Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143555.roa
File: AS143555.roa (raw, json)
Hash identifier: 7ZqMkvGHRjr+h2XKuTnbTBgEJJxXfeemOxWCrbU5yjQ=
Subject key identifier: 7C:2D:AD:C4:AA:41:6F:1E:C5:28:F3:74:11:65:1D:C5:8B:91:97:30
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2E7835BF29DC677C58A214B5BD5B3EFF271244E8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143555.roa
Signing time: Mon 25 May 2026 01:51:28 +0000
ROA not before: Mon 25 May 2026 01:46:28 +0000
ROA not after: Mon 24 May 2027 01:51:28 +0000
asID: 143555
IP address blocks: 240a:a389::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:78:35:bf:29:dc:67:7c:58:a2:14:b5:bd:5b:3e:ff:27:12:44:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:28 2026 GMT
Not After : May 24 01:51:28 2027 GMT
Subject: CN=7C2DADC4AA416F1EC528F37411651DC58B919730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:e1:37:27:8c:29:d3:6b:41:5f:f0:3b:f4:
81:92:a0:d1:dd:37:81:49:d2:b9:ec:eb:44:17:58:
c2:cd:eb:45:91:d7:ac:cf:f2:04:9d:db:96:f2:52:
01:cc:e6:55:7b:3a:19:99:69:13:c5:8e:14:f4:bc:
34:46:fb:f6:4a:29:8c:46:c5:3b:2b:25:9c:76:f4:
b2:bd:63:12:ca:16:29:0c:b1:d6:1e:a0:53:09:bf:
23:cf:b2:3e:a1:34:3e:df:46:6d:02:e9:79:1c:15:
96:20:4a:e1:16:cd:49:9c:41:75:0a:23:ce:6f:f7:
72:3e:fd:96:85:da:59:93:e1:a4:eb:6f:5d:b1:84:
a6:14:7f:5a:09:ef:e1:d2:ba:b5:80:9e:ed:44:47:
52:de:9b:e2:48:a0:82:d2:d8:1a:14:2a:13:1b:19:
c0:35:b4:dc:a7:52:c6:dd:ba:e4:9b:78:c5:a5:0f:
2c:88:58:d2:25:c7:35:b9:06:b4:91:7f:09:a8:19:
ab:2f:83:88:ac:4c:e8:80:f0:2d:13:7f:b8:a8:30:
ed:56:3f:1b:00:6d:ca:bb:dd:a2:79:2b:56:1a:7f:
04:a7:63:f6:9f:7e:e9:5c:46:28:ed:e7:6e:5c:80:
68:49:85:9d:47:33:4b:e0:08:de:bd:f6:ca:45:aa:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2D:AD:C4:AA:41:6F:1E:C5:28:F3:74:11:65:1D:C5:8B:91:97:30
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143555.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a389::/32
Signature Algorithm: sha256WithRSAEncryption
75:45:b1:4b:05:9c:15:21:a2:a9:26:c0:d8:a4:af:f1:88:7c:
47:31:fb:a5:13:0f:b3:50:1a:29:91:d4:c6:90:5f:b9:38:7f:
b8:c7:2a:34:e5:4d:ba:4f:f0:4c:5f:c2:e3:95:f6:2e:7f:72:
ef:97:e1:34:0a:28:44:a4:d6:4f:06:84:7f:7c:4b:d9:7f:72:
2e:bf:3f:49:6f:3f:fe:19:17:6c:1d:a0:ad:29:4a:53:b5:f8:
84:7b:d6:42:7b:3a:8e:44:a1:64:e0:c2:3e:7f:0e:d5:8c:96:
b1:9c:51:f4:d1:50:bf:12:39:24:d4:3c:ef:29:ab:ec:e5:8e:
d0:f6:e9:10:8f:1a:8d:0a:08:a4:2a:9d:8e:16:84:21:71:e3:
7e:99:23:59:16:4a:8d:d2:60:69:91:30:6b:90:53:c9:7c:f2:
90:96:72:d4:63:80:ce:43:b3:9b:90:ec:d8:d8:b6:43:bf:cc:
9e:d1:1b:fd:b9:f8:4f:85:2f:e4:08:0d:28:51:06:90:40:62:
09:44:15:99:1a:d8:1a:e5:e7:69:c9:8e:81:80:12:b5:b9:4c:
e3:78:bb:af:c3:00:26:e4:27:ab:ad:ce:70:aa:f2:dd:97:e9:
b9:7b:be:27:1b:3b:25:d5:8a:3b:57:ce:76:89:b1:d5:34:f7:
8b:44:49:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:45 2026 by rpki-client