Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143711.roa
File: AS143711.roa (raw, json)
Hash identifier: efZxkBPqW183YJUkFCIAsupSiVqxKSH4mAtz4Yf9smw=
Subject key identifier: B2:28:7E:17:1B:FA:DE:F9:92:78:B9:74:43:50:67:70:B2:3E:0E:5D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 395E465A0CE411ED6364982A990549450F5171DD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143711.roa
Signing time: Mon 25 May 2026 01:51:10 +0000
ROA not before: Mon 25 May 2026 01:46:10 +0000
ROA not after: Mon 24 May 2027 01:51:10 +0000
asID: 143711
IP address blocks: 240a:a425::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:5e:46:5a:0c:e4:11:ed:63:64:98:2a:99:05:49:45:0f:51:71:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:10 2026 GMT
Not After : May 24 01:51:10 2027 GMT
Subject: CN=B2287E171BFADEF99278B97443506770B23E0E5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:9b:34:19:5b:f4:ff:cd:de:5a:2b:36:55:
d9:90:25:68:67:44:fb:df:ff:96:5b:f1:ef:d5:66:
0c:6a:31:f6:da:28:78:c9:80:9b:cc:10:74:f8:37:
e8:08:f9:3b:fb:2f:2a:40:2a:6d:de:22:7b:f8:55:
c2:51:08:77:dc:1b:1a:ad:58:d3:36:53:57:cc:e7:
26:59:ce:44:66:82:28:22:1b:03:b6:77:fa:af:5c:
2d:34:46:4b:dd:60:01:d2:95:55:09:23:0d:22:7d:
6d:b3:4c:9f:78:18:33:77:24:17:23:a4:92:f3:40:
31:8f:00:65:bf:d4:24:d7:05:9e:b5:63:12:2b:22:
d0:9b:de:ae:cc:59:8e:41:7b:04:0e:01:75:e8:1e:
95:a6:cd:24:9f:0a:47:1d:22:3c:17:08:64:60:21:
ea:61:c8:c1:1a:50:de:ce:41:c5:2b:ce:ce:43:58:
fe:88:8e:67:7f:01:73:cb:97:12:f7:1e:c9:89:10:
14:7d:29:93:2f:1e:3d:e3:62:f7:a9:c4:a9:ba:70:
cc:ac:5f:23:41:50:7b:91:dd:f0:91:72:84:df:bc:
24:39:da:e4:fe:b3:47:d3:f6:6b:ef:e6:0d:4a:d9:
51:d2:01:64:ee:45:12:86:eb:52:2c:d0:02:36:39:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:28:7E:17:1B:FA:DE:F9:92:78:B9:74:43:50:67:70:B2:3E:0E:5D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143711.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a425::/32
Signature Algorithm: sha256WithRSAEncryption
2b:48:29:80:f1:0a:f6:51:8b:87:a9:89:14:08:3c:4a:d9:51:
cb:b8:52:95:88:81:61:e5:8d:27:13:1d:c3:0c:7b:a2:1e:81:
76:b3:69:f0:0f:cc:d0:01:80:76:db:8b:2b:99:8e:3f:7f:6c:
77:a1:0b:48:9d:12:48:01:aa:6b:9b:c7:5c:9f:b7:11:f6:05:
7f:60:0f:44:37:71:73:b7:a3:4c:40:45:f2:0e:81:85:55:4c:
a6:44:98:58:fb:de:ff:71:a0:6d:5c:42:67:7c:23:57:07:b2:
32:3d:b4:6c:41:f5:2f:06:d4:ea:16:96:5e:6e:e5:f1:e6:85:
9f:bb:1e:ef:50:51:8d:f4:bd:1d:b3:83:87:4a:cc:e9:6e:df:
66:6f:2c:89:dc:be:23:e4:87:8a:42:a3:de:cc:98:d4:78:24:
14:ce:50:8a:fd:b8:a5:e1:2c:eb:00:a1:a0:23:da:85:e7:8d:
0c:41:8d:ce:2d:9e:b2:91:2c:61:de:9c:6e:69:ea:e0:4f:05:
d9:63:3b:6a:94:e7:5e:09:78:ab:7e:1a:90:13:85:45:85:93:
c2:a3:90:ac:98:0b:15:7c:13:af:e3:75:ed:ad:87:c1:6a:5a:
d1:66:07:c5:a9:38:f5:3f:63:fa:0e:09:fa:ee:44:97:d6:97:
d1:89:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:02 2026 by rpki-client