Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143717.roa
File: AS143717.roa (raw, json)
Hash identifier: A5VWEtSTMKVf3JYcDd4Q9wufPlqG9su7fkiboGTdZW0=
Subject key identifier: 9C:50:23:55:21:92:BE:4D:66:A5:5C:51:F1:BE:C3:40:C1:A9:D7:3C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1F025F6C9E4D5416BD968EDC6C8EA2BDF5450CB9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143717.roa
Signing time: Fri 22 May 2026 06:05:36 +0000
ROA not before: Fri 22 May 2026 06:00:36 +0000
ROA not after: Fri 21 May 2027 06:05:36 +0000
asID: 143717
IP address blocks: 240a:a42b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:02:5f:6c:9e:4d:54:16:bd:96:8e:dc:6c:8e:a2:bd:f5:45:0c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:36 2026 GMT
Not After : May 21 06:05:36 2027 GMT
Subject: CN=9C5023552192BE4D66A55C51F1BEC340C1A9D73C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:02:85:25:b5:15:54:7f:09:25:c2:4a:39:66:
96:1a:88:c1:bb:8e:6a:d9:87:fd:a3:bb:bc:69:07:
18:dd:d0:77:80:4d:12:70:e4:f8:b5:e2:35:e6:7c:
66:04:ec:48:29:6c:f0:91:5a:8e:07:76:b5:7e:92:
31:f9:eb:b8:f0:85:57:7b:16:7d:a4:d8:98:62:b9:
4c:37:f8:92:9c:19:20:7a:e8:bd:e6:7e:a3:04:57:
fb:4b:1f:ac:db:34:47:81:27:a9:41:3c:26:0c:ca:
55:e0:ca:ea:89:93:cf:79:5a:33:38:76:e7:3f:f4:
99:7d:04:8d:00:b0:b5:50:c6:2e:7b:21:4d:90:fa:
95:66:15:1b:fb:36:2e:4b:19:8a:25:64:7b:d0:be:
ca:2d:3a:e7:f1:75:28:d2:8c:57:a3:94:f4:96:19:
7f:ea:03:fd:bd:74:3a:f7:a6:c9:9b:68:ea:c0:fb:
5f:72:c6:69:e6:40:49:87:44:cf:83:b3:f1:38:35:
72:ec:84:5a:48:0f:f4:c5:3e:fc:3a:4a:2b:a8:b6:
7e:55:33:ae:dc:fb:21:12:21:8f:d2:36:bd:30:9e:
59:e4:7f:27:5a:7e:29:ff:3c:fc:08:05:25:df:35:
47:ca:09:1b:c3:77:bb:39:b2:d4:3c:61:ae:4e:a3:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:50:23:55:21:92:BE:4D:66:A5:5C:51:F1:BE:C3:40:C1:A9:D7:3C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143717.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a42b::/32
Signature Algorithm: sha256WithRSAEncryption
a0:38:2a:79:4c:5b:67:f3:44:5f:41:f5:a8:5b:3c:16:ed:c3:
95:4f:70:40:57:28:28:8b:56:07:43:d1:c8:3b:57:d5:56:82:
8c:ca:b6:88:09:c6:bb:8b:5e:f0:83:af:45:59:e2:25:7a:ca:
94:d6:fb:dd:4b:ed:a7:1d:df:00:b2:10:86:7f:cd:fa:43:77:
18:f3:c2:52:fd:24:72:e0:17:e2:c1:e3:be:21:82:5d:c7:8c:
96:1a:60:3a:16:fa:de:4c:3e:bb:fe:e2:b0:c5:19:64:50:66:
3a:dc:1e:a0:72:c3:82:21:28:11:11:5d:c1:be:7b:59:bd:7d:
96:cc:22:ec:7a:53:b6:40:78:f4:c3:9a:ed:98:d2:b4:41:c5:
80:59:c1:67:71:4f:20:1c:31:ae:6b:8d:79:43:54:20:18:f4:
df:72:5c:40:06:69:f2:80:46:cb:0a:cb:bb:35:40:07:b3:48:
be:45:97:9b:36:b4:b0:4f:05:8b:b7:c5:73:f4:94:35:6f:c7:
1c:52:ed:40:2a:c1:36:d3:a7:fd:fb:9e:76:29:c8:64:14:64:
36:15:3d:0a:10:11:11:4a:fe:9f:2e:d9:35:64:04:1f:f1:f1:
b8:f6:f0:88:bc:7e:7f:69:dc:d7:1c:cd:51:68:78:d9:a7:ef:
de:e0:24:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:36 2026 by rpki-client