Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143678.roa
File: AS143678.roa (raw, json)
Hash identifier: 3KUPs/HqVffxI+nFCFiN1ehwBTeGtpQR+POUwm+mMik=
Subject key identifier: 40:10:FA:57:B1:F0:41:F8:1C:28:E2:3A:20:CB:C1:44:3D:0A:5D:16
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 685AC689F1333B9F6327338C5D2F3720DCEE3F34
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143678.roa
Signing time: Tue 26 May 2026 06:12:48 +0000
ROA not before: Tue 26 May 2026 06:07:48 +0000
ROA not after: Tue 25 May 2027 06:12:48 +0000
asID: 143678
IP address blocks: 240a:a404::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:5a:c6:89:f1:33:3b:9f:63:27:33:8c:5d:2f:37:20:dc:ee:3f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:48 2026 GMT
Not After : May 25 06:12:48 2027 GMT
Subject: CN=4010FA57B1F041F81C28E23A20CBC1443D0A5D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:8b:f9:0a:12:c4:26:d3:3c:29:4a:a1:be:
ec:b3:b2:67:fa:9c:22:2a:a3:ab:48:e3:fd:15:eb:
7d:ba:63:c2:db:c2:92:eb:4f:6a:1a:dd:db:69:fe:
a3:a2:87:ab:a0:27:1c:b3:6a:ac:22:66:a5:ff:8b:
ac:02:22:91:72:b1:4e:f0:a0:ce:23:7b:4d:62:23:
0b:ec:c6:29:28:91:62:54:f8:46:aa:46:66:77:5d:
25:66:4d:25:59:af:c7:8d:fe:3e:03:79:90:6d:ed:
96:92:46:d8:14:ba:a7:ed:31:d7:69:2b:23:75:43:
48:59:3a:6e:c0:e6:ed:4e:52:a1:99:a3:f1:27:c2:
7f:9d:75:2d:a5:d5:ef:31:b7:57:40:07:04:5b:78:
04:0e:4d:d9:5e:ee:5e:a9:4b:93:cd:76:44:22:21:
fe:0e:03:76:18:13:17:f6:d7:a5:25:67:95:3a:2d:
ad:d3:d4:88:44:84:07:b3:95:de:6f:42:7d:6a:17:
d2:0c:41:6b:55:f3:f8:57:97:8d:82:12:64:79:60:
28:ec:31:67:70:c5:31:b5:82:a4:cc:da:a9:db:ba:
f0:55:8e:28:e2:54:6e:ce:5e:79:c1:f3:2b:ca:b0:
fd:95:90:2f:02:08:c0:ef:60:b4:d1:ce:5e:76:7b:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:10:FA:57:B1:F0:41:F8:1C:28:E2:3A:20:CB:C1:44:3D:0A:5D:16
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143678.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a404::/32
Signature Algorithm: sha256WithRSAEncryption
6d:5c:3c:8b:2f:45:7e:8c:9c:a9:b6:d9:ce:69:23:6c:54:78:
10:ed:30:b0:a4:11:23:e0:e5:b6:60:9b:cc:57:7b:19:f6:16:
26:ca:3e:1b:34:47:86:5a:06:ff:56:0f:af:4d:c4:5d:89:a4:
2c:9d:74:db:17:5f:88:90:59:b0:fd:26:b9:67:13:d3:9d:4d:
9e:ec:06:37:e0:39:85:ba:95:d3:36:a1:5f:4e:19:e4:57:db:
64:b1:3d:83:5c:fc:5b:a0:ca:0c:28:c7:98:e8:e5:71:5d:2c:
f5:68:10:1b:a5:1c:65:c1:5a:4b:80:4d:eb:3b:20:60:a7:2b:
09:8e:9f:c5:42:3c:1c:ef:31:5c:63:ec:01:2c:10:70:b0:cd:
88:6c:8d:5e:90:c9:37:35:64:44:67:83:99:b2:c4:c9:d4:0a:
6f:11:7e:cb:6d:93:59:5f:66:5a:db:32:54:d9:68:40:8b:7c:
96:6b:62:e7:94:db:f7:5b:eb:b9:4f:e3:8a:2f:dc:62:6f:db:
0e:9f:af:db:e1:0c:3f:81:8f:84:6a:ce:2b:05:9b:fa:75:79:
ea:8e:f6:43:8c:9d:16:f3:e8:98:8a:97:88:f3:da:af:83:05:
dc:00:28:27:45:12:1c:29:8e:44:df:44:06:75:dd:4d:5c:4a:
19:1b:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:12 2026 by rpki-client