Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143692.roa
File: AS143692.roa (raw, json)
Hash identifier: 36wDFg9KWsSJtxRh3Vsll+Rtk2b+RhyTjq442d4w2m8=
Subject key identifier: 56:23:9F:4B:88:D4:FF:E4:ED:4C:69:35:AB:A4:50:51:47:34:62:A8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 673536D9BDF14FD927E7F11626C2C2C518370310
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143692.roa
Signing time: Tue 26 May 2026 02:35:23 +0000
ROA not before: Tue 26 May 2026 02:30:23 +0000
ROA not after: Tue 25 May 2027 02:35:23 +0000
asID: 143692
IP address blocks: 240a:a412::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:35:36:d9:bd:f1:4f:d9:27:e7:f1:16:26:c2:c2:c5:18:37:03:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:23 2026 GMT
Not After : May 25 02:35:23 2027 GMT
Subject: CN=56239F4B88D4FFE4ED4C6935ABA45051473462A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:c9:19:7d:21:15:4c:ed:f2:4a:ea:b4:3a:
2c:0d:71:fc:67:9c:55:84:85:5d:36:d1:7e:d0:8d:
58:92:b3:61:e8:37:b3:ac:be:32:61:44:0f:a6:51:
17:c7:cb:6f:97:29:82:9b:7f:ed:4b:16:84:9f:2e:
51:28:f4:53:aa:e3:81:a1:4f:b2:8a:6d:6f:11:33:
60:61:6f:de:6a:ce:20:88:9b:7f:c8:42:0c:00:d4:
f0:cd:cd:fd:f2:8f:df:9c:e8:c0:69:90:c2:e5:7a:
7e:7c:64:0a:2d:8e:c7:61:ca:8f:84:6c:0b:55:e8:
d2:28:bf:7c:dc:1a:33:6f:f9:f7:1e:8d:3c:03:25:
6a:47:a1:cc:32:83:d0:85:c9:24:54:53:26:8f:95:
38:6d:86:a3:25:26:da:15:48:82:ef:4d:82:ad:93:
9e:cf:bf:a9:12:33:66:75:31:42:65:e3:d6:bd:d1:
fe:a5:d0:99:9d:42:bc:8d:f6:32:11:c4:86:c3:18:
6a:1c:94:26:13:ac:24:28:ea:ec:21:d6:c1:f9:c8:
7a:02:7f:31:2d:6d:fa:d5:f4:8a:8c:7f:1a:b8:19:
9e:79:61:9a:ea:eb:fa:eb:00:13:13:cf:c0:40:9c:
76:ca:8f:3a:c4:1c:b2:0e:d4:b1:65:d5:2a:61:e2:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:23:9F:4B:88:D4:FF:E4:ED:4C:69:35:AB:A4:50:51:47:34:62:A8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143692.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a412::/32
Signature Algorithm: sha256WithRSAEncryption
4d:f9:48:e3:1d:27:33:4a:7d:cf:bb:a5:7c:a9:17:11:91:29:
29:6f:58:26:b9:bf:4a:81:5c:a6:49:b1:e5:fd:7c:e6:ee:7e:
45:53:1a:2b:05:bf:fb:95:b0:a1:7f:a1:70:42:60:bb:88:5d:
c1:87:e6:76:24:0d:51:b9:d8:b8:2b:71:6e:62:9c:74:d0:de:
59:3d:a6:74:59:dc:22:d6:78:42:02:dc:61:1f:40:e6:7a:6d:
7e:0d:33:44:29:60:b5:f9:bf:bf:e3:02:28:ec:71:38:a1:24:
f3:1b:6b:61:73:09:6d:3c:77:1e:95:b4:29:0f:bf:32:f4:aa:
31:ed:5c:e1:24:0d:36:6e:0f:4d:3e:ca:c3:37:85:97:9c:b8:
50:a3:fb:a8:55:c4:8e:5f:c7:ad:6e:b7:84:fc:67:26:c2:a7:
ef:8e:6a:81:e2:20:8b:49:34:0c:1a:ff:87:19:d1:bb:50:21:
66:ec:c1:76:30:a4:3b:db:84:b7:2f:aa:93:b7:5b:6f:eb:4b:
2a:cd:99:20:d4:a8:02:d5:a7:d2:c7:fa:a9:77:70:7b:42:07:
21:c1:e8:41:90:65:2b:bd:f8:ad:6c:b8:d2:f3:77:f1:f2:68:
cb:e1:aa:ab:67:a1:3a:d1:ee:e1:b4:3e:cd:5c:9b:8f:0f:29:
b8:6f:e2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:12 2026 by rpki-client