Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143675.roa
File: AS143675.roa (raw, json)
Hash identifier: k9Xo4xmLpNCTObVdn5VsoJkvbWvvXf3rooXF3+0cWAY=
Subject key identifier: 5A:1D:D8:81:64:8E:53:60:81:2B:AB:CD:D9:70:12:5B:01:D5:18:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 790AEC7E657D7F7C81C39158191089B4A79C8C61
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143675.roa
Signing time: Mon 25 May 2026 01:51:27 +0000
ROA not before: Mon 25 May 2026 01:46:27 +0000
ROA not after: Mon 24 May 2027 01:51:27 +0000
asID: 143675
IP address blocks: 240a:a401::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0a:ec:7e:65:7d:7f:7c:81:c3:91:58:19:10:89:b4:a7:9c:8c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:27 2026 GMT
Not After : May 24 01:51:27 2027 GMT
Subject: CN=5A1DD881648E5360812BABCDD970125B01D518D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:00:00:f9:f8:c1:d7:b2:57:b9:c8:03:75:9e:
08:0f:80:e6:fa:0b:92:d8:8b:80:67:b5:ff:90:2a:
13:03:80:79:d0:1a:56:c8:4d:8d:58:86:c8:a8:9b:
63:5d:19:2a:a7:24:86:e4:5e:98:3c:53:4d:b5:34:
73:68:46:2f:88:a8:ee:37:32:12:e2:62:a3:58:88:
95:b7:71:97:07:fb:1a:81:c3:eb:50:93:e0:59:33:
a1:65:20:49:41:28:84:4f:aa:e8:18:03:38:04:cc:
30:60:d7:7a:fa:0a:8a:96:51:e1:6a:80:fb:b9:0b:
8c:78:67:62:ac:0a:fa:07:da:35:b1:9f:80:23:b8:
14:7b:07:7f:b7:af:54:46:39:c4:d7:17:4c:8e:a4:
84:2b:c3:bf:d2:49:91:7f:ab:00:c8:e7:85:1a:e3:
b9:78:a8:72:90:b8:2e:87:0b:34:c6:7b:18:dc:46:
5c:ee:ba:1a:5f:9c:23:24:43:0d:c1:bf:40:ea:69:
05:a8:d1:c5:f3:d4:aa:42:91:5d:16:65:f5:ff:6e:
f9:0b:a2:82:9a:94:2c:7c:9e:dd:52:17:3d:da:7a:
16:f3:c1:3a:72:ac:ec:fa:90:77:6e:04:dc:e6:40:
2f:3b:af:68:1e:3f:63:e8:6b:05:a4:e5:96:66:d6:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1D:D8:81:64:8E:53:60:81:2B:AB:CD:D9:70:12:5B:01:D5:18:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143675.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a401::/32
Signature Algorithm: sha256WithRSAEncryption
8b:96:5c:c7:77:9e:dc:60:39:dd:84:f7:c6:11:f2:68:0a:0e:
96:26:3b:a8:c8:d4:98:b0:6a:a3:21:17:88:10:22:ca:7c:72:
c3:ff:9f:a6:db:24:ee:dc:ad:3d:e6:d2:9e:7c:9c:51:25:9e:
63:4f:fc:6b:6c:cc:47:d8:41:c4:6d:40:5f:a4:00:4c:53:b2:
61:29:83:14:ba:47:92:09:55:c9:d0:da:51:03:6e:28:71:dd:
ec:d3:b6:bd:b3:0c:ce:6b:6e:ff:e6:a2:c4:a3:49:2d:2e:e6:
2d:e2:67:86:c6:64:3e:e1:4e:9e:95:86:68:ee:26:4e:d3:ff:
bc:8d:43:62:ba:c4:37:97:fd:5f:98:6a:fb:1e:cb:57:cb:cf:
32:f3:6d:b0:68:ae:d0:82:99:e9:d8:a8:5c:cf:a4:3e:75:10:
99:fa:54:2e:34:ba:45:0e:38:c2:4e:50:68:4a:05:7c:17:7e:
b6:a5:1c:35:b0:8c:93:d5:3a:36:7b:43:9c:e3:52:6f:5c:e2:
28:2e:9e:f1:0b:14:e3:36:7f:0f:82:0e:e9:9f:42:3a:c2:7c:
1a:ce:fe:2c:f0:52:74:b4:47:b7:77:7d:88:8f:14:a8:33:64:
36:b5:2f:47:47:9e:07:80:10:66:64:9e:97:bb:4e:84:ca:76:
35:d3:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:23 2026 by rpki-client