Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143545.roa
File: AS143545.roa (raw, json)
Hash identifier: BktEnLMPig7kyHYV32Kju8oguRpT8HY3r+HlXytuKIs=
Subject key identifier: 31:4C:6A:76:8D:BA:60:F8:27:D3:ED:F3:D1:C0:1C:43:C3:9B:30:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 316D0BF59703CDF5BE0D73567FDA90F7AC54FD25
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143545.roa
Signing time: Tue 26 May 2026 03:17:00 +0000
ROA not before: Tue 26 May 2026 03:12:00 +0000
ROA not after: Tue 25 May 2027 03:17:00 +0000
asID: 143545
IP address blocks: 240a:a37f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:6d:0b:f5:97:03:cd:f5:be:0d:73:56:7f:da:90:f7:ac:54:fd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:00 2026 GMT
Not After : May 25 03:17:00 2027 GMT
Subject: CN=314C6A768DBA60F827D3EDF3D1C01C43C39B3017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:99:e5:19:4c:d1:48:4c:b6:32:45:61:88:
cc:25:be:b5:81:59:7a:60:6e:29:70:5b:bd:c4:4e:
0a:12:e1:98:fb:a9:66:4b:e7:7f:01:6b:e5:74:89:
4a:d6:d1:ec:92:c9:b1:68:bb:8b:18:75:52:8a:b9:
79:49:70:2e:2d:4b:dc:4e:ce:d0:83:13:ab:c7:a3:
46:5f:96:ae:47:93:5a:bc:78:75:41:25:06:76:61:
3b:79:c7:b8:b8:f7:94:00:c1:e2:45:a9:d8:64:fa:
d0:ae:89:7c:b0:8f:fb:1a:1d:ce:21:d4:ed:e3:08:
73:21:2d:35:98:82:f2:e5:a7:99:a3:fc:af:23:48:
62:80:cb:30:27:5c:bb:c6:95:4f:b0:bc:b5:5a:42:
e8:02:6c:37:41:af:dd:18:29:34:a8:8a:18:f4:26:
c7:e4:b4:5a:a3:9b:da:23:59:73:9f:5e:88:0c:2e:
77:9f:7c:a1:18:8e:5b:96:d6:dd:8b:b6:b4:1b:f9:
32:b0:e1:cb:2c:ba:54:a0:bc:0e:00:bd:9b:15:79:
d6:25:e5:74:9f:ed:57:a2:ca:bf:69:ee:58:d8:92:
cd:7a:ab:13:d7:6e:3e:ba:df:47:e9:e6:a7:36:e2:
6c:55:9a:93:96:e4:ea:5f:04:a1:0e:f1:b7:36:d4:
61:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4C:6A:76:8D:BA:60:F8:27:D3:ED:F3:D1:C0:1C:43:C3:9B:30:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143545.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a37f::/32
Signature Algorithm: sha256WithRSAEncryption
90:43:b3:f3:4e:f8:2b:f5:c6:f1:21:7c:22:e3:42:e6:59:1f:
59:dd:2b:17:75:5a:4c:d4:31:3c:de:18:38:aa:b5:e5:00:27:
22:44:15:69:8b:e6:40:ab:36:98:0a:1f:6d:5d:19:14:0f:24:
63:ec:d9:e5:42:e2:e4:68:ad:01:06:19:0f:5a:a6:11:93:98:
02:ab:88:ea:5e:58:5d:30:0b:2e:25:f5:36:c0:23:d0:0d:60:
06:14:fd:6f:98:ae:6a:8e:30:54:d7:8a:fb:96:a1:b4:c3:a5:
45:74:f2:5e:98:29:7e:88:50:a7:48:a2:d1:53:17:f5:81:9e:
a8:a1:36:b2:4a:6b:a7:f3:3c:5d:61:3e:e1:54:55:87:6a:86:
43:bf:39:33:5d:6f:7a:a6:d7:d0:71:c4:d4:9d:df:70:88:9b:
42:bd:d5:77:e7:13:8e:d4:e6:fb:da:c0:91:98:ca:36:b1:8d:
5a:5d:56:42:ce:c1:cd:72:5f:e8:4e:6f:da:39:10:90:85:99:
b3:a6:62:4e:27:fe:5c:71:96:93:53:ad:56:4b:7e:98:ce:89:
6f:64:1e:3b:98:c5:95:04:c1:ba:eb:88:bf:85:2e:2a:20:c3:
03:73:26:e6:b2:9a:90:86:8d:1c:a8:ca:4f:f8:b6:0e:f5:e4:
f9:f1:23:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:58 2026 by rpki-client