Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143707.roa
File: AS143707.roa (raw, json)
Hash identifier: Pu3TJcb6mel7a77qkTm8sXeab8/RnrCl+b/CHUScuzA=
Subject key identifier: CF:44:5B:37:B9:E3:83:72:E8:38:B2:07:78:83:39:A7:26:33:0E:50
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7F4BC7350919EBB7404EEE29D8AD80F71A0B2629
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143707.roa
Signing time: Tue 26 May 2026 08:53:04 +0000
ROA not before: Tue 26 May 2026 08:48:04 +0000
ROA not after: Tue 25 May 2027 08:53:04 +0000
asID: 143707
IP address blocks: 240a:a421::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:4b:c7:35:09:19:eb:b7:40:4e:ee:29:d8:ad:80:f7:1a:0b:26:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:04 2026 GMT
Not After : May 25 08:53:04 2027 GMT
Subject: CN=CF445B37B9E38372E838B207788339A726330E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:8f:64:ea:29:ca:e9:7a:26:3c:52:c7:90:
b2:57:a7:04:5c:1e:65:81:49:1c:38:a1:9c:8c:12:
b3:db:25:55:de:87:40:26:69:9d:a6:6c:a0:25:d4:
38:e7:f4:25:82:90:b8:19:c6:47:b3:f2:84:2f:77:
a1:bb:2f:58:65:45:2d:36:5d:4f:60:9a:ff:9d:5a:
84:2c:df:99:c1:6f:86:26:00:22:0c:79:53:22:62:
bb:90:95:5f:87:0c:43:5d:c9:cb:c2:fd:2a:c0:44:
ef:e7:9b:23:36:70:ab:f5:00:53:77:25:11:8b:c9:
06:4b:03:52:59:e2:2f:77:f5:43:6f:7a:6d:93:26:
e1:1f:6a:74:99:75:fa:51:9d:62:ce:5c:a8:58:55:
a1:17:d6:51:3a:c1:a1:5e:b1:62:83:b1:cd:dc:2c:
2e:de:84:9d:d0:42:cb:75:32:38:85:9d:dc:dd:50:
d4:c7:a9:5d:99:62:c2:ac:bb:2c:4d:92:56:6b:36:
5e:20:c1:60:50:35:b0:2e:4c:a2:f3:f6:06:7c:c7:
2d:a2:8f:7f:73:c3:21:6a:92:55:b1:7f:f2:f9:df:
c3:50:ba:66:3c:f7:f3:66:ed:57:d4:8c:e1:90:9b:
28:81:df:35:6e:c0:9b:cf:f2:6e:5d:08:52:21:5d:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:44:5B:37:B9:E3:83:72:E8:38:B2:07:78:83:39:A7:26:33:0E:50
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a421::/32
Signature Algorithm: sha256WithRSAEncryption
ba:d6:50:8b:69:e2:76:a7:5c:07:77:8f:04:8c:b0:bd:2c:4a:
f8:8d:b0:3d:e3:ef:81:c4:bd:7b:20:6d:3f:7f:97:72:ab:e1:
dd:ec:95:6f:03:23:d7:31:d9:c1:1d:28:46:03:1d:5c:a4:d9:
4d:a1:d4:0d:e9:a1:91:f9:df:6f:03:55:01:51:df:63:1a:4d:
e6:61:55:be:6c:04:ed:17:04:14:28:e3:9f:19:61:a1:63:3c:
96:9a:d8:99:0a:1b:ec:24:88:03:38:d5:b0:dd:84:ce:db:9f:
70:67:6c:e2:91:ec:48:3a:a0:84:92:8f:d7:8b:26:27:fa:62:
61:73:06:b5:09:db:92:c8:63:1c:5e:82:26:d3:57:9c:c0:95:
db:7b:0c:22:89:78:cd:51:18:04:74:f4:93:80:de:d0:9b:56:
d9:d0:28:a8:39:6c:a3:6f:10:29:1f:ed:5d:b1:72:6a:3e:a1:
1d:37:e2:d9:3d:ed:d0:6c:16:78:66:c4:b3:36:36:2c:9f:90:
8c:0c:7e:85:ba:86:3b:d0:17:b4:a2:32:fe:4c:e7:96:01:f8:
08:e9:0d:39:21:51:7c:06:54:90:48:c9:b1:2a:9d:3b:8d:12:
5a:99:29:07:11:2a:fd:06:68:9b:2d:03:32:63:73:bc:5a:57:
bd:12:1b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:01 2026 by rpki-client