Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143727.roa
File: AS143727.roa (raw, json)
Hash identifier: 6sLP9elheXhydm3Sc7w++lClVhEVH/w5f1UKuNj/jEQ=
Subject key identifier: B3:7B:44:CC:A8:C7:FA:A9:A8:3C:03:C5:DA:EC:A6:70:9C:2E:83:AC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 46044B833E37D4C4218C7A4325E506416B7BDF94
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143727.roa
Signing time: Mon 25 May 2026 06:49:04 +0000
ROA not before: Mon 25 May 2026 06:44:04 +0000
ROA not after: Mon 24 May 2027 06:49:04 +0000
asID: 143727
IP address blocks: 240a:a435::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:04:4b:83:3e:37:d4:c4:21:8c:7a:43:25:e5:06:41:6b:7b:df:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:04 2026 GMT
Not After : May 24 06:49:04 2027 GMT
Subject: CN=B37B44CCA8C7FAA9A83C03C5DAECA6709C2E83AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:ee:18:79:c3:ba:17:2d:0c:a6:45:2c:f6:
11:16:4d:be:14:d6:86:ed:8f:d2:0a:2a:5f:3d:98:
62:6c:85:d6:ae:87:61:f7:37:19:c4:36:56:d4:c0:
13:c0:b1:24:e0:04:bc:82:de:75:25:7d:52:b2:af:
2e:09:b5:9e:73:ed:2e:dd:a5:95:4a:56:9e:7e:c3:
92:a7:96:66:66:e3:6f:fd:af:4c:27:ca:47:60:11:
38:4e:11:1c:a2:b6:11:07:f6:0f:8a:88:b2:c1:85:
e4:3f:1c:4c:c5:e7:ae:c3:1c:6b:85:ef:16:35:83:
ab:cc:48:7f:e0:06:5e:f6:58:a5:fd:30:15:e0:02:
20:4d:70:aa:1f:cb:ca:3a:d8:ae:fa:48:41:18:a1:
d8:ae:07:e0:ab:8a:b7:48:ba:57:49:37:eb:47:94:
3e:49:39:89:cb:1d:3f:4d:14:e4:48:84:63:1f:ed:
2e:e9:1e:22:4c:ad:7d:e5:d2:d8:0d:3f:22:d2:7f:
68:f0:cc:e3:7c:e3:98:53:42:78:1c:94:30:8d:64:
43:91:5e:37:41:3d:45:e7:a3:d0:54:0d:52:51:9a:
a6:7c:cd:24:7c:db:dd:5e:46:30:7b:0d:55:4a:14:
5b:b0:fc:f6:44:77:6a:f1:cf:9e:72:64:62:3f:e6:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7B:44:CC:A8:C7:FA:A9:A8:3C:03:C5:DA:EC:A6:70:9C:2E:83:AC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143727.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a435::/32
Signature Algorithm: sha256WithRSAEncryption
0b:f4:63:64:f8:00:7c:6f:b0:fe:8c:0e:80:f7:fb:05:b3:fc:
ac:45:0e:84:e4:9f:01:1a:f5:95:0b:0d:eb:21:e0:1e:39:11:
67:06:96:a0:d0:bc:88:4e:ab:f6:85:d0:fb:b1:2f:d9:c5:de:
ec:5d:b1:0b:69:94:e4:d4:9f:36:c7:79:f5:86:de:a2:00:6f:
32:ac:15:1c:05:59:19:bf:03:f3:c4:de:7a:f7:de:ee:3d:d1:
8a:24:2c:01:d2:99:3d:15:35:fc:f0:a7:2a:52:bb:2e:48:60:
5f:44:18:e2:bd:96:6f:00:4a:2d:4c:80:94:d4:6e:44:32:6c:
6b:aa:b2:84:ed:2e:3a:61:10:b7:e7:3c:f2:c5:c7:76:b4:44:
e1:52:66:4c:9a:1f:1a:14:5c:6d:07:3f:26:98:ac:78:bd:e2:
7a:37:78:5c:5d:93:aa:ee:e4:39:5e:63:f7:ce:1a:8b:87:df:
fa:dd:12:f1:6c:20:b7:66:25:1e:6a:15:1f:82:2a:76:74:e1:
a8:e6:65:d9:dc:be:92:d1:80:e8:b9:15:02:2d:21:42:f6:fd:
25:e2:66:96:ae:47:96:91:a6:27:d9:c0:f4:f4:09:aa:1b:40:
07:f0:93:84:aa:7b:12:87:28:0a:8e:42:7f:62:e8:1e:b5:ac:
cf:99:cd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:42 2026 by rpki-client