Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143540.roa
File: AS143540.roa (raw, json)
Hash identifier: IF2EjDifxGNkkTjmeM7IIrnNcjtwDLgBrT9yi0AWxso=
Subject key identifier: 2C:55:BC:FD:17:0D:00:AA:C4:D6:4C:54:0E:BD:5F:ED:4D:2A:FF:6D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 15431955717660D9120F134632798CE6B42B425E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143540.roa
Signing time: Tue 26 May 2026 02:35:02 +0000
ROA not before: Tue 26 May 2026 02:30:02 +0000
ROA not after: Tue 25 May 2027 02:35:02 +0000
asID: 143540
IP address blocks: 240a:a37a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:43:19:55:71:76:60:d9:12:0f:13:46:32:79:8c:e6:b4:2b:42:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:02 2026 GMT
Not After : May 25 02:35:02 2027 GMT
Subject: CN=2C55BCFD170D00AAC4D64C540EBD5FED4D2AFF6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:29:c6:aa:cd:81:3b:f6:68:e3:40:67:a8:
22:cd:09:72:94:6e:97:61:a1:6f:a5:32:b4:01:f9:
8c:ba:4a:33:46:b1:a4:7f:6e:81:3f:85:61:a3:6a:
a3:1e:25:af:99:e9:88:57:9b:c1:61:d0:97:fb:15:
6c:b2:6b:96:6c:62:66:22:ec:d5:bd:0e:b2:69:d7:
92:a6:c3:a4:d1:42:67:f3:6d:a4:ff:ed:e3:c0:d8:
50:5c:fd:ed:22:29:08:f6:51:ac:5c:45:f7:8a:33:
0b:44:05:de:7e:a3:dd:d2:40:7b:7a:90:b6:b0:f9:
09:19:86:a3:ac:99:c4:e2:07:dd:5c:89:f3:5f:c8:
2f:34:4d:ea:ec:cf:6b:49:a7:8e:1b:9b:d1:0f:66:
b8:a3:a9:dc:f6:8a:78:41:ec:55:57:a7:41:78:25:
e0:59:8c:69:f5:b5:3a:06:5d:c5:79:da:f0:b5:46:
58:e1:8a:ca:4d:ed:0d:43:07:6c:9f:09:29:a3:21:
91:47:bc:dc:78:28:38:e6:b2:27:d1:cb:8c:e8:5d:
a3:81:c9:99:03:7e:83:fe:aa:d6:e4:41:ab:c9:7d:
03:ad:a8:ec:40:af:07:ea:67:98:91:d3:e7:5b:49:
16:7f:e8:0c:28:b2:50:03:d2:91:43:f0:98:ff:f5:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:55:BC:FD:17:0D:00:AA:C4:D6:4C:54:0E:BD:5F:ED:4D:2A:FF:6D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143540.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a37a::/32
Signature Algorithm: sha256WithRSAEncryption
ac:e8:63:d1:13:d2:71:d3:16:5d:ad:c4:c5:2e:01:07:32:30:
5c:d7:72:93:c3:aa:78:e7:79:ac:85:28:cc:00:26:e6:ff:7b:
bb:68:d2:eb:e1:24:2d:b5:75:94:24:f4:ed:3c:92:84:1f:fc:
a5:70:12:79:5e:b7:72:6b:c7:9f:a7:5f:09:ee:63:40:2c:b4:
a8:2d:66:9d:97:a8:ef:f3:d9:18:dc:8d:97:8e:95:d3:ac:74:
47:fb:25:3b:20:f1:4d:6c:e3:5b:2a:70:28:7d:54:58:68:d8:
be:13:76:33:ef:f1:58:94:3e:89:df:0e:3e:8a:1b:11:f6:42:
95:28:c6:67:09:2f:f9:33:a9:47:23:1d:cb:67:14:9f:11:79:
8e:1a:d9:63:25:c2:75:2d:14:9e:53:b2:d4:7a:9c:3b:f2:54:
e2:a8:fa:85:b4:5b:d9:f3:ad:86:80:40:68:a6:1f:1e:df:21:
ac:17:cd:2f:92:d9:4f:fb:ea:77:6b:ac:20:88:1d:ee:70:53:
b5:71:86:9e:a6:10:ca:fa:2c:c1:53:f2:bc:23:92:ce:4d:c5:
1e:49:e2:a2:af:20:c9:d8:64:70:a1:b4:42:1e:ed:fc:7d:41:
07:86:f4:4a:6d:5f:14:e1:95:ad:b2:37:4f:3b:0c:19:0c:af:
00:11:25:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:28 2026 by rpki-client