Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143728.roa
File: AS143728.roa (raw, json)
Hash identifier: r5Ua8+siQKXBIo0mxjvaw/sGaaqqvzhkcHynrY/SdaQ=
Subject key identifier: 54:3D:7E:2C:5A:01:46:A3:9A:44:C4:2F:16:7C:E0:E8:56:81:6D:D4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0B39EC778768A99FAE1E838AADF2C357F528CC94
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143728.roa
Signing time: Fri 22 May 2026 02:47:44 +0000
ROA not before: Fri 22 May 2026 02:42:44 +0000
ROA not after: Fri 21 May 2027 02:47:44 +0000
asID: 143728
IP address blocks: 240a:a436::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:39:ec:77:87:68:a9:9f:ae:1e:83:8a:ad:f2:c3:57:f5:28:cc:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:44 2026 GMT
Not After : May 21 02:47:44 2027 GMT
Subject: CN=543D7E2C5A0146A39A44C42F167CE0E856816DD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:35:f8:98:55:6d:77:a4:7a:1a:97:10:74:
b7:da:4f:85:76:30:c3:47:ce:8a:d6:e3:e2:0a:4b:
d6:f9:fe:bb:4d:4b:53:f4:a1:a6:b3:dc:a5:2a:f8:
7e:c1:b2:77:48:5a:23:97:6e:87:7d:b7:7a:bb:10:
bf:cd:95:4d:b3:f8:aa:bf:a3:76:47:43:8d:39:33:
b2:9d:16:9b:c5:b4:d0:fa:46:8e:cd:cd:be:05:cf:
66:4f:0b:e3:9a:d4:7c:67:f3:08:56:8c:a1:43:77:
db:45:26:31:97:92:3c:28:de:88:9e:89:f0:c5:26:
c7:7f:b7:3c:9b:0d:84:13:3b:c2:c9:73:e8:18:80:
ef:d1:67:4f:85:cf:2a:23:18:5c:2c:03:8f:6b:29:
77:66:1f:df:00:a4:3f:d6:9b:a9:5c:32:a1:6e:ce:
de:8f:3c:07:ec:77:5f:18:69:dd:be:53:96:93:a6:
bc:b0:fc:dc:cb:56:42:66:87:e4:42:ff:1b:e3:70:
fe:bb:05:c3:3a:79:97:4e:e7:14:6c:e1:7f:0f:03:
07:d6:1a:6a:48:c5:b9:06:8a:d2:4f:80:be:31:79:
53:2b:f7:f2:3c:2a:a1:59:36:09:16:45:d3:61:cc:
99:08:ff:02:26:69:84:f0:a8:15:63:d3:a8:c9:4c:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3D:7E:2C:5A:01:46:A3:9A:44:C4:2F:16:7C:E0:E8:56:81:6D:D4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a436::/32
Signature Algorithm: sha256WithRSAEncryption
66:b1:88:59:9c:da:a5:aa:79:eb:8a:b4:81:ae:f6:9e:1c:3f:
33:f2:b1:bb:6e:4d:08:b6:39:09:d9:c2:6b:13:49:40:73:8a:
42:49:f1:54:b4:f2:c1:08:30:17:30:56:fc:c4:56:d1:91:a0:
6e:62:fa:33:d8:a7:d8:e1:44:b9:c6:4e:a2:29:88:b6:92:df:
24:10:51:40:c5:c7:96:e5:e4:ca:24:fd:bd:75:4e:68:59:a7:
db:29:86:af:c4:84:a1:ca:51:98:65:b3:14:86:e6:7c:22:fb:
1f:57:b6:24:eb:79:ae:85:f6:65:36:6b:33:36:aa:0c:ad:a5:
c2:e5:fb:29:ea:bf:54:42:a9:64:24:c0:71:69:ef:85:c8:80:
b5:68:fb:fd:1a:3f:79:7e:3e:10:46:9b:9e:3a:d5:3e:4a:2d:
28:0e:32:be:d9:e2:47:15:d4:3f:3d:bc:16:da:45:6e:b7:ce:
d3:63:de:27:ba:6a:5d:f6:01:d0:c4:a8:04:b1:45:c9:29:50:
55:88:4d:34:67:60:a0:4c:ef:c4:38:11:f9:df:9a:a6:2f:bc:
0d:96:c2:1b:12:ba:04:cc:33:6c:a8:df:15:99:f6:1f:7c:5e:
ce:29:b4:3c:47:80:0e:09:79:5a:6d:60:94:a8:97:1a:35:e0:
48:cf:c5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:43 2026 by rpki-client