Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143552.roa
File: AS143552.roa (raw, json)
Hash identifier: gG6Wk8PLhF6A3MyV2vpZXWdgWa6smavkCP07eG7U7BI=
Subject key identifier: 59:24:31:E2:8B:83:A8:4C:C2:38:F3:DE:8C:A9:D0:F7:C2:9A:11:B2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7FE3B05A5AE5729119F6B2A43E3048EE952BC5D2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143552.roa
Signing time: Fri 22 May 2026 01:50:07 +0000
ROA not before: Fri 22 May 2026 01:45:07 +0000
ROA not after: Fri 21 May 2027 01:50:07 +0000
asID: 143552
IP address blocks: 240a:a386::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e3:b0:5a:5a:e5:72:91:19:f6:b2:a4:3e:30:48:ee:95:2b:c5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:07 2026 GMT
Not After : May 21 01:50:07 2027 GMT
Subject: CN=592431E28B83A84CC238F3DE8CA9D0F7C29A11B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9c:23:bf:c0:ef:1c:ad:c3:0c:ef:03:02:aa:
db:fa:b0:65:e6:ee:3a:15:9a:b6:7e:b6:69:cf:9f:
9c:a1:28:f1:57:c1:28:30:3f:44:81:08:01:bc:50:
8a:71:b6:9b:56:50:f4:74:bc:55:3d:f8:48:f0:e7:
28:89:5a:6f:d9:14:1f:04:0f:f1:75:3f:d5:5d:f8:
ed:f1:6e:21:3e:0a:b7:22:60:62:20:33:2c:03:f7:
ed:b1:b2:e4:8f:ea:dd:a5:b4:bb:e3:05:4f:3e:bc:
55:10:da:68:dd:69:30:47:0f:3d:fc:75:f8:00:48:
f4:5f:77:b1:ed:ab:cc:9c:8c:06:59:32:3c:2a:4b:
e5:32:4f:6d:88:9c:de:ee:0b:65:61:41:f1:63:4e:
b6:66:18:8a:5e:50:15:ea:f4:77:c5:1f:91:bf:21:
50:53:3e:b4:99:a2:1d:0d:55:1a:40:9c:4f:95:41:
ce:b3:b6:b6:07:5a:8d:07:9d:ee:68:81:16:ca:e5:
37:43:34:b4:ea:eb:fd:98:15:15:c7:a4:00:34:c0:
ff:e2:27:e9:97:2a:b5:4c:e6:fb:07:99:f6:66:bd:
c7:7b:07:e5:71:53:67:37:00:a9:b1:80:ef:ce:40:
0f:98:87:98:05:24:cb:d8:60:0c:00:de:f4:4a:b2:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:24:31:E2:8B:83:A8:4C:C2:38:F3:DE:8C:A9:D0:F7:C2:9A:11:B2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143552.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a386::/32
Signature Algorithm: sha256WithRSAEncryption
9e:84:62:e5:12:6c:03:e9:bc:86:27:ce:d8:5e:fd:e4:84:92:
57:17:9a:dd:81:1e:3f:80:45:88:0b:0d:4a:d7:78:a0:0e:b7:
0e:66:b7:21:f7:6f:e5:3f:eb:68:04:99:83:fa:12:c3:6d:71:
06:8d:5b:79:a1:db:e9:15:3b:ef:92:ab:04:8a:10:3d:92:e5:
cc:5c:bd:a8:83:55:81:d3:69:d1:f0:28:1b:43:ea:0f:b0:9c:
d9:d5:3e:35:8b:86:4d:5c:89:fd:1e:14:48:5b:37:6e:86:1e:
af:46:0d:85:aa:67:66:05:b2:91:2d:60:a4:f2:fe:a9:01:e7:
f5:1d:3e:bd:1d:61:26:95:09:86:a9:e3:87:c1:03:3b:01:ba:
4b:3d:7c:74:f7:ad:b4:db:62:8a:87:58:49:a8:42:c3:df:7f:
79:f4:f7:fd:65:64:ef:0e:af:0f:ce:27:ac:21:db:43:76:7a:
09:b4:95:1e:e5:c0:65:32:25:a1:86:9e:62:d5:41:36:3a:6f:
ec:73:ae:b7:ee:72:b4:61:d3:d8:5d:c8:96:eb:58:4b:38:b4:
ef:6f:d6:1c:80:69:6c:eb:6e:5d:64:07:41:19:ed:f9:59:b0:
4f:97:7d:e5:0c:f8:85:63:d8:75:23:05:b8:45:ac:84:e4:e0:
f5:cc:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:49 2026 by rpki-client