Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143544.roa
File: AS143544.roa (raw, json)
Hash identifier: tbDVS+szs+5rvSpL8ejRC62/9QeoLttr1Xl5QO7AfCc=
Subject key identifier: 88:12:D9:56:53:8B:5A:40:43:C3:79:ED:7D:1F:80:A7:28:B7:45:F2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6B6C59B605F809271CC5B407CC6E3A3E3422293A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143544.roa
Signing time: Tue 26 May 2026 01:13:07 +0000
ROA not before: Tue 26 May 2026 01:08:07 +0000
ROA not after: Tue 25 May 2027 01:13:07 +0000
asID: 143544
IP address blocks: 240a:a37e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:6c:59:b6:05:f8:09:27:1c:c5:b4:07:cc:6e:3a:3e:34:22:29:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:07 2026 GMT
Not After : May 25 01:13:07 2027 GMT
Subject: CN=8812D956538B5A4043C379ED7D1F80A728B745F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:ac:43:3a:32:10:39:d6:e4:44:b1:22:9b:
12:c7:39:c7:fb:ef:e6:ea:f8:99:f9:be:b9:da:f5:
7f:48:24:1a:fb:10:dc:0e:74:83:52:c2:5f:b4:ae:
49:07:19:f4:fa:98:75:eb:68:c1:11:f9:46:61:0e:
55:ae:20:2c:2f:26:e0:39:fe:bc:c9:85:5d:aa:09:
81:23:de:0a:f7:85:69:52:97:d3:fb:4a:f0:b0:6f:
1f:61:84:fb:86:d6:6f:93:cd:2a:07:01:f2:ab:9f:
6f:7f:e6:cd:c1:a9:da:f7:15:28:90:69:f9:d1:76:
90:e3:ca:e8:28:a4:c3:84:85:ca:36:16:89:a5:56:
25:af:cc:40:32:41:c5:bb:e9:85:58:60:a0:f3:70:
b2:8a:79:83:c4:12:8d:60:39:a3:ae:29:44:97:ee:
5a:94:67:69:1e:1c:ef:01:8a:cd:c5:ce:3e:1e:42:
a7:c9:d2:4e:9c:94:27:b8:69:d2:75:16:76:68:30:
9c:d7:66:19:a0:b4:2c:0b:09:7c:be:f1:20:a0:a1:
a6:a7:18:cc:ca:0b:ee:e9:a4:45:c6:c2:ef:d7:b1:
e1:51:9e:24:22:be:fa:ab:ac:51:06:10:89:f2:d8:
35:5c:a1:78:3c:e1:62:ec:d5:33:08:5f:bd:89:c4:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:12:D9:56:53:8B:5A:40:43:C3:79:ED:7D:1F:80:A7:28:B7:45:F2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143544.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a37e::/32
Signature Algorithm: sha256WithRSAEncryption
54:68:15:fb:93:64:61:78:e9:17:f1:68:f5:67:be:f8:31:23:
03:b7:10:24:67:6a:c3:85:12:b4:fa:7a:ef:ca:77:ae:9c:e0:
84:ae:fd:69:11:d8:68:3d:cd:b1:4d:e3:c1:b5:69:c3:e8:63:
19:c5:c2:b1:5e:c6:af:20:b0:37:85:40:34:3f:34:24:ae:75:
c0:b0:8a:fa:72:98:bf:8f:8a:e3:7f:d1:6a:4a:13:8d:1a:5a:
67:d2:1a:31:eb:8e:ff:28:4c:d5:8c:82:5b:ba:dc:ee:e7:ad:
ef:ee:d6:58:90:90:52:9a:96:f3:fc:6c:f4:be:72:ef:95:f4:
ec:c5:cd:16:c7:ff:07:cc:41:bd:ad:a0:33:5a:b4:01:37:83:
9b:28:19:e1:89:94:8c:cd:7b:c5:4a:4c:14:f0:db:f1:4a:59:
1a:b2:a4:43:6f:a8:29:56:1e:66:b0:74:06:36:68:48:c9:02:
47:e9:01:dc:a5:30:e9:85:09:d5:d5:37:95:d7:48:dd:99:89:
62:57:a1:f1:e1:12:e7:5c:12:bc:51:d0:c6:26:4c:49:d2:bb:
4c:85:53:02:b4:60:90:26:5b:e3:68:44:94:ff:15:32:17:e7:
79:43:6a:af:19:6f:67:58:39:26:13:d1:d2:09:46:12:df:6c:
0d:e9:c8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:32 2026 by rpki-client