Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143542.roa
File: AS143542.roa (raw, json)
Hash identifier: 1H2BNX8oIMhm7mfTBXRDAlDkC+vbYVaBVOOplv6ozHY=
Subject key identifier: 21:76:69:A0:50:E3:E1:F4:06:14:22:00:37:21:28:E6:F5:BC:77:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1347D0CB91CECC36EECB0F0D88E50F6BF78C4B88
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143542.roa
Signing time: Fri 22 May 2026 07:09:19 +0000
ROA not before: Fri 22 May 2026 07:04:19 +0000
ROA not after: Fri 21 May 2027 07:09:19 +0000
asID: 143542
IP address blocks: 240a:a37c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:47:d0:cb:91:ce:cc:36:ee:cb:0f:0d:88:e5:0f:6b:f7:8c:4b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:19 2026 GMT
Not After : May 21 07:09:19 2027 GMT
Subject: CN=217669A050E3E1F406142200372128E6F5BC7783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:7c:68:95:88:cb:2d:64:d3:94:f1:cd:29:
71:c1:9b:70:55:8f:21:6e:a1:33:8a:57:a3:6d:08:
48:4d:2f:58:c2:4b:5d:ec:0e:39:1b:28:54:55:e8:
4a:af:fa:21:99:05:14:22:78:ba:5a:5a:e2:df:88:
cf:cc:02:d6:04:cc:d3:e9:d4:52:6f:5f:65:12:54:
d7:04:2f:d1:7c:94:ec:79:b6:65:f3:8e:ec:cb:ac:
13:b8:ef:f6:8f:80:68:76:70:09:69:cc:b0:6b:79:
35:66:92:ee:5d:07:f6:13:9e:4c:1a:3a:28:e9:bb:
25:94:3d:be:a7:57:84:9f:ab:a5:cf:b7:49:d7:c9:
42:4e:5d:99:28:e3:b6:76:e6:5f:36:6c:3e:a2:d3:
d6:df:d9:58:7d:7a:5f:d8:25:d6:ec:92:cd:8e:a3:
37:6c:68:8f:fd:83:a1:49:95:30:c9:7a:a2:79:cd:
c8:5a:07:3f:07:9e:d5:64:e5:19:3f:97:ef:f7:b0:
c0:71:2f:2e:28:9a:b1:fc:3b:67:7e:bf:33:99:ea:
36:86:22:6f:50:4a:c8:e0:19:05:5e:fe:1c:9a:2e:
b0:66:5e:76:69:ee:da:be:dd:5b:da:48:a2:45:da:
c6:8d:c3:bf:9f:81:e2:73:fd:82:6d:5e:1d:fa:17:
1e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:76:69:A0:50:E3:E1:F4:06:14:22:00:37:21:28:E6:F5:BC:77:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a37c::/32
Signature Algorithm: sha256WithRSAEncryption
7a:b8:0f:ed:dc:ea:1c:98:e6:7b:2f:9e:bf:01:45:d8:5c:e0:
73:0d:e9:f3:46:01:42:c0:e1:4e:94:c9:33:73:fd:f4:06:78:
65:e0:24:97:bf:8c:fd:0e:4d:37:8c:bc:57:2d:aa:db:98:05:
cd:95:1d:d9:71:36:c5:c2:9c:c5:ab:5f:c2:ae:48:f8:a3:c3:
29:f0:7f:51:e0:36:99:91:57:5f:9e:fd:22:df:d3:d5:79:88:
0e:1d:9d:cf:f9:b3:9c:53:e2:51:58:41:b5:cc:58:f2:c0:a6:
52:62:b0:74:f4:20:63:3d:c7:2d:3a:53:39:15:ca:43:94:ea:
c0:2c:d2:c7:53:c2:4f:e6:3b:c9:82:c6:b2:20:55:26:91:3b:
aa:3a:b0:93:d1:67:ab:fb:b7:8c:5c:ac:1b:0d:0c:e7:10:d5:
a0:f9:47:ff:bb:c6:55:4f:19:77:dd:4d:45:61:ac:2b:83:b2:
a6:b9:2a:eb:9e:8d:20:b6:28:c8:a4:67:9a:29:5e:83:4a:0c:
56:a5:3c:1e:cd:fc:95:40:e5:58:7c:2a:90:ed:db:57:88:eb:
fb:9d:24:52:32:53:a7:f2:e2:07:6a:d6:32:4d:c3:69:2b:db:
2f:db:3f:e2:35:ff:d7:45:5d:5e:50:67:70:55:d3:0f:01:90:
26:7f:0b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:34 2026 by rpki-client