Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143710.roa
File: AS143710.roa (raw, json)
Hash identifier: uIQheAABiv0URWjUbt9SxRixVmyipDZfafQ3cMr4Fpg=
Subject key identifier: 77:5D:8C:ED:70:55:5E:86:63:80:07:B2:DC:01:17:57:1F:7C:54:37
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 568A4C6561ED87FB618F0CE1A108DE915986869E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143710.roa
Signing time: Fri 22 May 2026 07:09:05 +0000
ROA not before: Fri 22 May 2026 07:04:05 +0000
ROA not after: Fri 21 May 2027 07:09:05 +0000
asID: 143710
IP address blocks: 240a:a424::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:8a:4c:65:61:ed:87:fb:61:8f:0c:e1:a1:08:de:91:59:86:86:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:05 2026 GMT
Not After : May 21 07:09:05 2027 GMT
Subject: CN=775D8CED70555E86638007B2DC0117571F7C5437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:b0:79:cc:96:86:9e:0f:4e:4a:30:5b:41:
05:46:b2:f3:82:38:02:7a:6e:57:54:75:ab:32:8a:
4e:e8:54:e9:aa:ae:a7:1c:0f:7e:a4:c3:83:c7:44:
73:0d:0a:05:e2:ba:a6:d5:56:ce:f3:e0:8e:da:4d:
57:de:3d:dd:f0:c1:f4:13:3a:ba:96:b9:c0:9d:41:
cc:11:8d:db:da:04:ad:fc:7e:b3:69:d8:c7:ae:0b:
b1:1c:2c:9d:21:f9:54:56:59:c1:86:b8:c7:d7:36:
24:49:56:a3:ed:89:04:23:13:3d:ea:c8:aa:17:e6:
1f:ca:70:ab:48:33:2d:8a:ca:91:2c:e2:4a:49:a2:
15:e3:18:d8:03:5c:d1:2e:a9:d6:1c:a4:b3:1c:aa:
c8:b9:30:11:16:7d:6e:ab:7f:e5:19:aa:31:d2:10:
4e:4a:60:9b:14:8a:5a:25:fd:43:0f:89:bf:97:20:
15:ca:da:20:4a:70:3d:49:b4:62:7c:16:89:6b:ea:
2c:ab:55:ce:a3:8f:bd:98:71:f5:80:9a:57:6a:12:
0b:98:6d:58:77:30:c2:4a:87:ba:ab:3b:6a:47:ba:
f5:80:77:0a:86:44:4e:32:4e:d5:f0:2c:ab:20:fa:
a5:fc:a6:b1:a0:fd:62:32:be:27:2c:a0:c9:b9:7a:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5D:8C:ED:70:55:5E:86:63:80:07:B2:DC:01:17:57:1F:7C:54:37
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143710.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a424::/32
Signature Algorithm: sha256WithRSAEncryption
4c:4b:30:57:ae:d6:c9:26:45:5b:0e:f5:e0:bb:d8:69:e0:01:
bb:56:9b:07:85:f5:76:50:47:59:37:6a:23:21:53:97:5c:0b:
5c:13:e1:ac:7d:62:92:47:79:c8:3b:16:a1:49:b4:0d:2d:1f:
ff:63:ff:a8:1c:d8:a4:d4:a9:fa:eb:55:be:67:b9:a9:0f:7e:
6a:51:c1:6b:a7:03:75:5c:c7:52:d5:1c:56:ea:af:52:1a:e6:
28:f0:12:28:f0:52:04:b4:77:91:95:d7:7a:03:78:0e:82:91:
c9:e8:b7:24:a9:04:a0:90:92:69:78:a1:6c:13:7f:fb:49:63:
90:52:74:30:0e:30:6d:25:cb:86:36:ca:50:4f:65:44:ea:26:
51:58:75:be:04:98:47:75:08:e8:db:29:05:ac:79:86:ca:34:
43:84:aa:34:36:ca:ac:0b:52:21:7c:2a:3e:c5:fa:64:4a:65:
c6:e6:86:c0:43:8a:fb:1a:7a:be:14:ad:df:c5:25:7a:bd:97:
9d:f0:24:a5:48:b2:92:29:af:01:68:ac:94:31:4d:3a:31:c1:
a7:70:fb:56:00:97:34:e1:14:df:31:1a:6a:20:a5:73:fa:99:
b7:b8:94:eb:02:93:00:3e:7b:66:f1:20:4c:b6:91:07:34:86:
8d:a7:85:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:06 2026 by rpki-client