Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143705.roa
File: AS143705.roa (raw, json)
Hash identifier: HFTYq1H+JifK0YxZWGidW6/dSq2+1l+55C08vnF9OUg=
Subject key identifier: 70:7B:A9:8F:E7:9F:F5:39:D7:98:7B:1E:6B:10:0B:FD:EA:8C:55:0E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4533D30887E3BA7C23F3D6043F056AAC8C0482F8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143705.roa
Signing time: Fri 22 May 2026 04:08:22 +0000
ROA not before: Fri 22 May 2026 04:03:22 +0000
ROA not after: Fri 21 May 2027 04:08:22 +0000
asID: 143705
IP address blocks: 240a:a41f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:33:d3:08:87:e3:ba:7c:23:f3:d6:04:3f:05:6a:ac:8c:04:82:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:22 2026 GMT
Not After : May 21 04:08:22 2027 GMT
Subject: CN=707BA98FE79FF539D7987B1E6B100BFDEA8C550E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:84:4f:ca:34:46:d8:dd:76:ca:09:59:1b:
04:20:2e:46:c2:99:fb:70:a9:84:f3:48:ce:1d:47:
e5:56:c9:48:6b:1d:f1:e8:e5:a4:b8:b7:86:56:77:
de:77:4a:7f:1b:75:52:f1:26:e7:13:3e:2b:6a:cc:
b4:8b:ad:f8:d6:55:bc:99:94:32:10:50:9d:31:8c:
59:4a:e8:7f:fa:e6:99:fd:4f:54:12:4d:95:0f:a7:
4f:c7:8e:f6:29:29:5b:b8:75:05:c3:36:8f:df:72:
fd:86:1a:1d:6a:c0:fb:be:38:f1:1a:53:95:40:3a:
75:7a:15:f6:ac:08:1a:62:9b:67:1b:b7:9a:e8:90:
e7:f6:36:c8:c8:00:74:47:fe:a3:c1:80:7d:60:a1:
8c:4e:61:0b:58:3c:f5:84:1a:af:e3:13:e5:26:44:
eb:3a:8f:c4:9c:5b:26:bb:96:82:99:a3:a8:74:c5:
53:c5:da:76:12:ac:18:12:75:6a:dd:0b:5f:3c:0f:
43:88:ff:ee:06:b9:4c:f5:e1:41:91:1b:d5:17:80:
df:3a:b7:0a:62:c8:98:c9:27:c6:6d:72:26:af:4f:
1e:de:4d:c6:49:c8:78:44:be:e2:a6:cb:dc:c5:65:
4c:59:d7:1e:76:15:54:ad:4d:dc:23:e6:64:23:e7:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7B:A9:8F:E7:9F:F5:39:D7:98:7B:1E:6B:10:0B:FD:EA:8C:55:0E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143705.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a41f::/32
Signature Algorithm: sha256WithRSAEncryption
21:9a:15:07:4c:20:eb:8b:4f:c4:45:0a:1c:e3:54:fa:9c:fe:
14:ee:0d:12:e6:6b:cb:ba:9f:80:ee:44:a4:2c:b7:0a:a9:c2:
ed:32:cb:d2:71:c6:3a:b0:23:ca:68:bf:f8:83:c3:d5:89:c6:
c1:0f:ca:83:2d:e7:d4:65:d0:51:f9:98:dc:54:3b:4f:ef:7b:
81:56:25:e7:e6:df:a7:d8:7e:f4:04:63:f6:f0:57:0d:ba:5e:
99:e2:b3:96:b2:97:e0:44:b2:ed:bd:06:59:09:18:aa:49:9a:
09:38:23:d9:dc:fc:bb:03:cc:ad:8c:0c:ff:b8:af:6a:f6:35:
22:12:6a:af:3a:aa:b5:4f:dc:5c:af:87:46:55:c9:7a:78:23:
8f:a4:30:fb:3e:30:76:72:f7:57:35:01:05:5c:c2:c9:03:70:
2d:f6:30:b7:ac:6c:2b:98:ee:a8:dd:80:7a:99:6c:8e:71:63:
64:93:5f:98:88:f9:9c:d9:ba:0a:94:98:2a:e8:f2:1b:46:51:
f0:06:2e:a9:9f:7c:8c:df:d0:9f:65:f0:01:bb:68:52:80:ef:
97:d4:3c:4e:26:0e:eb:ed:8c:68:5d:59:1e:a2:14:3e:ed:88:
48:74:8b:09:f0:04:55:fe:ca:b5:ea:b1:37:62:d2:c6:85:38:
c0:a2:81:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:15 2026 by rpki-client