Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143530.roa
File: AS143530.roa (raw, json)
Hash identifier: qLOhqJLj6ahFXb6Ki15zCB87AfjCF6W0mAuy6gnsNNY=
Subject key identifier: 7D:41:17:6C:E5:DA:E9:58:2F:C9:49:62:96:7A:68:62:5C:25:44:4B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 387DC853AA48AC5C1D124F0E49376901DDE2DE99
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143530.roa
Signing time: Fri 22 May 2026 06:05:20 +0000
ROA not before: Fri 22 May 2026 06:00:20 +0000
ROA not after: Fri 21 May 2027 06:05:20 +0000
asID: 143530
IP address blocks: 240a:a370::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:7d:c8:53:aa:48:ac:5c:1d:12:4f:0e:49:37:69:01:dd:e2:de:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:20 2026 GMT
Not After : May 21 06:05:20 2027 GMT
Subject: CN=7D41176CE5DAE9582FC94962967A68625C25444B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:40:96:ca:1f:b8:78:e6:1b:5d:e1:e4:e3:
3c:b6:89:94:9e:7a:69:0b:12:e8:0e:60:96:dc:25:
b5:8f:1d:05:83:5d:57:26:9d:57:a9:5a:7e:1f:45:
a6:ac:ee:55:c7:8a:2b:93:49:61:3a:74:6e:c9:df:
26:51:10:96:22:61:57:8a:38:1a:7f:fd:2d:58:b9:
45:84:dd:b9:20:b1:03:25:1a:28:ef:a8:f6:5b:81:
95:2d:d0:4c:52:89:9f:90:7b:d7:3e:d7:2c:5a:1f:
3d:d9:d3:5f:00:b4:d3:78:bd:51:87:2b:a1:5a:ae:
2a:fe:0e:46:ca:ea:2f:a2:73:8d:00:a8:48:80:e2:
e0:7e:7d:79:72:db:73:3c:1a:68:74:74:78:fe:20:
1f:d3:81:67:75:d8:95:fd:84:e3:85:7a:2d:74:70:
b6:2a:00:e2:d1:3d:6a:30:c0:39:f7:e1:62:50:a7:
e8:8d:8a:3f:6c:12:ae:00:24:3c:69:ac:2b:a7:e0:
c6:49:00:9d:34:a2:2e:37:a4:1e:bd:4d:4e:c1:7d:
e5:06:5b:de:29:44:b2:95:95:37:97:6b:40:61:79:
82:89:0e:32:5b:6a:bb:64:39:45:46:02:b4:fa:c5:
cf:35:0c:e5:48:76:b7:1c:17:01:9e:85:a7:19:27:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:41:17:6C:E5:DA:E9:58:2F:C9:49:62:96:7A:68:62:5C:25:44:4B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a370::/32
Signature Algorithm: sha256WithRSAEncryption
89:0e:6d:95:4b:b8:66:3c:9a:ea:8e:b1:20:ea:f9:51:df:f4:
65:eb:d1:fe:f4:15:c7:9c:50:06:f5:8d:48:4b:dc:da:92:60:
98:c4:2a:14:a2:86:f5:39:a4:2e:86:0f:00:4d:fd:3c:1a:ad:
77:8f:14:9e:8a:a0:15:c6:a1:39:f5:df:d6:85:1a:2f:d4:42:
4d:14:fe:70:ff:dd:5b:20:37:17:2a:a2:82:8e:19:5b:9c:33:
18:7b:27:be:33:27:7b:39:f0:ee:35:b6:a7:d9:f3:38:a0:58:
d3:37:50:6b:de:6e:2c:5e:a7:81:85:f7:11:8d:90:d1:57:38:
aa:b1:ae:65:ba:07:89:e2:d3:b5:94:ea:22:ea:31:07:6b:34:
81:98:46:f3:e5:0d:11:ce:03:d1:9c:d2:81:54:c1:7d:f6:ed:
1b:43:48:94:9a:0e:07:bc:29:be:b9:2d:87:06:9d:4d:ce:d0:
92:ae:c6:6b:de:0f:08:45:80:7a:3b:82:e3:20:02:35:91:d1:
d2:c3:c2:63:56:cb:8c:12:eb:7e:f6:3d:62:f4:6e:76:e5:59:
51:95:14:f2:b4:87:92:c0:66:89:ad:d5:aa:95:21:2e:da:30:
cb:7e:ba:18:66:01:8d:25:e0:69:13:2e:91:0f:55:ba:aa:0a:
4b:15:3e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:51 2026 by rpki-client