Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143697.roa
File: AS143697.roa (raw, json)
Hash identifier: TxR9a2mJoflnwYdsU6ZGft4tcFHdV5pFpeTLlRqpues=
Subject key identifier: 6D:05:31:91:6D:43:12:3A:91:45:90:36:CD:E7:9D:D9:F7:B0:74:B3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32FCE1BD90D8FD1DE34FCD42FACE7B74B82ECFE0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143697.roa
Signing time: Mon 25 May 2026 06:48:46 +0000
ROA not before: Mon 25 May 2026 06:43:46 +0000
ROA not after: Mon 24 May 2027 06:48:46 +0000
asID: 143697
IP address blocks: 240a:a417::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:fc:e1:bd:90:d8:fd:1d:e3:4f:cd:42:fa:ce:7b:74:b8:2e:cf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:46 2026 GMT
Not After : May 24 06:48:46 2027 GMT
Subject: CN=6D0531916D43123A91459036CDE79DD9F7B074B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0e:bf:e6:46:de:04:93:f4:8d:be:06:ff:be:
f9:31:a0:a1:cb:62:bf:af:5b:94:5a:00:2c:66:59:
25:fe:54:56:63:fc:69:af:8b:2a:8a:2d:f6:d7:53:
16:d5:04:5a:b6:c9:4c:99:a8:56:e6:44:86:83:83:
86:ba:8e:9c:1b:29:c2:3f:59:70:42:db:f0:74:48:
1c:f8:26:1f:27:7c:19:f1:bd:fc:5f:be:18:96:2f:
ac:30:22:20:44:de:9e:4f:3c:42:4f:06:c9:f2:9d:
52:15:13:e7:f7:42:07:4d:35:a1:1b:07:72:af:94:
07:53:19:42:99:36:51:29:3d:66:c7:05:f6:ac:b1:
5a:7d:97:5d:37:23:56:f3:7b:69:da:03:88:b5:db:
ea:5c:fb:c7:2e:22:8f:c6:b0:ec:85:c6:78:dc:2d:
de:ed:53:6b:35:d6:47:b2:e5:6e:db:4b:cb:78:9d:
bf:ac:6c:69:f9:41:bb:b5:b1:ed:c7:a6:04:4c:72:
ce:83:10:22:06:c7:c0:0b:a6:13:e1:69:de:e4:12:
c8:b2:d0:ab:28:79:6d:54:d6:b9:38:9d:8c:a3:ee:
de:19:d7:91:d6:86:05:94:c9:95:9a:34:95:23:85:
96:45:65:45:85:94:76:52:b0:ae:34:74:76:5b:3d:
5f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:05:31:91:6D:43:12:3A:91:45:90:36:CD:E7:9D:D9:F7:B0:74:B3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143697.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a417::/32
Signature Algorithm: sha256WithRSAEncryption
4f:f3:1e:d8:19:4d:40:c3:03:b7:16:fe:a3:55:32:d2:8c:db:
1a:e7:d8:b8:44:31:a8:34:30:a0:d7:8d:6a:2f:f7:a8:60:e5:
2f:aa:81:d9:37:94:4c:13:87:0b:04:be:85:1d:a1:9c:16:e5:
af:cb:7d:08:d5:84:b1:37:7b:a8:bf:a2:0a:e7:78:ee:fc:e2:
40:14:87:6f:35:2a:a1:f0:d0:d0:b4:51:82:f7:bb:da:d8:9c:
20:c4:88:ef:2c:1a:ec:a1:37:8d:05:dc:3b:11:e9:15:0a:1b:
82:a6:81:0e:1f:77:21:34:9c:11:59:28:d9:cb:e8:ef:88:c3:
3c:81:eb:e2:3b:b1:a7:e4:13:ab:dc:a2:a1:c1:a3:70:34:84:
36:61:06:a8:2a:bb:6f:aa:65:30:e0:cd:d8:1f:dc:df:ca:69:
42:0a:81:b8:bd:93:9b:fd:e0:9f:dd:d4:e2:bf:34:7a:21:7b:
d7:54:1f:19:e4:9f:d4:88:03:79:3d:33:3d:b8:46:ee:84:5b:
08:80:ba:05:b4:67:58:0e:0a:ac:d3:82:d0:58:d8:19:d6:2b:
79:b0:c8:8f:e5:eb:36:57:f4:20:74:b9:b8:43:1d:d1:e5:4b:
aa:d5:f4:5d:55:4a:d6:37:d7:ad:b9:1f:1f:5a:a7:f4:2c:06:
a0:95:a4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:05 2026 by rpki-client