Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143536.roa
File: AS143536.roa (raw, json)
Hash identifier: l6cjEPAvjGk43o9MLm17kVAfgFtiQHTIWlFHuZnWwlo=
Subject key identifier: 88:14:57:E7:5F:CF:A9:92:86:61:A4:24:E8:73:D6:A5:A8:4B:DD:9A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 26310EEB4997C235F5621F42EA87D92C4C339F40
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143536.roa
Signing time: Fri 22 May 2026 06:05:29 +0000
ROA not before: Fri 22 May 2026 06:00:29 +0000
ROA not after: Fri 21 May 2027 06:05:29 +0000
asID: 143536
IP address blocks: 240a:a376::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:31:0e:eb:49:97:c2:35:f5:62:1f:42:ea:87:d9:2c:4c:33:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:29 2026 GMT
Not After : May 21 06:05:29 2027 GMT
Subject: CN=881457E75FCFA9928661A424E873D6A5A84BDD9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:32:df:5e:fb:64:f9:08:b5:8a:16:2a:a4:
11:d9:2c:a6:94:50:de:1f:65:02:e4:e2:60:c5:65:
b8:34:4b:19:97:08:db:14:87:90:14:cf:27:37:f5:
82:18:5b:2c:42:43:b5:f5:dd:2d:56:0e:7a:69:86:
ff:b9:54:b8:b1:5a:dd:ae:5c:68:35:c3:03:52:13:
df:fa:97:9e:72:7b:1e:da:bd:af:8a:b8:78:72:41:
31:83:d3:37:4c:71:1c:08:69:fe:4f:9b:a3:6a:1a:
b3:14:38:8f:c4:4f:58:43:eb:a0:88:86:0a:3d:2d:
36:11:19:c1:8e:02:81:eb:83:fa:4e:34:e1:6b:fd:
d5:c5:e7:1f:86:08:e3:50:ed:84:ac:aa:5d:44:76:
46:db:3c:ba:d2:03:11:76:10:ba:a6:73:fc:8a:22:
b9:0d:44:0a:aa:68:b2:26:dd:e1:a7:9f:26:07:53:
4a:ed:72:40:00:07:e4:f9:f9:cf:57:31:8a:6f:d7:
c7:56:95:cd:5f:0f:ba:7b:79:ba:43:cb:f6:66:ae:
4c:82:54:28:73:09:65:1e:8f:16:66:e7:f7:cc:d3:
e5:ba:96:1c:f4:14:95:05:9a:89:58:12:44:cd:d0:
d3:f9:68:dc:cf:7c:3f:9d:65:25:47:99:7e:56:81:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:14:57:E7:5F:CF:A9:92:86:61:A4:24:E8:73:D6:A5:A8:4B:DD:9A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a376::/32
Signature Algorithm: sha256WithRSAEncryption
25:f9:d6:75:87:86:53:bf:02:04:e0:b9:09:3a:2d:43:28:14:
83:0b:1c:70:bd:41:c6:f3:cb:0e:ae:0e:74:d9:fa:ee:31:ab:
ce:a2:f3:f5:da:6a:de:17:35:ed:3c:4e:7c:21:3d:12:c9:b9:
9e:8e:e8:2f:95:6a:cb:79:74:4e:ee:c9:af:cd:63:1c:01:d5:
c2:5d:12:d5:5e:14:fd:87:f7:bc:53:57:66:ba:75:0d:63:84:
e2:59:13:19:e0:50:28:8b:94:70:aa:81:b6:52:a8:b0:d8:5a:
f5:0d:88:3c:cb:34:7e:4f:70:d5:97:ad:06:01:c2:4c:cc:bd:
48:ed:90:05:7d:90:9a:02:1b:e8:7a:cc:d5:53:a0:ca:7a:11:
f0:d2:e3:76:1d:bd:f0:39:05:3d:d1:25:c6:05:9c:32:97:87:
1c:24:aa:d7:31:8a:51:2b:89:8c:d3:1f:22:97:d6:ea:70:dd:
ca:fe:54:88:e5:f8:b7:ab:d4:75:89:81:14:2a:69:e5:5a:92:
e9:9c:76:4a:5e:e3:48:6f:6c:76:1b:c2:86:46:dc:2a:94:75:
0c:e8:22:b3:4c:60:67:1a:82:7e:77:68:5c:a1:84:d0:65:c4:
a8:46:9d:6f:ed:75:f5:98:af:1f:55:eb:fc:c3:94:cf:2d:70:
bf:4f:1c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:37 2026 by rpki-client