Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143570.roa
File: AS143570.roa (raw, json)
Hash identifier: 5msnqc83gv0olqVXZRow5/Xp9oasZ45nx5U/YAxUQbY=
Subject key identifier: D2:29:06:A1:D3:C3:3E:52:07:0E:4F:BC:78:17:C5:36:EE:E9:7E:73
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7B5CA18C1F430DD2DE7707512D482ABBA3ABC35E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143570.roa
Signing time: Fri 22 May 2026 06:58:25 +0000
ROA not before: Fri 22 May 2026 06:53:25 +0000
ROA not after: Fri 21 May 2027 06:58:25 +0000
asID: 143570
IP address blocks: 240a:a398::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5c:a1:8c:1f:43:0d:d2:de:77:07:51:2d:48:2a:bb:a3:ab:c3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:25 2026 GMT
Not After : May 21 06:58:25 2027 GMT
Subject: CN=D22906A1D3C33E52070E4FBC7817C536EEE97E73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:e2:6a:cc:ff:a8:e4:16:a2:8e:d0:93:97:
e4:5a:d4:52:10:33:03:39:2e:25:3f:6d:83:fc:e2:
b5:72:66:2c:11:c8:4b:70:50:16:b1:4e:72:e4:0a:
2b:0c:d1:0a:fa:54:a7:64:1f:9d:b4:5d:db:7e:73:
be:55:43:da:04:04:db:a4:88:2f:19:62:70:8f:59:
bc:c3:d8:4f:01:c2:70:ea:bd:11:0d:4c:56:e2:98:
44:5a:e4:d6:9d:98:9b:72:c7:a8:9c:bc:43:c9:da:
0b:2f:0c:03:f6:e1:c5:04:bd:8e:27:62:41:54:2d:
0f:f7:a4:db:c6:85:ee:e9:e9:7b:43:bf:b9:b7:32:
e8:e4:76:a3:b7:b8:70:8c:8d:d3:53:09:8e:5f:04:
36:15:71:60:23:a5:40:85:2a:e6:e4:3c:fb:b0:30:
a0:32:b6:6d:48:39:e6:9f:fb:17:72:d1:e3:73:eb:
f8:e2:83:63:f8:f4:d6:a0:79:bd:ba:1d:01:27:72:
e3:47:ca:36:71:91:83:13:a9:31:ed:32:21:3d:28:
b8:96:c7:4f:50:3f:58:ff:bd:04:3a:74:82:79:00:
ee:7d:c3:10:6b:db:de:75:58:f3:3f:57:f9:6a:a0:
8c:cf:35:27:7e:ea:05:bf:d8:87:40:96:6c:78:46:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:29:06:A1:D3:C3:3E:52:07:0E:4F:BC:78:17:C5:36:EE:E9:7E:73
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143570.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a398::/32
Signature Algorithm: sha256WithRSAEncryption
46:97:79:18:f3:ef:cd:0a:24:a0:ba:0c:9a:be:6c:13:d4:5f:
6e:e5:cd:1b:6e:59:3c:b8:1a:f0:cf:4e:e5:1b:c6:a5:28:01:
cb:38:5a:c3:83:d9:63:6e:2c:9a:89:12:6e:27:02:60:0c:0f:
7f:04:f8:f3:14:0b:19:c1:1a:a0:16:4a:a9:41:d0:4c:5d:51:
36:54:78:6d:51:f4:c2:48:92:82:9d:ce:7b:39:36:11:61:20:
b4:6f:0e:ba:3a:bc:12:0c:78:96:98:1d:25:b7:6b:3a:48:e7:
5f:03:7a:d5:e4:8f:a4:cf:01:c7:d6:b9:b4:ef:04:f3:46:55:
08:ad:31:69:1c:33:c9:4a:5f:14:17:e2:6f:0a:93:87:3a:d8:
6d:54:01:8b:7c:e8:2a:4a:a5:ce:aa:75:ad:f4:10:5e:d1:ad:
52:aa:25:81:56:1e:46:10:23:14:5e:0a:34:38:e9:1f:85:6e:
9d:6a:c2:19:6e:f3:16:bf:b2:65:8e:c5:5d:75:e3:23:2b:61:
b6:13:22:ec:88:12:be:c0:2d:8e:91:f9:a5:36:ff:df:b5:78:
af:92:d4:a9:af:d3:a8:1f:6c:12:fe:4d:03:6b:05:5a:6b:df:
f5:59:43:5b:e3:52:e7:cf:40:a4:ca:06:cb:85:f3:68:45:3d:
aa:f0:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:24 2026 by rpki-client