Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143676.roa
File: AS143676.roa (raw, json)
Hash identifier: f0MiEU7NMSRUnSQ8fir7QrX76d9/R8ZTEtATkX9kqsE=
Subject key identifier: 93:62:4C:5B:CC:E5:C5:BC:DB:BB:B1:31:9E:5B:48:71:55:E4:EB:89
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 687BB542E5D936930A6BC3EC5CD988E4078050C0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143676.roa
Signing time: Tue 26 May 2026 06:30:30 +0000
ROA not before: Tue 26 May 2026 06:25:30 +0000
ROA not after: Tue 25 May 2027 06:30:30 +0000
asID: 143676
IP address blocks: 240a:a402::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7b:b5:42:e5:d9:36:93:0a:6b:c3:ec:5c:d9:88:e4:07:80:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:30 2026 GMT
Not After : May 25 06:30:30 2027 GMT
Subject: CN=93624C5BCCE5C5BCDBBBB1319E5B487155E4EB89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:9e:96:7c:35:dc:b0:d8:aa:3e:43:00:e1:
fa:cf:aa:6e:48:4e:b8:2b:a4:ac:63:30:cf:85:0a:
6f:59:83:fa:da:e6:3e:ac:8c:71:16:02:d6:a1:cb:
5c:ac:96:e0:dc:fd:2b:34:80:36:7c:c1:20:df:02:
86:e7:e3:32:ca:cd:2a:a4:7d:f1:00:be:73:50:d1:
cd:3b:4b:49:29:9b:c9:b9:f8:61:dd:1e:dd:6b:a7:
d7:8c:9a:1b:7d:24:50:ab:c1:35:c2:75:e3:6c:c3:
92:3b:6c:b0:06:89:09:9e:80:79:f7:90:07:47:58:
98:86:9f:13:b2:e5:d6:26:8e:f7:7d:90:42:64:08:
7a:05:17:68:03:fe:25:9f:19:89:a5:3f:8b:ee:cf:
50:28:8c:fb:5e:99:91:49:20:e8:38:e1:9d:18:9a:
14:b4:11:ad:cf:bc:0c:31:34:36:3c:22:8e:fa:2c:
29:a7:14:56:27:03:f7:ff:40:a3:45:83:9e:ee:9c:
77:6b:89:21:6d:0d:dc:bb:6b:1e:f3:32:17:d9:5a:
28:d3:3c:96:7a:6e:0c:95:53:c9:b0:2b:11:da:8c:
8a:8e:3d:0c:5e:4b:63:84:0e:ea:c2:a4:12:7b:01:
2e:ae:e4:7a:b8:90:40:07:8e:ce:01:f9:09:9a:b5:
31:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:4C:5B:CC:E5:C5:BC:DB:BB:B1:31:9E:5B:48:71:55:E4:EB:89
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a402::/32
Signature Algorithm: sha256WithRSAEncryption
01:bd:a3:50:45:ca:e0:8b:93:a4:2c:72:be:08:08:bc:9e:78:
1c:59:3f:33:15:48:a4:38:84:43:a9:a1:ac:6f:10:4f:d7:0d:
5c:c8:8e:3c:06:de:ae:ac:ac:48:cb:a2:f2:3d:e9:8f:7a:9a:
35:24:6e:40:a0:2b:15:1f:6c:00:44:31:2c:04:a1:3c:21:d9:
93:70:67:72:8e:23:57:b4:68:30:64:c3:a5:57:e2:2d:bf:a1:
45:53:e9:21:ad:d6:06:96:d9:0f:dc:ae:d7:9e:4a:d5:c4:27:
06:82:ba:cd:14:73:40:b3:99:81:3d:d6:42:2c:d9:b0:9d:d7:
50:c9:db:b0:5f:8b:67:0b:3b:80:64:4c:7b:9b:d5:28:e7:a3:
6e:3e:60:4e:bb:41:52:5a:15:30:c9:e1:ee:23:86:b2:c4:12:
58:fd:c6:6c:f4:10:6a:f6:82:09:d6:b8:fc:c5:e7:ee:69:f4:
9a:60:90:e7:25:3b:c4:6b:54:83:05:e9:13:76:3b:f0:19:96:
d1:9e:7a:db:87:d5:cf:88:fb:84:2a:dc:f3:cf:2c:99:9f:1c:
c6:68:db:25:55:50:58:b2:0f:85:a3:e1:2b:71:22:de:b1:0d:
b1:9e:a0:55:04:a9:ce:c8:d1:97:f3:1d:75:b9:18:1a:0e:42:
0e:ca:de:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:51:00 2026 by rpki-client