Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143568.roa
File: AS143568.roa (raw, json)
Hash identifier: /AN866pXoIoPs5HcfihsuIHfbBgFnKMlW/oiRenON4M=
Subject key identifier: 7B:44:6A:6E:D7:19:B9:C9:08:83:72:9E:31:7C:16:11:7D:AB:B2:C4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 567D0E625B463A1EB0560DDBCF9A8F4F4AC18961
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143568.roa
Signing time: Fri 22 May 2026 07:32:18 +0000
ROA not before: Fri 22 May 2026 07:27:18 +0000
ROA not after: Fri 21 May 2027 07:32:18 +0000
asID: 143568
IP address blocks: 240a:a396::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:7d:0e:62:5b:46:3a:1e:b0:56:0d:db:cf:9a:8f:4f:4a:c1:89:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:18 2026 GMT
Not After : May 21 07:32:18 2027 GMT
Subject: CN=7B446A6ED719B9C90883729E317C16117DABB2C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:34:4d:c4:c6:18:3c:b9:15:90:cb:37:6a:
0d:ea:32:61:9c:f4:10:90:e3:dd:30:46:46:8d:6e:
f1:03:a6:6a:33:b7:15:a6:a8:5f:f5:c9:0a:fc:58:
55:ce:59:cf:52:99:0a:86:63:0e:05:54:84:0c:84:
9a:6c:1e:4a:56:38:a6:5e:c9:d3:fe:5a:98:55:a1:
88:46:cf:49:07:20:83:c5:f9:7f:b5:94:16:d7:07:
96:1a:a5:39:ae:e0:ac:d9:fd:e1:5e:27:ce:2f:13:
6e:4c:0c:a8:e1:c8:e0:90:84:cd:72:56:07:d2:b7:
a3:4c:03:ff:40:5e:f2:77:c9:5a:4d:06:ae:c4:b8:
08:31:93:54:d0:64:9d:5d:29:1c:ac:69:25:46:62:
b9:ee:d9:55:5f:62:91:91:dd:b7:bc:64:5c:16:3a:
1d:fe:dd:41:c1:80:22:61:7b:29:b2:6b:27:20:b0:
ba:a9:26:86:a4:b8:77:b5:25:5a:68:89:9e:dd:cf:
28:06:ee:6a:83:50:74:32:8a:94:ab:81:fd:c8:33:
96:f3:71:a0:56:63:8f:39:79:f1:66:82:6f:e0:9a:
8e:e7:e7:ca:bb:9d:be:d8:c1:db:b3:db:85:e8:79:
1f:94:d6:99:1b:ce:4e:1a:6a:43:a1:61:e5:25:26:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:44:6A:6E:D7:19:B9:C9:08:83:72:9E:31:7C:16:11:7D:AB:B2:C4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143568.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a396::/32
Signature Algorithm: sha256WithRSAEncryption
9a:03:e1:c0:48:f4:bc:e5:df:04:df:39:d8:c1:97:66:cc:04:
ff:66:0d:05:2f:57:03:bd:c1:e0:40:a3:cf:03:88:1f:49:55:
d5:05:00:ed:79:2f:47:18:9e:91:59:c8:3b:d9:84:a5:ca:8a:
1b:63:dc:e9:2a:1a:d7:0c:26:8d:7d:c6:4a:1d:78:34:53:e7:
28:d0:27:54:bf:9b:52:98:2c:ed:9e:67:9b:e3:7e:49:c3:c5:
62:35:1c:34:7c:c3:3d:98:bd:80:70:dc:12:3e:2b:42:7d:73:
98:4a:a6:d8:c5:63:f2:07:94:b2:ca:be:05:c7:35:68:5f:7e:
cd:7b:f6:e0:a3:84:41:f2:53:fc:c9:c7:f0:0d:9b:ca:c7:dd:
c7:f6:c6:3e:83:23:7e:71:9d:09:19:bd:12:30:44:29:f9:9a:
b7:94:dc:03:c1:6a:6b:46:20:65:96:1d:bd:93:cb:18:ba:73:
dc:8c:f5:2d:a3:94:7d:05:ca:59:8f:fc:30:10:24:7f:e8:84:
97:88:ed:ad:a0:25:c6:b6:75:02:86:0a:e2:aa:4c:d9:72:53:
7d:91:45:db:88:11:10:8f:59:b8:fb:17:10:43:a5:ff:3d:da:
f0:00:dd:03:1d:53:c6:0d:1a:20:6b:8d:16:5d:17:5a:0d:76:
56:9a:9c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:26 2026 by rpki-client