Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143702.roa
File: AS143702.roa (raw, json)
Hash identifier: c14VNxAKJYQAU9od94pWuXDveyTs+Jlgf3eLTGWiruw=
Subject key identifier: 1B:99:27:35:C3:99:3A:5B:5E:37:60:06:63:9F:36:BE:A3:40:ED:A7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 361C699933A2D2F19FC9B24004D6D089CEEF4E69
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143702.roa
Signing time: Tue 26 May 2026 06:12:45 +0000
ROA not before: Tue 26 May 2026 06:07:45 +0000
ROA not after: Tue 25 May 2027 06:12:45 +0000
asID: 143702
IP address blocks: 240a:a41c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:1c:69:99:33:a2:d2:f1:9f:c9:b2:40:04:d6:d0:89:ce:ef:4e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:45 2026 GMT
Not After : May 25 06:12:45 2027 GMT
Subject: CN=1B992735C3993A5B5E376006639F36BEA340EDA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:94:f8:96:e3:6a:09:b4:9c:a0:b2:e6:9e:
6b:b9:2e:eb:63:df:40:5c:a0:45:78:4b:08:af:87:
a7:cd:f2:84:61:16:68:f2:c3:6b:76:a4:84:8a:b1:
e5:26:b6:ae:f1:64:0d:16:a2:39:69:f2:87:62:27:
12:62:10:e5:1b:5e:4b:b1:93:2a:8e:f4:ec:a3:80:
ed:20:39:7a:bb:33:af:3b:b5:1e:85:14:83:f7:5f:
cd:9f:79:f1:31:fd:f0:2b:3a:9e:02:ea:20:60:63:
b8:cd:52:06:2f:8e:13:0f:6b:f4:92:6c:7e:b7:bc:
e4:98:fe:e2:4c:33:ee:14:d3:03:b3:08:06:99:dc:
44:e3:4f:56:b0:e3:2a:01:6f:5b:20:7b:9f:af:53:
72:ee:ac:cc:b1:96:91:95:5e:47:d7:cf:41:45:bd:
ba:ce:d8:24:13:2e:e0:cc:bb:bd:80:34:ad:39:61:
44:f5:86:30:c8:dc:c9:f7:05:77:24:8f:88:3c:d4:
06:e6:3a:0a:a7:3d:2b:c8:91:19:13:ff:02:24:0f:
ca:d2:af:78:ae:b5:73:eb:61:72:2b:63:57:2d:be:
a3:e9:b8:1c:4e:1e:1a:57:28:1a:ce:71:e2:e6:22:
33:ee:40:ce:9e:6a:6d:86:81:d9:3c:50:d9:bd:12:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:99:27:35:C3:99:3A:5B:5E:37:60:06:63:9F:36:BE:A3:40:ED:A7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143702.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a41c::/32
Signature Algorithm: sha256WithRSAEncryption
2a:e5:a1:ec:64:d3:b4:7e:40:e5:0d:a2:22:6e:72:a9:09:52:
f1:a4:d0:b8:ae:35:60:a6:e4:cd:23:a8:5e:11:a5:ec:05:f4:
5f:3a:a7:90:81:f4:81:92:89:97:bc:dc:ba:d9:7f:d4:d6:01:
e9:ec:9e:c2:77:24:b5:e6:3a:2c:09:bc:38:ee:b2:57:31:b2:
69:ef:89:be:c9:ba:9c:a1:93:90:46:8f:ee:59:4e:8e:af:3a:
2b:98:91:8d:5a:a5:51:9a:91:c6:68:5e:65:99:38:46:a3:59:
ee:99:cd:12:46:f1:33:59:07:af:09:23:70:6a:f3:33:8b:af:
26:e5:58:41:12:7b:70:b2:1a:32:18:4e:24:fa:23:05:ec:16:
75:cc:9c:54:d7:91:23:10:c3:8d:c8:28:d7:63:65:34:72:05:
b1:36:5e:46:aa:9a:2f:31:c1:b9:ff:19:ae:f4:23:ee:a3:b9:
f6:69:53:80:49:57:77:d3:07:66:5e:f2:53:85:22:b7:a5:e9:
38:30:dc:95:84:0e:bc:90:4e:b5:dc:25:de:79:2c:28:d5:08:
65:75:10:0f:1f:4e:8b:1b:d2:31:35:28:38:1f:38:9f:38:44:
63:77:a4:52:23:97:dd:09:c3:9e:57:d1:a9:d5:a4:4d:9b:ad:
c5:02:85:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:33 2026 by rpki-client