Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143731.roa
File: AS143731.roa (raw, json)
Hash identifier: aO/kKa2W9UaywTTJh4r6qwGMjTsR5We+NYbxFtd4JQY=
Subject key identifier: DD:5B:2E:71:2F:15:76:60:E7:AD:30:8D:91:E5:33:46:F1:CA:C5:14
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 70150D93B6C7A790A9DA5ED31D8A228EDC328CE6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143731.roa
Signing time: Mon 25 May 2026 06:28:12 +0000
ROA not before: Mon 25 May 2026 06:23:12 +0000
ROA not after: Mon 24 May 2027 06:28:12 +0000
asID: 143731
IP address blocks: 240a:a439::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:15:0d:93:b6:c7:a7:90:a9:da:5e:d3:1d:8a:22:8e:dc:32:8c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:12 2026 GMT
Not After : May 24 06:28:12 2027 GMT
Subject: CN=DD5B2E712F157660E7AD308D91E53346F1CAC514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:4f:2e:8a:cf:dc:fd:15:3f:28:ee:47:5c:
b9:39:b1:c0:b9:47:d9:98:c7:e6:20:63:fc:4e:3e:
67:34:b8:3d:c1:c3:1c:55:db:f9:78:a1:cc:e0:b8:
1c:ad:70:2c:01:fe:7e:85:15:e5:41:41:04:c9:98:
6f:7c:45:e7:8e:06:c0:b1:12:35:d7:47:52:30:76:
4a:a0:17:c6:b2:59:f2:e6:dc:24:f4:54:e1:1a:87:
85:ed:31:06:cd:4f:77:d4:4d:87:f7:e7:7f:af:52:
74:64:0e:5b:6c:18:d2:b1:69:c6:04:82:99:16:0f:
d5:7d:cd:33:d0:82:77:ee:07:83:d0:a1:6a:d2:ba:
20:eb:aa:78:9d:11:9b:d4:f2:04:60:d8:eb:02:1b:
cb:a0:a0:75:36:56:e3:b3:d2:b0:ce:e9:c9:e9:49:
7a:ab:b2:57:44:10:89:b8:fb:f4:89:a8:b2:e9:62:
40:d1:75:b4:c5:41:21:7f:b1:23:02:57:04:0c:d5:
fc:2f:51:03:0b:2d:89:d0:9b:da:59:9f:7c:4c:b2:
ab:7e:b0:19:c2:15:b7:0b:44:e4:2f:b1:3a:94:3c:
82:2c:14:c6:c7:4e:95:99:ea:35:e3:b5:4c:0c:6a:
ea:44:9f:06:60:cf:3e:7a:22:21:73:02:97:c0:ca:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5B:2E:71:2F:15:76:60:E7:AD:30:8D:91:E5:33:46:F1:CA:C5:14
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a439::/32
Signature Algorithm: sha256WithRSAEncryption
ae:f6:10:cb:65:51:7b:06:80:52:33:85:da:a4:ec:e3:d2:9c:
0d:1c:c2:42:54:3f:7f:8f:c1:69:01:2d:5d:40:8c:42:9b:57:
0d:d3:38:e2:5b:23:80:87:bb:9e:dd:b3:d9:02:96:ff:f2:59:
7d:27:5d:1d:9e:c9:30:ce:ba:93:6c:c2:88:82:4d:2d:b5:8c:
3b:6b:04:c7:5e:5f:4b:fd:0e:14:af:01:bf:e8:4e:71:f5:45:
c2:61:3e:cb:47:fc:d8:4f:bb:dc:06:8a:8d:8f:2b:18:4e:ea:
33:36:1c:56:02:ef:02:38:65:83:d7:00:97:3c:79:11:d2:05:
be:f2:0a:a0:f9:6a:b6:5f:b7:c5:6d:50:6e:80:02:e0:c3:59:
a1:90:3f:3b:6b:36:25:5f:1d:af:df:84:14:ba:db:8d:74:d3:
46:d3:54:ea:9a:ce:46:15:c9:a6:30:8e:31:97:1e:d8:22:e6:
1f:f4:43:c9:9c:35:6c:41:01:2f:d8:28:bf:7c:a2:41:fd:c4:
f4:25:f6:6c:56:cc:7b:7b:d8:15:09:54:d5:4b:f5:13:c7:6f:
e3:c8:68:4c:8e:18:95:91:c2:18:4c:4c:e0:2f:e5:a2:d4:e3:
4f:11:01:b2:ca:bd:01:ab:fb:09:dc:b7:ac:ac:0a:87:22:0d:
a2:9e:4f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:43 2026 by rpki-client