Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143725.roa
File: AS143725.roa (raw, json)
Hash identifier: izcs3Srsl/Q005tOdpxTqsLM5oYpVizMVDrqGeQf8Wg=
Subject key identifier: E6:DC:75:33:2E:9A:07:2A:73:0D:0D:50:58:86:24:2E:E8:5C:4A:03
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6182AD6D7020E9D88807CE095C362243E2184BBE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143725.roa
Signing time: Fri 22 May 2026 04:26:48 +0000
ROA not before: Fri 22 May 2026 04:21:48 +0000
ROA not after: Fri 21 May 2027 04:26:48 +0000
asID: 143725
IP address blocks: 240a:a433::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:82:ad:6d:70:20:e9:d8:88:07:ce:09:5c:36:22:43:e2:18:4b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:48 2026 GMT
Not After : May 21 04:26:48 2027 GMT
Subject: CN=E6DC75332E9A072A730D0D505886242EE85C4A03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:1e:c2:44:3f:92:7f:e0:c2:d3:9a:76:b0:
ec:5c:a6:fa:70:da:4a:39:c0:8c:dc:7b:80:8b:2e:
e2:f1:1d:85:ba:56:e8:03:bb:d3:71:f4:7a:73:ef:
52:43:ea:a9:0f:a9:22:87:34:f9:ae:e9:cc:1e:3e:
af:b6:a1:e9:4b:4c:9b:7c:ac:02:25:7d:32:24:0d:
70:aa:14:64:0e:44:cf:bd:ed:d6:b0:98:f7:c3:b6:
13:bd:c6:f2:f8:bb:55:82:6d:c7:43:a5:4c:15:f7:
19:8f:45:62:16:f6:d6:6e:27:db:b5:39:24:e5:06:
b4:25:87:b1:a1:b3:73:c4:29:8a:d6:33:86:44:3c:
7a:78:2d:dd:24:de:9a:29:39:b0:d9:a4:c3:5c:67:
a9:62:9f:3c:32:01:54:a8:e5:0a:80:94:c3:28:2b:
f5:e3:d9:f7:72:f8:ad:5d:00:47:63:9a:ea:b4:1f:
57:76:4a:93:c6:0a:91:1b:c4:3a:21:59:e7:47:96:
3c:ed:9c:9f:a9:44:b6:4a:e5:66:a4:f6:47:c4:e6:
74:07:c2:fc:ba:7c:b2:2a:98:a5:16:ec:bc:77:f2:
71:fa:3e:b6:4f:ee:5e:a9:12:e9:5a:d9:5f:8d:06:
02:8b:c3:3b:63:cd:d9:49:51:9f:ea:2a:db:34:cc:
a2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DC:75:33:2E:9A:07:2A:73:0D:0D:50:58:86:24:2E:E8:5C:4A:03
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143725.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a433::/32
Signature Algorithm: sha256WithRSAEncryption
32:fb:cf:cb:9f:4f:57:02:ca:c7:89:14:16:9c:eb:90:5b:68:
84:d3:87:3b:36:7d:32:75:30:78:3c:c0:f4:1e:c1:97:c5:bf:
54:be:02:80:61:4f:05:15:c0:ba:85:95:f2:d2:7f:75:d7:00:
e6:7c:0d:c6:82:79:4d:03:63:c8:4b:32:35:8f:7f:f4:f9:cd:
f6:00:50:9b:9c:fc:c6:ab:46:0e:ea:7a:37:fb:37:35:18:73:
5b:e3:2b:87:af:d1:09:c7:d3:b0:a2:9f:17:83:5f:da:79:1d:
7b:20:15:13:b2:39:9d:c2:65:e5:2a:bf:52:29:a1:bd:ec:5e:
dd:a3:98:8e:86:f4:0d:f7:ba:3f:e1:6c:df:18:fe:cc:85:85:
cf:31:9c:81:83:33:d6:5c:d9:60:4f:bf:91:0e:d6:92:05:11:
05:f8:a2:2a:42:8d:8e:98:2e:5e:a7:34:7d:f4:75:57:c1:ab:
34:54:d7:18:3e:3f:7e:92:28:11:46:f0:c0:2c:96:f5:03:66:
78:46:27:e0:57:d5:5c:ed:0a:37:01:9f:17:87:f4:96:c7:ad:
ac:18:2b:48:5d:9a:e5:ea:95:2e:e9:3a:0a:0d:6d:9a:29:83:
b0:01:a9:d5:94:49:c2:73:72:6f:69:dd:6e:69:34:5a:ce:94:
3b:c3:e7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:46 2026 by rpki-client