Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143715.roa
File: AS143715.roa (raw, json)
Hash identifier: b9Cz/24TBhqg8HYgTaCMRmXvpcnVng+RycPhHR3kFVM=
Subject key identifier: 8F:21:C9:F7:28:6B:96:F4:3C:FF:EB:EB:83:93:71:B6:5E:32:4B:29
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1BF0230814774B5D5B4DF753B35D75AD9F31F26F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143715.roa
Signing time: Fri 22 May 2026 07:41:23 +0000
ROA not before: Fri 22 May 2026 07:36:23 +0000
ROA not after: Fri 21 May 2027 07:41:23 +0000
asID: 143715
IP address blocks: 240a:a429::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:f0:23:08:14:77:4b:5d:5b:4d:f7:53:b3:5d:75:ad:9f:31:f2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:23 2026 GMT
Not After : May 21 07:41:23 2027 GMT
Subject: CN=8F21C9F7286B96F43CFFEBEB839371B65E324B29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:9c:f4:1b:6f:7d:a6:67:be:70:93:6c:c6:
cd:37:d9:35:31:9a:51:e0:b4:1b:a0:0a:5b:e9:ed:
fb:f3:dc:2d:72:97:60:84:43:11:11:28:40:95:78:
db:c6:40:a6:08:b3:86:5c:bd:ee:3b:9b:7a:43:8a:
6c:50:ed:a1:6a:09:6c:73:60:d9:77:3e:33:f0:6b:
8a:f1:00:de:8d:82:d4:72:5f:3e:06:50:3a:ea:04:
2c:f7:b3:99:0c:f0:01:f3:f5:0b:31:18:cc:92:9c:
9b:43:71:0d:ff:54:3d:b1:70:0c:0f:53:0b:1d:25:
e3:81:b5:9b:b3:aa:af:d2:bc:20:d4:0c:6c:2e:53:
59:ab:dc:c8:ef:6b:13:c1:7a:78:0c:46:5f:ff:e9:
15:4d:58:bd:2e:59:43:d9:fc:36:a4:be:25:d6:52:
30:96:31:d2:cb:b8:81:3e:7e:e9:24:51:51:0d:3e:
94:80:76:8d:0d:7d:f9:73:16:2c:70:96:7b:4d:2a:
2b:c7:e3:86:6b:0b:f2:2a:76:c6:fa:61:d2:06:4c:
83:42:63:bb:b8:3c:a4:11:07:8d:36:24:2d:12:48:
c4:a6:df:6c:e6:ec:aa:ea:c3:77:a1:4d:56:a5:17:
0d:e3:36:0e:4f:ed:0e:9f:a8:83:32:75:cf:ba:b8:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:21:C9:F7:28:6B:96:F4:3C:FF:EB:EB:83:93:71:B6:5E:32:4B:29
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a429::/32
Signature Algorithm: sha256WithRSAEncryption
3f:ec:d1:c5:94:bd:6e:fc:a2:de:fc:e1:df:a7:42:1a:ee:c0:
6f:ef:96:25:38:cb:e4:7b:58:5b:a6:e2:ab:a7:6e:8a:67:20:
23:84:fe:78:22:f4:79:50:8e:69:0e:46:48:34:9c:f9:82:96:
d0:4a:2a:c8:99:69:9a:ea:fd:ef:55:50:a7:b3:b5:30:f2:a6:
44:c6:70:34:25:65:51:c8:f2:25:56:89:a2:e9:9f:9c:91:15:
eb:93:c6:04:8f:ba:a2:be:a0:c0:3f:90:6f:85:9f:d6:ef:18:
47:8c:8c:53:9b:73:16:62:3a:f3:45:29:0c:10:d1:e7:e9:2f:
0e:c5:87:7d:09:67:49:4e:05:8b:31:e0:11:ec:fd:08:57:8b:
68:29:2d:14:8c:eb:94:bd:db:f2:99:37:c2:14:80:2f:85:03:
03:77:c3:2a:88:8e:15:d5:80:2b:ae:2f:6e:d3:84:37:cf:1a:
77:3b:6d:02:42:b1:b3:3a:16:1f:3d:98:8d:e0:52:41:93:01:
31:f6:c5:ef:c1:80:55:89:92:72:54:e7:9f:65:e0:db:cd:45:
f6:28:36:b8:3b:63:31:82:a3:ae:9a:80:3e:11:c2:e1:79:a0:
48:2f:8f:10:d0:c6:c8:81:ae:d3:55:7f:51:5e:de:f7:f9:25:
a6:7c:15:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:11 2026 by rpki-client