Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143564.roa
File: AS143564.roa (raw, json)
Hash identifier: f5F3XZDlrEw1/ve/1rps3AGBfy6SLTTUUiXEBBAP9HI=
Subject key identifier: 0C:29:98:C3:30:C3:2B:5C:71:49:A0:48:A4:D7:E3:12:D2:8D:DB:40
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 20D95765BC467E9566266006B8158FA45868CE6A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143564.roa
Signing time: Tue 26 May 2026 03:16:38 +0000
ROA not before: Tue 26 May 2026 03:11:38 +0000
ROA not after: Tue 25 May 2027 03:16:38 +0000
asID: 143564
IP address blocks: 240a:a392::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d9:57:65:bc:46:7e:95:66:26:60:06:b8:15:8f:a4:58:68:ce:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:38 2026 GMT
Not After : May 25 03:16:38 2027 GMT
Subject: CN=0C2998C330C32B5C7149A048A4D7E312D28DDB40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:15:00:81:ce:70:0c:16:6e:f5:16:bb:1f:83:
1e:c2:a5:1b:f9:e1:55:3d:0e:dc:44:a7:9f:44:18:
c8:bb:52:17:5d:72:84:6f:b9:d2:a3:80:b0:60:2a:
51:bb:01:fd:aa:23:75:6c:af:14:7d:eb:fc:96:41:
19:04:52:c9:39:47:a6:3e:28:de:17:da:a8:a4:b8:
9a:bb:4f:ef:c7:ae:2c:47:17:8b:e5:3c:00:d6:fa:
34:42:9e:81:11:39:cc:f7:34:2a:3e:25:1b:f0:c7:
62:b3:c3:3b:27:e8:4b:b2:3f:cd:f3:b7:53:e0:22:
fc:fb:c1:03:a5:9c:1c:be:5d:2f:bc:58:ab:9c:af:
5a:75:0f:ed:bd:0f:36:1a:10:89:5f:91:86:54:45:
06:ba:b4:a9:87:a9:45:f2:7e:10:f3:85:24:c8:f8:
ff:bc:fb:ec:75:30:e5:71:01:22:f8:1f:bc:d7:43:
44:f7:6d:35:f8:52:ca:b1:07:f9:d0:0d:67:12:c7:
33:4d:f7:9c:29:b9:ff:a2:2f:88:d5:47:8a:d3:89:
c9:ab:f8:f2:8d:26:b4:22:88:b7:85:6b:b9:e6:92:
75:88:91:45:6e:85:0c:e6:4e:b2:7e:e2:7e:85:d1:
3a:ad:32:85:e5:ec:23:74:ae:d1:e7:eb:39:bf:5c:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:29:98:C3:30:C3:2B:5C:71:49:A0:48:A4:D7:E3:12:D2:8D:DB:40
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143564.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a392::/32
Signature Algorithm: sha256WithRSAEncryption
28:03:e1:03:45:b7:a1:ac:47:67:b8:87:05:27:b2:b9:59:42:
5b:f8:bb:c5:cb:9a:a4:af:3f:8b:c2:38:ea:71:54:04:d1:79:
c2:1c:13:6a:52:e7:7f:8b:8f:e1:e8:8a:1a:43:26:35:0a:e2:
79:9c:88:26:9e:22:2d:20:d2:6a:bb:ad:27:bd:77:37:ed:6b:
d1:c4:74:96:12:5c:94:03:d3:04:ac:34:08:2f:c0:4b:0b:d2:
d9:74:2c:c5:4d:59:f5:e2:2e:f7:86:19:46:e3:78:3f:1b:bd:
4c:5e:21:ba:f5:02:4d:64:91:9c:7f:03:69:c5:c3:98:76:7e:
b6:a4:d1:97:b4:03:3d:60:7a:c7:55:40:a8:a2:e4:4c:15:e4:
5d:37:a1:aa:ee:63:61:05:e5:4f:fe:ec:b9:98:61:9e:0e:56:
5d:35:28:96:3f:d1:e5:ee:5a:53:21:40:5a:a9:a4:52:d7:ef:
1e:10:44:79:95:37:e5:5d:b7:f9:32:5f:7d:76:75:36:58:de:
88:7f:f5:62:b1:8e:06:7a:c1:e2:09:75:ab:62:72:e1:6b:85:
d6:db:5e:01:67:3c:ad:ed:04:8d:5a:26:1e:f3:d6:ea:67:26:
76:9b:e0:39:af:fb:55:f3:86:79:5d:68:4e:0a:e4:86:48:6b:
06:10:d3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:22 2026 by rpki-client