Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143688.roa
File: AS143688.roa (raw, json)
Hash identifier: z46v6dZdfdBvf0XHnf0Ug8P0bGWSBOZM3D0gtTsQfh4=
Subject key identifier: 51:A2:6A:BC:9F:B3:E4:B5:B9:17:B9:87:6A:37:32:EF:D7:A1:C2:C1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0EDC11482381729B241C26F6BCB79676FF4D1589
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143688.roa
Signing time: Fri 22 May 2026 06:58:45 +0000
ROA not before: Fri 22 May 2026 06:53:45 +0000
ROA not after: Fri 21 May 2027 06:58:45 +0000
asID: 143688
IP address blocks: 240a:a40e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:dc:11:48:23:81:72:9b:24:1c:26:f6:bc:b7:96:76:ff:4d:15:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:45 2026 GMT
Not After : May 21 06:58:45 2027 GMT
Subject: CN=51A26ABC9FB3E4B5B917B9876A3732EFD7A1C2C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:eb:ce:19:5e:ea:26:68:c5:70:d0:a4:74:
85:52:61:04:b0:75:22:49:27:6a:d9:60:7a:78:c9:
3d:ca:78:62:b5:11:3c:c2:f2:fa:b6:e3:11:35:6b:
87:c8:35:61:52:04:f6:a5:0f:69:c8:e0:ae:cd:7b:
fb:d9:81:0b:7e:48:12:8d:63:5e:c7:e3:b6:81:e2:
50:53:a0:ce:3b:1b:d9:d8:42:5c:e1:30:05:ab:e1:
a8:6b:87:20:19:af:89:2b:bd:70:e0:c0:eb:6a:13:
2e:f1:c7:9c:cb:3c:b4:48:ee:1d:7d:64:9b:9d:51:
5b:07:ac:38:51:5a:8a:95:01:81:bc:d9:46:ed:26:
63:1d:0b:81:da:f2:e0:04:93:d0:16:61:ca:ef:cb:
81:d7:3b:09:bf:22:4e:a3:c9:cf:9b:e1:87:c5:78:
e5:3d:12:36:08:9d:c1:3f:8d:69:92:4b:1b:e0:66:
73:6f:72:43:09:9f:33:4d:5b:b5:7b:5f:58:45:38:
ad:b4:73:b2:ad:fa:e9:52:b4:13:af:da:8b:98:f6:
fa:1b:a5:3b:b5:da:40:b1:38:6a:6a:6d:13:8a:c7:
dd:16:df:86:da:16:27:ce:1d:16:67:d7:02:f5:24:
37:85:ac:a4:db:bd:94:39:5f:62:2b:3c:9a:23:3c:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A2:6A:BC:9F:B3:E4:B5:B9:17:B9:87:6A:37:32:EF:D7:A1:C2:C1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143688.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a40e::/32
Signature Algorithm: sha256WithRSAEncryption
1c:b4:28:1e:86:12:7c:5a:0b:5e:51:3e:58:40:00:bf:15:1c:
3a:14:33:b5:63:ff:50:cc:fa:63:08:e6:fe:e7:35:5e:65:16:
5f:08:ee:bb:84:3d:c7:d1:b6:3e:4f:cd:eb:fe:2d:28:07:b3:
97:c6:2f:a8:68:52:b1:33:93:4c:b3:5a:a3:56:4e:89:f7:55:
3a:d2:58:53:22:d2:37:b7:2a:6a:35:7a:17:ab:00:76:5a:f3:
bf:c7:2e:25:ad:e3:2e:df:04:4d:94:6b:ca:2e:f1:87:5b:4b:
8f:49:6a:4e:19:8a:f5:e7:b3:5c:10:00:f6:74:98:80:e3:9a:
70:b6:6e:56:e0:ed:49:14:f4:e4:c6:62:fd:7e:a1:60:22:86:
d1:aa:22:98:93:e0:08:6a:5f:f5:87:19:8b:70:eb:14:74:8e:
56:43:9b:9e:dd:4c:c3:24:f1:9c:d0:21:3f:56:f5:cb:0b:e7:
3b:56:21:ed:de:12:9f:bc:ae:12:42:dc:f4:1c:49:c4:c6:99:
0c:18:cc:6a:63:11:95:91:f1:3c:3c:e3:4c:a9:70:f7:ac:fa:
19:66:cc:cd:2e:bd:70:63:e1:34:39:ed:c6:79:17:33:a0:e9:
bd:cd:0e:28:4b:ca:f6:60:8f:6d:28:84:7a:a1:6a:53:af:d2:
b0:09:c5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:57 2026 by rpki-client