Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143572.roa
File: AS143572.roa (raw, json)
Hash identifier: RLvV2t+QdJvJdgjWV38uAjiZF4DpCU1Y+zrL5ZjJaqU=
Subject key identifier: 21:23:BF:07:46:01:BC:D7:16:A2:56:7A:D3:D9:A5:10:1D:FF:23:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 318A50C1701659CFDB19A9F526AF2A3EA8BEEC64
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143572.roa
Signing time: Mon 25 May 2026 02:22:21 +0000
ROA not before: Mon 25 May 2026 02:17:21 +0000
ROA not after: Mon 24 May 2027 02:22:21 +0000
asID: 143572
IP address blocks: 240a:a39a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:8a:50:c1:70:16:59:cf:db:19:a9:f5:26:af:2a:3e:a8:be:ec:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:21 2026 GMT
Not After : May 24 02:22:21 2027 GMT
Subject: CN=2123BF074601BCD716A2567AD3D9A5101DFF2370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:c8:79:b1:f5:57:d0:e4:13:6a:19:2a:b9:
c6:f3:fa:8e:e6:1b:c8:34:00:ae:c3:6f:bc:00:34:
3f:9b:06:22:6c:aa:76:ae:87:8c:53:00:68:58:86:
1c:46:3b:ba:37:d4:fe:3e:22:bf:ca:03:7e:b0:28:
74:55:64:c5:c9:b4:cf:a0:6f:54:7d:b6:1a:6e:60:
2c:26:8e:4d:18:be:84:ee:8e:ae:60:97:eb:54:23:
c9:3a:ce:69:11:0c:52:7a:3e:2f:7e:05:5d:33:8f:
04:48:15:b8:46:eb:96:d5:2e:e0:29:81:ce:0f:ba:
ad:87:6d:be:3b:77:d8:b6:fe:bd:a9:92:09:15:b4:
95:7c:23:ce:1b:bb:32:19:3f:00:b1:bd:54:ea:ba:
89:f4:9d:07:32:51:e9:04:e8:0d:d0:12:ae:d7:f8:
7a:23:ce:4c:01:44:70:82:2d:3d:2a:e9:5c:8d:35:
57:39:b6:ae:28:3f:23:2a:e7:27:fd:bc:ba:d9:cf:
24:a0:8c:bc:89:67:4b:4f:96:5b:93:86:e9:e8:e9:
cb:5a:21:bd:ac:24:1a:c1:e6:48:dc:6f:ee:cd:ad:
ea:6b:44:e0:0c:d8:50:cb:be:36:83:28:16:aa:31:
1b:f1:6d:d3:7b:00:bd:b1:83:be:b5:58:b4:79:36:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:23:BF:07:46:01:BC:D7:16:A2:56:7A:D3:D9:A5:10:1D:FF:23:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143572.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a39a::/32
Signature Algorithm: sha256WithRSAEncryption
1c:65:08:6a:61:46:7e:36:51:d7:67:74:d4:0c:30:d1:1d:d3:
d8:c5:7f:bc:ea:3e:e9:6b:a4:c0:3a:50:e5:b4:ed:2b:6e:7c:
23:75:2c:2e:d4:4e:e7:f9:92:a3:d6:52:6f:9f:c8:ed:af:a2:
85:09:bc:e0:c3:03:5f:f7:77:74:e9:c6:49:48:e1:7d:85:c0:
1e:93:8a:27:37:0f:b1:9e:ad:d2:20:42:ae:09:b6:3c:5a:55:
f6:01:5a:43:0a:8e:11:86:21:98:69:fa:53:09:90:5f:37:1d:
a8:f0:0c:18:c4:71:49:c3:52:09:c0:aa:a0:0f:af:e6:7d:ea:
f3:bf:bd:f7:55:d8:0d:c8:bb:9f:ff:ab:9f:a3:a0:0a:ff:29:
44:18:7e:14:66:db:3e:47:fb:44:e2:8a:14:f9:74:8a:3f:ee:
5b:6a:4e:01:6a:24:74:ea:d0:a7:0b:97:68:ba:60:b6:2c:c2:
90:30:c0:80:0b:9f:4e:4b:88:4a:f1:ca:09:c5:15:5f:23:aa:
68:53:45:93:79:63:e4:74:b9:8b:ee:58:eb:1d:52:26:c1:1f:
8c:44:cd:11:53:6f:e9:1d:51:ec:3f:0a:09:8b:a6:14:19:cf:
b9:06:79:cb:d5:1d:23:eb:3a:0b:f9:71:8d:6f:7b:00:07:14:
a8:b9:d0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:01 2026 by rpki-client