Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143672.roa
File: AS143672.roa (raw, json)
Hash identifier: Iva0f0CsxXQAiyanvu+L+DwVu3h+w7PtJ9CtqD+EnCY=
Subject key identifier: EB:E4:13:AA:12:8E:87:8D:07:F8:30:3B:71:04:74:99:E7:0C:BF:37
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 208E390C99F61CE09F480470AA421B35F32DCD82
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143672.roa
Signing time: Mon 25 May 2026 01:19:55 +0000
ROA not before: Mon 25 May 2026 01:14:55 +0000
ROA not after: Mon 24 May 2027 01:19:55 +0000
asID: 143672
IP address blocks: 240a:a3fe::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8e:39:0c:99:f6:1c:e0:9f:48:04:70:aa:42:1b:35:f3:2d:cd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:55 2026 GMT
Not After : May 24 01:19:55 2027 GMT
Subject: CN=EBE413AA128E878D07F8303B71047499E70CBF37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:db:ea:69:d4:11:9f:08:5b:0c:a4:70:5f:
9d:d8:73:8a:b5:99:c0:aa:9f:7d:30:9c:1c:2b:ba:
2f:84:76:d7:7e:ea:58:43:d7:fd:5b:6c:6d:2e:ff:
5d:f6:d4:0a:23:e4:45:d3:b4:78:94:f8:cd:1f:52:
de:f3:5e:07:e3:e7:e2:36:30:fc:bd:ec:55:17:ab:
b5:8d:c9:b1:f2:97:9b:a2:dc:e8:ec:b5:22:3a:c6:
a3:8f:92:86:74:f6:cd:86:c3:f1:d8:7e:5f:01:09:
17:c1:30:7c:96:15:9c:bd:37:db:41:8c:71:6c:bf:
63:2f:f0:3a:10:9b:92:db:29:62:16:4e:73:b6:f4:
53:0c:41:ff:2c:be:03:b8:ca:a7:fb:bb:8d:d1:bb:
9d:3e:79:83:5b:1a:aa:e9:42:82:54:c2:11:4c:07:
9a:e8:40:ff:a7:23:0e:31:97:78:0d:e7:ac:4c:43:
1c:57:1a:61:9b:6d:9b:35:a8:03:4c:07:04:87:93:
9a:2e:79:df:df:42:bb:26:f2:be:fd:ec:f7:4e:5d:
18:e4:ae:a2:1b:69:43:89:c1:44:bd:eb:bf:c8:35:
ec:1b:c3:58:12:9d:24:b7:5c:7d:f9:b0:7c:74:34:
0b:82:e9:98:bc:8d:4b:eb:da:f3:a7:30:2b:c8:f7:
a9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E4:13:AA:12:8E:87:8D:07:F8:30:3B:71:04:74:99:E7:0C:BF:37
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a3fe::/32
Signature Algorithm: sha256WithRSAEncryption
87:71:df:9f:43:aa:0f:4b:f5:f1:16:ca:1e:ba:d3:d5:cb:c6:
70:3b:39:09:1c:e8:f4:3e:2e:11:81:23:22:90:fb:ce:0f:60:
cd:17:9f:d1:4d:70:f8:52:50:46:81:06:7a:9a:1b:58:90:10:
4e:c1:64:ab:01:2c:09:e5:d5:2e:64:86:9a:60:37:b0:10:1f:
57:df:b7:cb:ab:40:81:5f:2f:14:32:d6:34:68:17:8e:bd:e1:
23:d9:f6:7e:a7:7d:31:ac:3f:3d:5e:26:94:78:97:d7:18:74:
e9:90:56:8e:65:5b:75:d4:b9:c7:1e:74:54:ae:25:e7:ba:bb:
ff:69:cd:75:9c:2f:9b:59:92:d0:f5:2e:26:c2:db:ad:78:40:
bf:91:9d:e3:b9:30:26:90:f3:bb:ad:55:3e:14:06:db:69:f5:
f9:b1:53:01:10:f7:2d:d1:17:b0:92:61:de:31:56:d0:eb:3a:
aa:91:19:5c:c8:37:e2:85:c5:0d:b4:85:35:25:77:49:6f:9b:
cc:75:5d:a2:30:cf:b8:fb:36:ac:77:79:ee:20:b1:76:88:00:
b5:c8:47:b5:9d:e3:a1:22:22:e7:0d:b9:39:fb:7d:17:7f:72:
98:12:4f:e9:de:cc:03:52:8a:5c:11:31:f4:0a:e7:17:89:6d:
5b:d8:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:24 2026 by rpki-client