Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143537.roa
File: AS143537.roa (raw, json)
Hash identifier: 6qr3n7UmJMZlq9Zi7ZI+9kUucmJ8/1ZYkaz6MbSKEOo=
Subject key identifier: 3A:F9:38:2F:B3:E3:6B:D5:12:1B:7F:31:96:06:DB:F2:CD:FF:04:39
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4BA1AD3433F87B07C77A2D89304EA10F5773C978
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143537.roa
Signing time: Fri 22 May 2026 06:58:44 +0000
ROA not before: Fri 22 May 2026 06:53:44 +0000
ROA not after: Fri 21 May 2027 06:58:44 +0000
asID: 143537
IP address blocks: 240a:a377::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a1:ad:34:33:f8:7b:07:c7:7a:2d:89:30:4e:a1:0f:57:73:c9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:44 2026 GMT
Not After : May 21 06:58:44 2027 GMT
Subject: CN=3AF9382FB3E36BD5121B7F319606DBF2CDFF0439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:07:f5:55:77:9b:ac:a7:d3:31:40:d4:d2:
08:18:fe:ee:b3:32:ae:34:b3:fc:bc:8c:39:f3:d7:
db:9c:70:d4:0c:56:66:b5:79:ba:17:27:d4:52:3e:
94:19:4d:e8:98:4e:9d:2d:16:74:c3:07:ce:40:2e:
fe:ae:91:07:cf:e9:52:66:a6:5b:32:fe:ac:89:84:
1e:7d:24:f3:29:19:5d:54:e4:f9:ef:f0:c7:43:41:
5d:98:51:4b:e0:25:96:b3:84:cd:c8:23:1a:bd:32:
df:13:14:e8:1c:5f:e3:86:e1:cf:d2:27:28:05:55:
3e:63:e2:75:20:59:4a:f8:d1:dd:72:f7:2e:d7:2d:
47:e6:c4:00:a0:34:2f:e1:00:f5:e1:e8:78:cd:12:
5c:cf:59:e4:b0:60:15:35:c9:c1:84:9a:3f:e9:9d:
9c:ae:3b:55:5e:1b:1d:99:ce:5c:be:d1:81:33:c2:
62:0d:a0:1a:44:52:8f:3b:f6:f2:99:31:06:a7:07:
89:e7:95:73:ef:b7:06:11:54:6c:e2:5e:0f:38:89:
ad:52:de:d9:ae:f9:44:26:fe:03:3d:28:ae:2a:8d:
bf:4b:d3:23:39:a2:99:51:43:e2:22:72:6b:b5:e2:
a2:e8:a9:ef:66:e0:13:af:4c:73:c4:d6:2d:7d:f9:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F9:38:2F:B3:E3:6B:D5:12:1B:7F:31:96:06:DB:F2:CD:FF:04:39
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a377::/32
Signature Algorithm: sha256WithRSAEncryption
5e:ee:97:db:48:80:b7:a1:32:40:94:dd:7a:2a:eb:60:e5:91:
50:0a:73:a5:d8:67:e2:a1:dd:d4:2d:ab:e0:39:9b:0f:7a:81:
ae:14:2f:17:50:30:f0:51:4d:e7:8f:03:a1:92:2d:54:53:89:
03:9b:b0:bd:de:a5:04:48:d1:3f:a9:a4:09:3f:b5:47:12:b6:
de:a7:24:06:4b:04:b4:de:63:36:e9:3e:6e:46:f2:7e:7f:1f:
3c:1e:e9:ae:9c:67:fe:9b:2b:68:45:80:24:fe:10:c2:18:ec:
c0:28:8a:56:49:cd:99:5c:9d:e3:0a:89:c9:e7:92:8b:cb:e5:
5b:79:a4:42:c0:21:53:96:88:65:32:18:65:20:20:7d:6f:4d:
98:2e:eb:64:75:ef:81:34:a7:95:cd:01:62:3e:9e:32:10:f8:
6d:d0:57:4a:3c:e0:16:18:bd:84:b1:10:9f:a1:e3:b5:f0:43:
fc:9f:d7:8d:f8:c7:69:41:5e:71:bb:32:c6:3f:5a:01:9a:a9:
4c:00:0a:6f:73:08:61:d6:d6:ca:a2:53:f5:a9:3a:52:4b:25:
24:2d:09:a8:ad:2f:16:3a:65:b1:29:cf:6b:a5:74:66:d9:95:
5c:35:2d:dc:65:5a:82:4e:28:e2:bb:23:47:5f:e7:5d:f7:58:
96:1d:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:48 2026 by rpki-client