Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143558.roa
File: AS143558.roa (raw, json)
Hash identifier: Gwhc7DG5eQzxLVCknHcna1nTApqb+X/8WVTzK0VExKg=
Subject key identifier: 2F:F8:AA:D0:95:08:D0:16:99:55:EC:45:42:A6:8D:00:65:64:15:B4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7CA0D284876BE3AD3A6DC935A539498E9770CB53
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143558.roa
Signing time: Tue 26 May 2026 02:34:53 +0000
ROA not before: Tue 26 May 2026 02:29:53 +0000
ROA not after: Tue 25 May 2027 02:34:53 +0000
asID: 143558
IP address blocks: 240a:a38c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a0:d2:84:87:6b:e3:ad:3a:6d:c9:35:a5:39:49:8e:97:70:cb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:53 2026 GMT
Not After : May 25 02:34:53 2027 GMT
Subject: CN=2FF8AAD09508D0169955EC4542A68D00656415B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:e3:53:60:e0:14:71:b8:dd:64:6b:61:9c:
0c:88:26:a4:b7:b7:ea:96:50:b9:16:fe:21:34:54:
03:db:30:fc:ed:d3:74:75:3c:09:a1:02:fc:52:9e:
20:b4:f5:85:2d:7f:59:76:0d:f3:33:da:6d:58:d2:
26:24:75:58:96:f8:b1:27:a8:29:54:64:16:cb:d4:
e0:93:37:3f:bc:89:08:5a:4d:ff:71:27:21:c2:33:
9d:f0:6c:75:74:ad:cf:5c:94:05:1a:c0:fb:82:b1:
1d:fe:d2:7c:4e:0e:18:f5:ec:53:00:4c:5d:c2:4a:
40:af:ca:c8:7e:68:82:b2:9f:ed:34:f3:38:af:20:
2d:b8:05:6a:69:89:d2:11:a9:02:4c:20:03:50:38:
a8:4c:ee:21:9a:e7:69:ce:e4:49:31:17:1d:64:62:
b6:ec:b0:10:bc:51:47:77:0b:e2:27:54:6d:3f:0a:
a2:fa:df:2a:cb:12:55:f2:19:ea:d5:40:70:09:be:
54:3e:19:20:ca:68:23:6a:0e:de:e7:1e:07:9e:47:
ce:59:5a:b7:69:00:50:80:31:52:b3:41:a7:32:39:
b7:8c:5e:b3:a5:c8:af:87:a4:ab:18:ee:d8:d1:37:
20:b5:5a:58:0a:0d:ca:60:1a:13:de:1b:bf:65:79:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:AA:D0:95:08:D0:16:99:55:EC:45:42:A6:8D:00:65:64:15:B4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143558.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a38c::/32
Signature Algorithm: sha256WithRSAEncryption
56:96:a0:fb:90:74:a0:1b:06:df:a3:eb:1d:3f:6b:6a:8c:61:
05:12:41:6a:74:b5:75:0e:5b:b4:01:f0:9b:94:c1:a1:fa:f2:
2b:ec:68:3d:ca:04:60:15:4b:a7:00:14:8f:53:ab:b2:5f:f4:
45:94:6e:5f:7a:cb:11:db:99:95:7d:08:73:68:ee:94:d5:4a:
03:c9:15:dc:3d:f5:49:65:c0:c0:ab:fa:f4:33:70:17:b5:ea:
8b:23:bc:b7:4b:55:26:db:76:e1:8a:ef:ce:7c:8c:a7:6e:8a:
1d:03:28:58:eb:41:30:a5:a7:40:c4:e9:07:c6:c1:a8:27:af:
67:2a:ba:a5:dd:a4:b5:5d:7c:66:3c:0e:ea:42:13:45:ea:7d:
d3:ee:a0:9e:3d:2a:ba:72:93:9d:8b:72:17:59:bd:bd:ef:db:
40:38:4f:e7:a9:d0:3f:e2:fc:b5:84:e0:4f:a1:8e:8f:25:ca:
f6:80:4f:44:e9:3e:72:3c:e0:d6:ef:12:42:e1:ce:1a:80:b6:
f9:a6:9a:87:2d:cb:20:96:c2:f5:f5:3c:01:2c:2c:9f:9b:8f:
89:04:28:a6:7c:7d:eb:d9:db:cd:33:ad:9f:f8:b8:68:fc:c6:
73:4a:00:d4:85:29:04:e6:f0:ee:33:0d:ef:98:eb:15:71:73:
cb:53:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:11 2026 by rpki-client