Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143709.roa
File: AS143709.roa (raw, json)
Hash identifier: YeHfnT/K7qx+a9PW0DrWkF27J0YefPh1JP2ixK/MkUQ=
Subject key identifier: 7B:DC:28:F3:C1:16:50:0B:66:2D:2E:8E:9D:F4:68:18:A9:D6:92:2C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5C38D599F5083F5381EF37CBA6C6BD1CDCCF6AA1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143709.roa
Signing time: Mon 25 May 2026 01:38:27 +0000
ROA not before: Mon 25 May 2026 01:33:27 +0000
ROA not after: Mon 24 May 2027 01:38:27 +0000
asID: 143709
IP address blocks: 240a:a423::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:38:d5:99:f5:08:3f:53:81:ef:37:cb:a6:c6:bd:1c:dc:cf:6a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:27 2026 GMT
Not After : May 24 01:38:27 2027 GMT
Subject: CN=7BDC28F3C116500B662D2E8E9DF46818A9D6922C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b9:91:9e:d9:73:8f:c1:d2:2f:91:4f:01:1d:
b4:d3:61:71:7f:d1:f3:ed:91:0d:83:d2:3b:4d:d6:
57:c1:9a:2d:cf:fd:0b:2c:6e:22:da:16:c5:7e:a0:
54:37:fa:b8:b4:76:34:e6:79:df:87:3c:e0:3b:88:
41:3d:21:21:e3:90:a7:cf:5f:a4:55:88:f2:e4:c7:
80:4f:d2:80:1b:83:f9:a5:ae:62:bb:62:96:e4:1a:
b1:52:f3:dc:e5:b7:bd:1c:64:75:1b:32:f7:33:d0:
08:07:f7:ce:84:76:01:c1:9b:d5:b9:9a:f6:b2:27:
6a:09:7e:fb:9d:29:e4:fa:aa:f0:01:43:3b:43:f3:
05:85:1e:92:17:f5:f9:45:09:ef:82:bf:ec:71:aa:
db:0d:cb:ab:56:1f:b6:ac:62:d9:fa:4e:b3:30:e0:
23:f0:ff:8d:c4:29:c7:b1:4f:dd:3d:89:72:8d:dd:
60:45:de:24:4f:e2:85:12:54:4a:8e:ed:a0:e1:61:
3e:b1:99:d0:ba:4b:12:b8:bc:33:6d:c7:d8:d7:27:
31:fd:65:92:a9:fc:9a:34:ec:10:fa:e2:78:f4:74:
c7:ab:dc:4f:7b:55:0d:e9:4c:90:50:7f:a3:b0:f0:
7f:2e:9f:85:96:db:ed:d3:76:75:a2:dc:9c:c6:2d:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DC:28:F3:C1:16:50:0B:66:2D:2E:8E:9D:F4:68:18:A9:D6:92:2C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143709.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a423::/32
Signature Algorithm: sha256WithRSAEncryption
b0:45:da:4c:65:e1:81:18:fb:4d:6a:1f:a6:29:8a:0e:59:02:
cf:4c:9c:2e:b7:fa:be:5a:a1:34:c9:22:6c:d1:25:9a:09:67:
cc:3a:df:e5:75:92:be:07:56:3b:18:76:f8:25:92:f1:ca:c7:
a9:2a:96:9a:07:57:e2:94:e6:4e:bd:56:00:ff:c9:63:4f:98:
33:38:4f:3a:27:88:06:3b:86:45:83:cb:41:5b:38:e8:0f:6f:
3b:8e:dc:b8:a0:75:0e:ea:ad:56:71:8b:a1:4d:3f:f6:17:91:
0f:ca:51:c4:50:42:11:49:bd:07:c8:96:ad:a7:59:f9:a2:c3:
e6:24:71:ab:65:70:af:d5:f0:46:5e:96:bb:d7:2b:8c:fe:af:
13:ed:7f:c3:9d:d9:c2:95:ae:2b:8d:b9:97:55:ed:de:1e:ad:
25:07:2a:24:01:27:af:d6:c9:0e:5a:46:4f:f7:d2:37:2d:ae:
8d:56:54:24:c9:91:8a:6c:e3:9d:96:10:a5:a9:e0:b2:b4:96:
e7:86:4c:b9:b8:1b:c1:b5:77:d7:16:8e:19:94:cb:c8:99:99:
fc:36:2d:8c:55:70:72:ff:b6:84:59:3b:64:5a:06:c5:ac:79:
cc:94:5a:47:79:95:a3:13:e0:b1:f6:d8:03:50:09:e8:00:95:
4b:c9:3b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:58 2026 by rpki-client