Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143557.roa
File: AS143557.roa (raw, json)
Hash identifier: E06LOlNv+a+EJTczSXg+BoNFzuVYhJ9ibh713OlkNR0=
Subject key identifier: A1:49:28:9F:23:7E:66:A9:80:4E:78:52:C7:29:F1:CF:C8:84:33:9D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 69C4DFF89DF3EF1FE6E89DCD1410850C518B3E61
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143557.roa
Signing time: Mon 25 May 2026 01:20:01 +0000
ROA not before: Mon 25 May 2026 01:15:01 +0000
ROA not after: Mon 24 May 2027 01:20:01 +0000
asID: 143557
IP address blocks: 240a:a38b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c4:df:f8:9d:f3:ef:1f:e6:e8:9d:cd:14:10:85:0c:51:8b:3e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:01 2026 GMT
Not After : May 24 01:20:01 2027 GMT
Subject: CN=A149289F237E66A9804E7852C729F1CFC884339D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1a:af:0f:c1:40:0f:ce:76:4b:f6:21:82:d1:
c7:50:ae:b6:c7:54:52:db:ff:a8:0f:26:ca:a8:2d:
4d:cc:16:b3:9b:3c:b7:e9:3d:78:4f:ec:76:b3:04:
7b:ed:e3:90:56:d0:70:2d:f7:28:3e:b7:59:db:82:
c2:2e:5d:6c:eb:5a:cc:4c:46:9b:bf:4f:45:f1:72:
ad:f7:48:85:87:0a:68:2d:e0:53:bc:b8:06:8e:47:
11:84:f0:9d:ee:1e:3e:97:33:a1:3f:06:ef:0b:3c:
be:cd:81:64:d1:dd:bd:10:65:42:fc:fc:af:4f:20:
7b:5d:ce:6e:a4:60:e0:b3:f6:57:88:ec:28:eb:e2:
f9:72:72:b7:03:b4:fa:97:3d:e9:0d:93:d2:bc:1b:
3e:31:33:62:d3:60:1f:90:98:e7:bb:1f:d6:6a:df:
ad:02:1a:a0:f0:0b:9e:31:30:40:cf:ac:2f:a8:04:
e2:97:7c:9b:d1:b9:d7:44:37:6e:88:eb:f9:f6:7d:
cd:6f:7d:28:db:f8:10:a0:89:b0:bf:4b:93:e4:a5:
d9:d4:5e:f2:3d:aa:68:a3:ea:6f:b1:f6:a8:77:47:
9d:65:df:dc:10:c8:0f:67:2f:e4:4b:d3:45:55:e2:
a4:e0:db:70:df:15:47:09:f4:7c:97:a2:19:51:38:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:49:28:9F:23:7E:66:A9:80:4E:78:52:C7:29:F1:CF:C8:84:33:9D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143557.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a38b::/32
Signature Algorithm: sha256WithRSAEncryption
98:57:c6:bc:93:18:f9:07:1a:48:99:8b:ee:1e:06:79:c5:92:
10:2f:0e:a4:96:d4:06:71:8a:fc:97:83:30:29:d0:c0:87:c0:
d8:7c:eb:01:03:7f:fe:51:0c:de:5d:aa:58:bc:c9:66:e4:3c:
d9:ea:25:f6:58:fc:4f:45:38:b6:50:73:03:f0:9a:9e:a9:52:
28:f9:22:dc:c2:54:c1:2f:c6:40:95:7d:82:42:f4:1a:9b:e8:
d0:26:73:ad:a6:5c:b7:30:80:55:5d:8c:3b:e8:16:d2:ae:74:
89:21:40:e6:41:0f:e5:3e:6f:2e:d7:e6:8f:09:3f:f6:c8:7e:
38:96:ac:e7:fa:b2:21:b4:3e:fc:d9:cb:0b:01:e3:c6:ca:22:
6f:93:3b:58:06:85:bb:6f:48:8e:67:02:a4:3b:a0:ae:15:d3:
12:80:1e:c6:95:f1:7e:8c:17:a4:cf:b8:cd:93:a6:4b:b0:d3:
ca:86:13:63:c3:c6:5a:b5:9b:ed:b7:ce:45:bd:51:64:b9:39:
4e:b8:06:8d:c0:ab:d0:98:a1:8c:d0:6c:8a:60:0a:9b:2a:7a:
3d:c6:e2:c8:10:a1:ea:68:5d:9e:31:0d:e8:e8:24:8e:63:e4:
74:97:e1:84:23:f4:18:aa:ac:3a:4f:f8:1d:c8:73:af:e5:50:
f3:23:a1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:07 2026 by rpki-client