Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143704.roa
File: AS143704.roa (raw, json)
Hash identifier: nwqyVzq3LA4hQOoLLEvlidCsZBdK+rz9w44pOorbA5I=
Subject key identifier: 9C:7E:15:BD:49:7A:FF:41:F1:2A:47:C9:82:14:C2:1E:FE:1B:A2:1E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 46B4C3E66FAC7D381615064BAF7E052790A58712
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143704.roa
Signing time: Mon 25 May 2026 03:19:26 +0000
ROA not before: Mon 25 May 2026 03:14:26 +0000
ROA not after: Mon 24 May 2027 03:19:26 +0000
asID: 143704
IP address blocks: 240a:a41e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b4:c3:e6:6f:ac:7d:38:16:15:06:4b:af:7e:05:27:90:a5:87:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:26 2026 GMT
Not After : May 24 03:19:26 2027 GMT
Subject: CN=9C7E15BD497AFF41F12A47C98214C21EFE1BA21E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:a5:30:77:f4:41:d1:ac:92:4f:cf:ff:78:
f6:83:d5:af:86:64:32:6e:66:4b:f6:e4:40:10:7d:
db:84:d3:7d:52:de:b0:d8:60:65:b5:73:94:59:b6:
ad:35:f3:4b:1c:48:b4:60:09:d1:ae:66:bb:01:ab:
b9:de:b0:cb:a3:0c:84:3e:98:a1:94:52:4a:80:f1:
f4:02:31:70:d4:e9:69:5c:7f:cb:c1:cd:00:b5:b7:
ab:e0:6c:15:50:8a:2b:63:20:b3:36:6c:cf:7a:3d:
54:06:73:78:34:98:ed:7d:23:28:c4:58:f3:04:38:
fb:a9:b6:ac:51:39:4b:23:27:68:18:23:50:8e:e0:
71:a8:b1:c6:00:58:95:9a:61:1e:56:e7:e4:d8:ff:
e3:63:f8:bb:87:58:9d:ba:0b:86:76:4b:35:9b:30:
1e:b7:c8:31:94:01:9b:14:c9:c6:05:24:05:c1:00:
7c:70:ae:95:c3:4b:23:99:97:cb:a5:b0:8b:02:c7:
8c:a4:51:58:c8:34:1b:8b:ed:f2:39:c7:8f:b8:7c:
ec:65:a4:05:53:31:e1:9c:21:9e:c7:18:b4:de:c3:
7a:df:71:9c:01:9d:28:08:30:91:cb:0f:0d:1d:30:
3e:0a:ab:a3:c4:19:47:e7:e3:af:dc:32:00:45:a1:
63:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7E:15:BD:49:7A:FF:41:F1:2A:47:C9:82:14:C2:1E:FE:1B:A2:1E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143704.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a41e::/32
Signature Algorithm: sha256WithRSAEncryption
0e:c1:10:82:cd:4b:f0:f1:c3:b2:d7:44:77:41:68:a0:7a:9a:
2f:f9:e5:68:0f:ab:7c:6c:37:72:68:82:cf:24:77:56:c6:24:
d3:39:5b:2f:f4:3d:87:06:4f:3a:fc:86:bd:89:de:6a:c6:f0:
4a:cc:0b:b8:e6:56:fb:28:ff:d6:c1:6c:22:40:4e:4b:2f:19:
b6:d6:f7:85:07:12:07:31:4a:2c:6d:af:b1:53:bf:86:a6:04:
f9:3e:26:cb:cd:ed:b9:30:e7:61:fa:bb:e0:a9:fb:31:63:22:
eb:d1:1b:8f:f2:5b:90:e4:85:e6:80:6b:4f:30:43:48:ab:c3:
bf:6d:d5:a4:94:d5:be:d4:04:c1:af:85:56:0a:98:a7:55:3e:
c2:8c:25:f1:e8:31:3f:fb:45:61:bc:2e:8a:d0:0e:c8:23:95:
6c:f7:f4:d5:d0:4f:4f:1e:f2:75:9b:b7:3d:80:1f:e4:cd:f6:
8d:0f:89:cd:59:2d:16:9f:7e:a2:05:4f:fa:e0:b9:ce:dc:e8:
aa:f5:ed:43:91:89:1d:78:63:d4:3a:ac:fb:16:b9:cd:24:53:
72:bd:ad:7b:f7:8e:84:76:88:47:57:96:ea:68:06:b2:7a:4d:
c2:35:a2:be:bd:3d:c1:1a:44:97:ab:bc:76:e4:09:99:6f:9e:
36:c2:c6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:25 2026 by rpki-client