Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143567.roa
File: AS143567.roa (raw, json)
Hash identifier: jrQVqeg9Fbxti9jFac52X7BrEuZ2wgT5Rfcdd2kfP5I=
Subject key identifier: D5:5D:31:36:20:27:F8:A5:38:E6:2D:1E:96:90:BB:61:CF:2E:5E:D2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6B41EE16045897F51C023F546B9A53EAB3B78564
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143567.roa
Signing time: Fri 22 May 2026 07:25:03 +0000
ROA not before: Fri 22 May 2026 07:20:03 +0000
ROA not after: Fri 21 May 2027 07:25:03 +0000
asID: 143567
IP address blocks: 240a:a395::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:41:ee:16:04:58:97:f5:1c:02:3f:54:6b:9a:53:ea:b3:b7:85:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:03 2026 GMT
Not After : May 21 07:25:03 2027 GMT
Subject: CN=D55D31362027F8A538E62D1E9690BB61CF2E5ED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:1c:f0:07:48:2e:f9:f6:92:d5:ca:63:99:
5a:fe:f4:bd:7c:4e:60:f8:66:93:b6:2c:e1:0e:78:
bd:7e:f8:d2:ea:56:15:a6:90:ef:85:b8:89:28:85:
82:6a:a0:9e:10:e0:1b:22:22:92:4b:95:47:21:fe:
ad:d6:c6:29:a8:6a:c2:cd:8e:fb:bc:34:19:b9:c5:
6c:b5:c9:c3:79:bb:bd:c3:6f:35:95:07:b4:71:e2:
31:c2:08:71:43:5f:dc:69:22:5e:49:2f:4d:c9:5e:
b6:32:2f:2e:b4:ac:b1:46:2b:da:bf:64:21:c3:d9:
af:99:58:d2:b8:e2:6f:e8:49:d7:94:56:c1:e3:be:
64:0e:06:ee:d8:a7:c4:62:0a:5c:a1:2f:d7:ed:2c:
c9:d0:aa:31:32:03:76:71:b1:99:40:82:98:ed:e7:
9c:5e:53:2f:6f:24:e5:cf:b1:ec:71:fc:15:2b:ed:
06:e7:35:2b:29:10:15:c4:96:3a:0d:b4:48:16:43:
0f:4e:2a:c1:67:39:dc:c1:a1:30:f5:d2:d6:50:c4:
e4:52:fa:57:42:4e:65:a4:43:f3:59:38:a8:df:2e:
a8:5d:13:72:97:7f:c3:48:af:96:72:2f:95:8d:ff:
54:c3:7b:5b:70:a7:51:8d:95:8a:0f:93:37:0f:60:
b5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5D:31:36:20:27:F8:A5:38:E6:2D:1E:96:90:BB:61:CF:2E:5E:D2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143567.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a395::/32
Signature Algorithm: sha256WithRSAEncryption
8b:11:02:31:16:1f:fe:3b:3a:24:90:ef:77:cc:5d:de:d8:0e:
ed:27:9e:73:f5:50:26:c8:6c:4b:ec:e0:d5:85:88:63:78:43:
59:ce:22:93:76:3b:cd:f4:a9:ce:b0:fe:24:47:87:8b:7e:43:
ab:f0:5b:1b:22:67:1b:96:1e:e2:52:5b:28:27:bd:10:f2:dc:
d2:c4:28:fe:97:2b:84:82:91:1d:fa:2e:6b:62:a0:ff:38:10:
c9:84:e2:80:6b:52:d6:df:7a:87:60:d1:15:f6:e5:91:ba:5a:
f3:4f:d3:51:b8:cb:65:4b:a1:b7:68:24:fc:05:20:e0:d8:3b:
a0:dd:a4:e9:01:07:28:06:ab:be:e7:cd:ad:05:9a:e6:bc:4b:
39:81:b4:d7:cc:49:df:35:ad:c3:ee:9c:f6:d0:a7:c0:c4:0e:
d5:71:00:71:84:4f:36:e9:19:37:b0:41:02:7a:d8:b8:67:fa:
e9:92:ae:44:f6:ef:6a:d8:47:1c:f2:7b:b5:84:f1:cf:73:bb:
af:4e:15:0e:01:71:b3:a3:2f:d0:d0:5f:37:3b:08:26:8d:87:
02:e1:d0:cc:56:f6:c7:c1:2c:b6:af:70:c5:bd:fc:64:9a:31:
47:ad:4c:85:a7:c2:89:c7:df:9d:55:e9:90:49:1c:a6:a3:69:
c0:95:cc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:38 2026 by rpki-client