Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143701.roa
File: AS143701.roa (raw, json)
Hash identifier: sAx1MQ6D4dN1vf2PBAXe+WL8UXjyIsreJp+5jnsW/Ts=
Subject key identifier: 62:4E:E1:14:6C:99:C9:45:20:F9:30:31:11:2F:56:A8:3B:03:39:31
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78E7124979738A31D691C797276535C854ED83C7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143701.roa
Signing time: Tue 26 May 2026 06:12:44 +0000
ROA not before: Tue 26 May 2026 06:07:44 +0000
ROA not after: Tue 25 May 2027 06:12:44 +0000
asID: 143701
IP address blocks: 240a:a41b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e7:12:49:79:73:8a:31:d6:91:c7:97:27:65:35:c8:54:ed:83:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:44 2026 GMT
Not After : May 25 06:12:44 2027 GMT
Subject: CN=624EE1146C99C94520F93031112F56A83B033931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:a1:a6:03:cc:fc:93:a3:21:7d:55:cd:3e:
76:55:a6:41:51:ab:60:8a:d7:f4:53:cf:db:16:b3:
da:d8:63:24:0b:6a:31:f0:03:db:30:93:ce:e4:86:
13:a3:99:11:16:8e:16:d4:ac:54:39:32:a4:68:c6:
fc:55:e8:14:2b:fb:61:10:27:94:f8:3b:ac:05:1d:
19:fe:44:3e:89:67:46:8f:8d:43:c1:4c:49:47:50:
f6:aa:1e:4d:90:cf:8b:c9:9b:65:a2:81:0d:de:8f:
a9:92:49:fd:dd:62:18:d4:b2:51:a9:3d:b3:94:4b:
72:26:02:05:ab:7f:5d:4d:6d:25:0a:39:70:45:d6:
a4:1c:92:14:7a:37:ef:e8:7a:be:b1:30:46:ed:c8:
2b:3a:20:ff:67:85:73:32:a0:18:c0:b4:01:32:67:
f9:a9:14:0e:35:69:67:8f:9c:d6:61:fe:67:12:10:
14:40:bb:02:bd:90:3e:1a:ff:cb:76:0b:40:91:34:
0b:68:62:a7:1e:cd:ee:2c:a0:7b:bb:c7:af:08:ce:
d4:49:cc:e2:33:d2:c4:c0:76:e7:af:7b:f8:88:44:
46:60:13:ca:53:45:2b:fa:a2:9c:c0:ce:a4:46:f1:
aa:4d:7e:bd:ed:f6:dd:43:d3:d7:7f:53:b6:eb:f4:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4E:E1:14:6C:99:C9:45:20:F9:30:31:11:2F:56:A8:3B:03:39:31
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143701.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a41b::/32
Signature Algorithm: sha256WithRSAEncryption
30:f4:8f:1c:2f:2e:aa:60:7c:a8:44:64:8e:66:7c:ca:40:c8:
88:d0:fc:6a:bf:46:17:3a:0a:0d:4b:bf:37:9f:5f:b7:e7:eb:
03:f0:f0:4b:02:9a:fe:5c:f1:6e:20:27:27:9b:92:3b:9b:33:
2b:2f:99:db:00:96:47:0a:ef:31:ff:bb:41:17:34:40:cf:a7:
ec:bc:ed:a6:ba:a9:46:91:73:4d:a5:f3:48:e9:c3:84:07:29:
f8:4a:bf:14:b1:8e:f9:b1:7a:00:dc:0b:48:4a:c4:8b:fe:53:
82:78:41:7a:dd:73:8b:01:c7:7c:c9:a4:48:fe:8f:64:40:62:
36:f9:55:3f:71:80:cb:75:14:9c:b0:38:56:6e:6f:ac:74:e5:
6f:f8:d7:39:dc:d5:46:83:55:84:e5:d3:20:da:db:3c:77:4a:
4e:58:cb:5d:9b:94:fc:e4:48:76:2f:55:18:70:0d:d8:76:5a:
af:54:76:67:d4:9f:3c:cb:bc:5b:65:54:17:27:5c:6d:54:52:
3f:82:83:fb:f9:8a:9e:95:dc:df:a5:81:02:ce:76:2d:f1:b0:
f1:1a:ae:f9:a5:3d:82:e1:b2:1e:ae:51:0e:96:72:af:ae:d3:
4a:1f:13:f3:d9:6c:53:ee:0f:dd:98:53:9d:a0:fb:27:26:bc:
36:f6:c6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:04 2026 by rpki-client