Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143575.roa
File: AS143575.roa (raw, json)
Hash identifier: DKqxxM9yzPSpi56WW2L24usQcrln7itx5ajISgB0bBU=
Subject key identifier: D0:F2:A8:10:0C:3E:92:0E:C7:D6:E4:2E:A4:22:4B:07:5A:B9:AC:94
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4214595B646CEEB8B228A6AA932D87D462C4E83E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143575.roa
Signing time: Tue 26 May 2026 08:52:49 +0000
ROA not before: Tue 26 May 2026 08:47:49 +0000
ROA not after: Tue 25 May 2027 08:52:49 +0000
asID: 143575
IP address blocks: 240a:a39d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:14:59:5b:64:6c:ee:b8:b2:28:a6:aa:93:2d:87:d4:62:c4:e8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:49 2026 GMT
Not After : May 25 08:52:49 2027 GMT
Subject: CN=D0F2A8100C3E920EC7D6E42EA4224B075AB9AC94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:8c:b3:7e:a4:e1:57:d1:c5:b2:d4:80:69:
71:e3:d2:77:b9:1e:39:31:ad:a3:60:64:56:bf:c1:
3d:2e:79:8b:97:35:55:c3:16:84:a8:ac:d1:2a:0e:
eb:83:30:e8:8d:5b:06:b5:af:fc:af:f1:1e:af:5d:
4e:2d:28:36:d5:3a:d0:02:61:3b:7a:bb:d2:de:ad:
8f:39:fa:54:c9:c8:1b:b1:df:1d:91:a3:15:5e:37:
ca:85:53:dc:ef:af:23:3e:d6:83:0c:24:05:5a:1b:
40:9f:af:03:05:dd:54:ba:35:0c:a3:51:c8:dd:16:
0b:23:ba:e4:99:12:65:22:4f:38:10:57:8a:bd:34:
4e:17:9e:0c:3f:43:86:e7:bd:dc:93:d2:96:06:a8:
e8:47:a8:b5:70:af:a4:e9:72:75:25:18:71:8d:d1:
87:88:40:41:b0:6e:ff:32:94:00:8f:57:d7:e3:2c:
3c:2b:95:4c:db:bd:95:5d:ea:1d:43:00:97:91:85:
b6:f1:4b:aa:39:5f:5b:f1:8c:ae:f9:a9:1c:e2:ac:
1b:0a:83:04:be:24:45:83:90:74:48:e7:2c:43:ea:
ea:ce:18:8e:c3:ae:59:11:28:fe:54:a0:3e:e4:60:
53:68:35:d0:54:c1:6d:a0:a8:c9:0e:64:9c:9a:cd:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F2:A8:10:0C:3E:92:0E:C7:D6:E4:2E:A4:22:4B:07:5A:B9:AC:94
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143575.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a39d::/32
Signature Algorithm: sha256WithRSAEncryption
a6:0f:8b:9c:03:e5:88:52:c3:12:3d:08:98:0b:ee:d7:89:4d:
04:f4:0a:ac:6c:b4:08:ad:92:11:90:7d:15:a7:ba:81:59:1d:
e0:eb:28:0b:d8:9b:08:d4:68:0a:41:11:5f:52:a3:88:77:25:
13:d2:5e:18:4d:d4:c1:08:03:ae:20:54:35:d6:80:ab:01:9c:
27:c7:a8:f9:41:2a:dd:03:15:28:ca:49:fa:9e:32:73:61:27:
f3:37:f1:c8:38:59:d7:24:4a:3d:a9:fa:14:94:72:9a:9a:e5:
e4:dc:a1:17:f6:b3:70:e5:d4:99:bd:3c:aa:b1:ca:65:06:f3:
31:b1:66:45:03:46:53:3f:9d:dd:29:52:9d:94:8f:ed:aa:69:
21:09:f5:68:be:41:c0:dc:02:7d:aa:7a:e9:0d:a5:e3:50:d5:
6b:7d:55:17:ba:ea:6f:59:b0:cb:bb:95:d6:7f:01:44:3a:23:
1b:13:de:73:b6:c9:dc:68:fe:4d:29:6e:70:d5:41:f5:a3:bf:
b2:3a:55:be:47:4c:f2:9c:89:20:ce:5a:ce:76:9a:0e:d9:4c:
6f:8a:84:ff:7b:f9:a0:50:da:b4:cb:40:5c:0d:5f:da:51:4b:
af:b2:dd:93:c7:7b:40:51:70:48:49:10:fa:88:2a:7b:59:0d:
f1:41:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:52 2026 by rpki-client