Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143703.roa
File: AS143703.roa (raw, json)
Hash identifier: LIX/MwzsRdtD86QhfH9rphKqf7iKNen+QF/MNH4ZsT8=
Subject key identifier: C1:D2:5E:69:04:3C:9A:B2:36:EE:89:E2:DB:61:62:27:CD:16:88:1E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 267F62C4FBF03EA357F28E6AFC48FD002D8D0559
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143703.roa
Signing time: Fri 22 May 2026 07:08:58 +0000
ROA not before: Fri 22 May 2026 07:03:58 +0000
ROA not after: Fri 21 May 2027 07:08:58 +0000
asID: 143703
IP address blocks: 240a:a41d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:7f:62:c4:fb:f0:3e:a3:57:f2:8e:6a:fc:48:fd:00:2d:8d:05:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:58 2026 GMT
Not After : May 21 07:08:58 2027 GMT
Subject: CN=C1D25E69043C9AB236EE89E2DB616227CD16881E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:83:8b:67:60:50:47:12:4a:e5:5e:11:24:
23:d0:88:7e:66:96:d6:82:d8:01:61:49:ea:8d:ce:
5a:e7:f0:4c:3e:21:78:d2:e4:5d:a3:4b:e9:7a:55:
38:2b:fe:4d:ab:e1:5f:a3:c4:e8:80:87:2a:c9:52:
54:ef:ff:0a:e6:98:12:cb:8c:37:48:e3:43:fe:e9:
dc:bc:69:7d:3b:ae:64:8b:13:29:4d:47:e6:c2:da:
40:dc:15:e8:7c:88:f0:c9:48:4e:29:ab:21:a0:96:
d4:f0:91:a2:0d:a4:9d:71:33:d7:b4:21:50:f5:33:
a1:10:a6:db:c9:87:e7:d0:92:63:a0:70:79:1a:76:
70:03:86:12:f9:ce:b6:63:28:46:99:85:2d:90:96:
db:44:8b:3c:bd:f1:be:de:43:41:09:fc:34:72:e6:
cc:cb:67:2d:64:a4:3c:d2:db:c1:da:24:c6:6e:ef:
21:f7:67:22:d2:4b:48:9f:47:27:d9:e9:d1:6f:29:
52:8b:9a:08:aa:d8:78:1f:8a:a1:08:30:1c:69:e5:
7f:9f:a4:b9:b5:cf:eb:de:c4:d9:d6:1c:ca:2e:c4:
c7:8f:85:d2:1d:7c:d4:46:a8:ed:17:c2:f0:d2:d4:
51:b8:66:98:a0:e9:0c:2b:36:1e:9c:7c:f9:12:cf:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D2:5E:69:04:3C:9A:B2:36:EE:89:E2:DB:61:62:27:CD:16:88:1E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143703.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a41d::/32
Signature Algorithm: sha256WithRSAEncryption
96:68:c1:cf:03:01:52:83:37:5d:57:82:66:fa:2a:6e:6d:54:
33:1e:37:ff:18:8c:58:f6:f0:fb:0c:75:03:a0:59:8b:54:3b:
49:ec:64:94:dc:9a:c7:7a:82:94:e2:9e:82:8c:b7:ec:91:e4:
8e:da:72:ad:28:60:28:e4:a1:9a:55:bd:3a:43:c0:23:5a:2b:
9b:4f:72:97:e8:f8:73:62:8e:35:b5:09:88:77:22:cb:38:d2:
cd:15:07:66:10:1c:9e:35:fd:eb:ab:66:80:bb:ec:e8:90:50:
e1:9a:00:1c:e2:1d:8d:08:c7:1f:3a:30:bc:2b:94:c9:22:e1:
88:f8:e8:81:80:f0:26:3a:27:12:4a:c7:88:cc:ab:d8:ea:e4:
46:8e:e7:5e:a2:74:1f:1d:0e:8d:e0:dd:54:57:fe:58:f1:cf:
6f:69:fc:8f:e3:35:f5:68:8d:08:99:b0:72:08:ce:0c:dd:9f:
97:3d:04:a5:76:7c:86:c9:d0:10:89:fb:fa:10:4d:65:2b:95:
8f:02:e6:c8:8b:46:38:4f:c3:56:23:4c:f3:00:27:d4:8d:e7:
d4:af:b2:32:35:1b:0c:5e:fc:b0:1b:da:ae:22:d9:2e:50:93:
4e:fd:27:8e:c5:ea:2a:e8:94:be:27:4d:b1:fd:64:6c:d6:59:
ca:a2:64:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:40 2026 by rpki-client