Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143729.roa
File: AS143729.roa (raw, json)
Hash identifier: rnFXwUrLxPvm9e8GUxP2XNHKXuD0103PwlqhWBWd6GY=
Subject key identifier: CD:54:77:2E:89:14:62:9B:E7:AC:5F:A8:4D:BE:DD:C6:6C:4E:8C:9A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 345A0F6AF7EE11BF8B5B9982EA37D34F8459FE68
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143729.roa
Signing time: Fri 22 May 2026 07:32:33 +0000
ROA not before: Fri 22 May 2026 07:27:33 +0000
ROA not after: Fri 21 May 2027 07:32:33 +0000
asID: 143729
IP address blocks: 240a:a437::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:5a:0f:6a:f7:ee:11:bf:8b:5b:99:82:ea:37:d3:4f:84:59:fe:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:33 2026 GMT
Not After : May 21 07:32:33 2027 GMT
Subject: CN=CD54772E8914629BE7AC5FA84DBEDDC66C4E8C9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:3a:5d:b0:97:ae:12:99:56:58:1d:10:80:
90:b4:27:43:4b:49:34:92:67:ad:f9:51:86:cf:54:
f6:0a:9f:b7:87:4d:50:83:a4:82:48:a0:5a:39:32:
47:a4:34:3e:80:da:e1:46:ee:ce:5c:a8:79:de:fa:
7e:ab:8d:56:3e:0a:62:48:a2:4b:8d:3f:fa:c7:86:
f7:e5:82:4c:be:9e:dd:24:39:ee:02:48:51:9c:cc:
2c:07:54:bb:a7:06:6b:e9:e4:0f:04:91:e3:a2:f5:
d3:85:9c:bb:72:6e:5b:53:05:cd:5a:7e:ce:8b:1f:
e5:26:6c:6a:32:d9:4e:84:70:10:39:ec:ea:41:c2:
f0:85:4d:bb:d9:21:73:b3:8d:60:b1:92:72:b1:d2:
59:27:fe:4e:0b:2b:22:0d:8d:90:88:fa:d5:e4:84:
58:c0:66:fb:13:b1:cb:bb:05:a9:db:f4:a0:c9:f1:
5b:dc:2f:80:85:38:32:c1:13:b2:4e:10:13:93:6f:
91:48:cf:f8:dd:2f:c6:4d:94:74:68:59:05:ad:ce:
6d:1b:28:19:36:61:4f:f6:f4:a7:24:4c:5f:3d:e7:
d7:d9:a9:6e:67:3b:65:c0:3a:52:df:f7:2f:20:9f:
86:35:2d:50:6f:14:d3:df:d9:29:5b:42:90:9c:56:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:54:77:2E:89:14:62:9B:E7:AC:5F:A8:4D:BE:DD:C6:6C:4E:8C:9A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143729.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a437::/32
Signature Algorithm: sha256WithRSAEncryption
72:2c:80:1a:d0:0d:31:42:43:4a:a7:a9:6f:b8:73:00:cd:19:
f1:01:f0:06:0b:85:a7:ce:4d:0c:20:72:e1:ce:ba:e4:97:65:
70:f8:5b:72:c8:8f:60:38:71:20:69:53:4a:c7:4c:50:ad:6f:
14:61:7f:d4:3c:36:7d:3b:30:b4:a7:57:97:1d:2c:2d:0d:f7:
79:63:a1:f5:10:95:ee:83:c1:20:58:39:97:99:bf:6c:58:ca:
d6:f5:74:9e:3b:72:5f:d3:41:02:f9:d2:5c:11:05:e8:58:56:
43:1f:25:a6:0e:2d:32:57:9e:d3:24:a2:83:04:59:b4:53:97:
72:08:e2:05:70:23:22:aa:5d:dd:aa:bf:35:49:4e:cc:82:0f:
e6:c2:64:4c:9b:62:8f:33:e2:6a:7d:5f:0a:34:4e:f6:c8:f1:
f4:c7:78:c6:0b:af:0d:34:29:e6:32:b5:07:48:64:73:88:57:
33:65:e6:71:3c:17:00:55:8b:be:31:7f:5e:b5:17:cf:ff:2a:
f8:65:a0:e5:90:49:9a:a3:35:2a:d9:a2:f8:f9:fb:ef:93:2a:
6d:c7:8f:e8:a2:69:e4:6a:5e:f9:ef:4d:97:61:54:ae:34:14:
5a:73:70:a0:78:fe:88:89:42:35:28:b0:44:fe:4c:f7:d3:22:
56:7b:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:46 2026 by rpki-client