Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143680.roa
File: AS143680.roa (raw, json)
Hash identifier: acXrGW2ApaDgDeOE5FgKi73/bnnzjZxvEgXfVdBtUBg=
Subject key identifier: B8:7D:06:A1:62:4D:12:A7:33:85:69:93:B1:11:C5:ED:A7:E7:14:67
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5B1D29813AB1F14ADD038D1A58196C8E6474C7FD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143680.roa
Signing time: Tue 26 May 2026 03:16:49 +0000
ROA not before: Tue 26 May 2026 03:11:49 +0000
ROA not after: Tue 25 May 2027 03:16:49 +0000
asID: 143680
IP address blocks: 240a:a406::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1d:29:81:3a:b1:f1:4a:dd:03:8d:1a:58:19:6c:8e:64:74:c7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:49 2026 GMT
Not After : May 25 03:16:49 2027 GMT
Subject: CN=B87D06A1624D12A733856993B111C5EDA7E71467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:87:5b:d4:a7:7b:97:32:40:fc:ee:da:3b:
ef:86:7e:6c:52:e7:dd:57:58:6a:b0:04:c9:1f:76:
f7:a7:ef:39:f8:6f:71:f5:db:78:b2:36:1a:57:a9:
fa:09:bc:a0:cb:06:ca:61:fe:25:92:47:09:1f:d0:
51:df:50:7d:8e:01:48:bd:ef:9c:9e:cc:7e:28:98:
17:8b:4b:23:8e:48:fb:c8:61:50:0e:4d:b5:f8:dd:
ed:72:91:c3:be:12:77:4e:bf:7f:3b:21:96:cf:22:
1d:72:b4:99:cc:16:40:d6:4d:fe:3d:ee:17:a6:f8:
b5:5a:3b:95:bf:79:f4:ec:aa:40:ef:74:46:b9:cb:
d7:93:08:87:8b:e1:15:3f:5f:2f:9d:9a:f9:16:7f:
d1:71:4e:d3:89:0e:8c:de:62:f5:48:c3:43:a6:2d:
e6:15:24:78:1b:3a:22:27:0c:e4:a4:0c:2d:48:6b:
6e:0e:4b:54:38:1b:c6:f8:28:cb:ef:58:22:1e:43:
a5:b8:a3:df:f9:e6:cb:61:fe:a4:7e:a4:2f:21:69:
58:10:38:aa:55:d7:51:88:1d:79:dc:74:30:ba:b9:
c4:35:fd:71:76:af:a9:9b:bd:ed:3f:77:87:c2:87:
02:de:85:8e:68:24:b5:aa:47:94:2a:47:b2:9f:05:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7D:06:A1:62:4D:12:A7:33:85:69:93:B1:11:C5:ED:A7:E7:14:67
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143680.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a406::/32
Signature Algorithm: sha256WithRSAEncryption
18:2d:9a:2f:ec:26:10:17:30:a1:f0:a9:fc:c3:45:0d:92:f9:
84:3d:e8:f3:a1:84:d3:22:3b:8c:3b:09:03:eb:97:7f:f0:d2:
9c:4c:7c:fd:a0:e7:2d:a6:a6:a7:87:c8:d0:cb:3e:16:b1:d1:
3c:61:23:e2:cf:76:ac:e5:0c:28:82:ae:2c:37:63:1a:77:1e:
0d:ab:fa:79:55:1a:9a:3f:e8:6c:16:7f:2e:2e:d6:52:1f:01:
23:c2:94:3c:60:12:94:a1:6e:a6:d0:ee:0a:f6:64:02:1e:70:
63:b6:9b:7f:bd:ff:5c:bc:35:5b:17:74:f0:55:82:82:14:e4:
ec:ee:c1:73:9d:be:26:ec:ef:7b:96:0a:59:cc:00:ff:8e:54:
11:67:5d:25:53:08:90:02:a1:76:a5:0f:dd:72:71:83:e4:6d:
e0:e6:0e:2a:41:46:b1:40:61:8b:18:7a:d7:f3:81:a5:b4:b0:
90:a7:77:ff:25:fc:6d:35:7c:b5:9c:36:81:27:66:87:c3:1f:
03:4e:c7:b2:e5:e2:3e:02:f9:b3:9a:cd:cb:ab:7f:c3:ad:d8:
33:c8:59:ce:57:72:9a:f7:dd:cd:f3:d3:b5:6e:0a:8e:30:74:
68:c9:50:9d:b4:c5:bc:0d:6f:16:6a:71:52:63:94:ba:b1:5e:
de:5f:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:47 2026 by rpki-client