Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143690.roa
File: AS143690.roa (raw, json)
Hash identifier: 7Xf3kvoAmRk72fL6Kju9XHJRp0gPWufH3xbBHetTXfU=
Subject key identifier: 46:B7:7A:CF:86:A3:11:8C:6C:E1:A5:84:7F:23:78:4B:8C:FE:D2:82
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1F5F1B2E43BCE0B2BAE82E3E999C247E509D2C3C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143690.roa
Signing time: Fri 22 May 2026 07:24:25 +0000
ROA not before: Fri 22 May 2026 07:19:25 +0000
ROA not after: Fri 21 May 2027 07:24:25 +0000
asID: 143690
IP address blocks: 240a:a410::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:5f:1b:2e:43:bc:e0:b2:ba:e8:2e:3e:99:9c:24:7e:50:9d:2c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:25 2026 GMT
Not After : May 21 07:24:25 2027 GMT
Subject: CN=46B77ACF86A3118C6CE1A5847F23784B8CFED282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:7f:64:3c:a0:f9:07:10:72:2d:78:4c:d5:
2a:93:7d:c3:59:68:ba:fa:72:dc:a3:f0:0a:00:f8:
3f:a7:9c:f9:d9:06:de:e2:48:48:08:9a:7f:b4:58:
d7:89:29:fa:b3:43:90:c0:7c:a3:7f:41:e1:59:80:
e4:eb:4d:49:61:a5:a1:7f:61:82:17:f4:c9:e0:4e:
9f:9f:fa:96:4c:80:b9:97:cf:e1:ec:ca:ad:fc:4e:
03:15:56:fb:e8:ff:87:0e:82:5f:c5:23:2b:03:bb:
59:7a:d9:ee:97:08:e5:d7:ec:f3:b2:ab:f5:67:36:
15:d5:c9:dc:e5:e1:7e:95:d3:ef:0d:1f:3c:de:b3:
f5:c6:35:30:d0:aa:6f:52:b3:11:43:e6:5a:c9:03:
0b:36:4a:7a:6d:3a:51:79:9c:60:8e:c3:5b:44:86:
e0:28:fa:fc:69:76:a7:52:b7:0a:13:d2:61:c4:21:
d5:b8:18:96:e8:32:31:0f:3c:ef:42:79:db:2f:29:
6e:d3:03:3e:b5:26:f4:64:eb:02:5c:b4:82:d5:2f:
8c:db:36:9d:de:22:c5:e1:58:85:47:6e:ad:f6:49:
08:ca:26:46:56:2a:5b:49:d5:d5:03:ec:e7:09:02:
59:e7:f6:18:9a:b5:a2:e6:03:11:5a:d5:87:51:93:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B7:7A:CF:86:A3:11:8C:6C:E1:A5:84:7F:23:78:4B:8C:FE:D2:82
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a410::/32
Signature Algorithm: sha256WithRSAEncryption
bc:61:ce:86:d7:ea:5c:fd:44:b4:eb:6e:17:0a:82:de:a4:39:
de:43:d5:46:8f:eb:06:3a:41:1d:a2:65:28:9e:d4:6a:11:98:
4d:af:04:68:54:3c:4c:c5:e7:2e:4c:82:6e:6f:3c:c9:00:40:
90:00:87:e9:33:62:76:ec:4f:a3:58:8b:c6:28:3f:65:c6:01:
d0:ea:20:29:02:2a:ac:78:6e:4d:d5:9e:cd:f0:dd:c6:42:9a:
95:12:52:7f:57:c9:ab:ad:4c:b9:bd:0d:5d:f4:2b:56:87:4f:
ea:99:99:22:8a:c1:fb:7e:9a:1f:da:26:14:2c:26:b9:ba:06:
da:a1:24:3a:a9:87:fd:88:df:8f:d5:1a:7e:5f:2e:6a:4d:f3:
61:e2:20:2c:9f:7e:85:79:8e:f6:47:40:01:a6:41:f1:73:e5:
5c:73:55:5c:ac:e3:96:29:2a:ef:6b:0b:bf:0c:98:3e:a9:84:
5c:f2:e9:62:d2:77:96:13:a0:36:a9:fa:4f:62:d3:59:ad:bb:
d7:2b:98:f3:70:7d:21:64:dd:29:bb:1b:df:25:55:62:5c:d0:
36:7e:51:e6:18:43:ee:5a:9d:79:8f:1a:d9:4f:a9:84:b2:ac:
27:af:c7:7b:54:b5:da:3b:29:e7:8f:db:2c:47:a2:f4:d0:9d:
c9:c1:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:44 2026 by rpki-client