3:76:58:21:cd:a1:e8:bc:63:4c:0c:b9:89:ad:
fa:63:1d:e9:19:d5:51:3e:1a:cf:b3:bf:7e:e8:1b:
8b:66:35:25:2b:70:4c:26:cc:b6:d1:7d:72:bd:87:
c4:7c:e8:98:15:5a:84:83:1c:9d:18:24:ea:98:0d:
f3:49:b6:de:62:5b:89:32:52:a8:20:67:21:60:01:
ca:c8:14:d4:3d:32:01:49:41:26:1c:e7:6a:ae:0b:
ef:63:fc:55:41:72:af:6d:6a:7d:aa:05:78:af:28:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8B:44:44:63:DE:33:6A:D7:32:AA:AC:4B:D6:87:7A:94:3B:DA:C4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a36f::/32
Signature Algorithm: sha256WithRSAEncryption
31:89:22:c5:6f:65:14:ca:75:3b:42:5d:43:02:7d:ef:78:c3:
ee:66:6a:5e:e8:d6:c9:68:46:01:74:69:81:ea:d9:a2:e8:32:
83:97:f3:f8:15:48:7d:4d:a5:ee:7b:0f:ec:64:ba:2f:57:fe:
01:62:b2:29:51:70:28:a8:55:1f:9c:ed:4d:eb:97:be:42:0f:
2e:1f:d6:0f:c3:e4:d0:17:f7:cb:93:11:07:5c:43:91:41:bf:
65:82:8c:a2:3c:7e:77:52:17:25:8d:3d:d7:5a:a0:5f:e5:64:
56:7b:26:87:f9:cb:46:fb:7c:f0:48:d9:19:98:f7:c1:3c:ee:
7f:44:46:21:b6:d5:c1:58:39:e9:ca:56:10:1f:df:25:46:7d:
db:ef:80:0b:92:d3:a0:3f:1a:fa:ee:43:15:03:cd:a4:c0:c2:
70:7f:3e:29:2c:85:4b:e4:7b:ba:3f:e0:46:e8:b4:10:d5:20:
9e:d5:ab:7f:c3:c4:3c:1a:6f:40:25:02:3c:95:50:a8:44:48:
22:4c:6f:3f:ae:de:6c:2d:74:82:01:2d:c0:be:d4:b1:ea:11:
2d:ae:4b:23:c2:56:7c:f3:04:aa:f7:1f:3c:00:1d:f1:b8:04:
74:b9:26:d9:5d:a4:48:9d:47:c4:81:0a:cb:02:84:f0:11:1e:
53:1f:0c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:24 2026 by rpki-client