Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143721.roa
File: AS143721.roa (raw, json)
Hash identifier: 5MwdquGfa7bRpm7PbLViG+ENZAE3IHL9ERv77KQsu08=
Subject key identifier: 40:98:75:EC:75:CA:65:70:92:EC:1F:28:99:14:B6:8A:9B:5F:B1:A9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3F3451D9955B63D8886D201EA5B4E7093BC6C033
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143721.roa
Signing time: Fri 22 May 2026 04:26:41 +0000
ROA not before: Fri 22 May 2026 04:21:41 +0000
ROA not after: Fri 21 May 2027 04:26:41 +0000
asID: 143721
IP address blocks: 240a:a42f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:34:51:d9:95:5b:63:d8:88:6d:20:1e:a5:b4:e7:09:3b:c6:c0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:41 2026 GMT
Not After : May 21 04:26:41 2027 GMT
Subject: CN=409875EC75CA657092EC1F289914B68A9B5FB1A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:dd:45:55:ff:0d:c6:28:03:b9:07:94:67:
d4:ee:9f:6e:a5:b9:e6:bc:75:f6:33:61:be:c0:a1:
45:bf:cf:03:f8:67:68:a9:79:20:67:c0:d3:59:e0:
c3:a4:07:28:c6:94:62:a0:43:08:65:b7:6a:7f:ad:
f8:7c:7f:21:2a:f7:e7:dc:9e:46:9f:72:12:93:b2:
8c:b2:09:f4:47:1a:1e:04:01:9f:ed:01:fd:47:a2:
c3:07:b6:81:30:86:ad:1b:7e:ff:1b:89:03:0e:cf:
a4:ae:94:90:1c:40:89:1e:27:e6:d1:a8:50:2d:3f:
77:d6:c5:a3:92:40:42:39:1c:60:e9:ed:94:27:dd:
4f:e2:39:82:9a:47:0f:7f:f9:cb:7c:d2:cf:be:29:
a0:41:b6:a7:d6:06:e8:3d:66:bb:9d:07:ac:f4:10:
1a:0e:21:a8:a8:b0:85:85:b2:6d:c1:fe:df:fa:b6:
ab:2c:2f:42:a8:8f:1c:0a:96:eb:44:b0:d6:72:14:
6c:8c:79:d6:5f:c3:90:93:0e:45:47:4a:7c:3b:6f:
0d:c5:a0:e3:86:84:ca:8e:9d:12:83:6e:18:54:b3:
13:b8:00:e3:38:f5:63:61:f6:a6:eb:c4:92:52:7e:
05:90:e4:9e:64:d3:59:ac:b9:65:c3:c8:68:50:38:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:98:75:EC:75:CA:65:70:92:EC:1F:28:99:14:B6:8A:9B:5F:B1:A9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143721.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a42f::/32
Signature Algorithm: sha256WithRSAEncryption
a3:89:13:c2:b8:9e:fa:76:4c:3c:c0:9e:67:a1:a0:d5:04:f8:
a8:db:3d:67:18:4d:84:da:99:26:ea:24:ac:6e:ba:15:eb:fe:
8c:18:f7:d1:f6:a7:5f:bc:8d:f8:f2:38:5d:c2:93:ca:ec:85:
a0:32:27:98:fb:a9:a1:03:3d:60:b4:80:9f:bc:ef:ab:55:3d:
30:7e:17:51:4c:26:0f:c5:fd:b6:4c:4a:63:e4:23:e5:0a:94:
bc:bc:85:09:29:38:68:ae:78:fa:a3:3b:df:6e:ed:d4:10:9c:
8a:83:9b:62:c8:80:c8:ec:e0:a2:93:5b:dc:ec:43:c3:76:f5:
97:ed:c9:e8:5e:bc:83:71:f8:e2:5f:5f:3f:67:87:d0:51:5d:
e5:04:d3:d9:86:43:4b:02:5e:18:aa:f3:44:01:ed:bd:57:b4:
aa:57:95:f4:e3:f1:6c:7c:f9:cb:da:d9:f5:7f:a5:71:6c:70:
56:2c:4a:55:72:c3:c5:93:12:7a:38:15:aa:a3:c6:c8:a1:4a:
4a:9c:6a:33:dc:27:1d:6f:fe:27:8d:63:0a:87:e4:79:74:7a:
37:59:68:fa:69:04:0b:c0:3d:ce:44:fd:0b:91:32:22:54:e9:
ca:68:6b:90:27:95:77:f2:f5:52:69:3e:51:0c:c4:49:6d:85:
06:f0:70:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:30 2026 by rpki-client