Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143732.roa
File: AS143732.roa (raw, json)
Hash identifier: i6DQNfoo697AwGuwdpDO8i7XQ6Nxttbk/EAE3ge+3b4=
Subject key identifier: F0:15:4F:2C:24:43:3F:5A:A4:E4:20:C1:76:6A:B4:39:90:03:83:6B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 83EDD348C605FCBDC134CB61D6674AB0B86F19
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143732.roa
Signing time: Tue 26 May 2026 03:17:18 +0000
ROA not before: Tue 26 May 2026 03:12:18 +0000
ROA not after: Tue 25 May 2027 03:17:18 +0000
asID: 143732
IP address blocks: 240a:a43a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
83:ed:d3:48:c6:05:fc:bd:c1:34:cb:61:d6:67:4a:b0:b8:6f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:18 2026 GMT
Not After : May 25 03:17:18 2027 GMT
Subject: CN=F0154F2C24433F5AA4E420C1766AB4399003836B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:ca:24:36:4e:4a:12:bb:33:b3:08:05:1b:
6a:38:80:a7:cf:52:91:28:6d:bb:20:95:a2:98:55:
cf:41:52:0b:46:16:dd:87:35:ef:32:a5:5c:69:27:
63:ea:dc:8e:0c:eb:dc:2b:a8:fc:43:41:b9:6f:0c:
52:46:5b:e5:c9:e0:b1:6a:62:14:17:4b:6a:20:f8:
a2:24:e9:a2:a4:70:bd:b9:df:25:65:93:3b:2d:c0:
9c:d0:c5:b9:3d:f1:bd:a8:65:06:5b:6a:51:8c:f5:
41:bc:13:12:96:9c:f3:87:69:27:f2:4a:b4:db:ff:
a2:38:41:c1:4e:a5:30:31:3f:22:3f:90:c9:74:9a:
6d:20:53:15:c3:8e:d2:c5:92:79:02:b5:88:a1:ef:
e7:32:4f:3d:d0:eb:2f:ec:79:83:1b:f4:80:89:22:
36:41:12:2e:44:aa:2b:8a:f5:75:b8:2f:75:8d:56:
ae:20:00:fe:1a:49:ed:e2:3e:d8:24:83:a7:5b:5c:
e4:10:df:26:56:98:59:49:86:41:df:1a:71:69:d1:
50:cf:8f:61:53:46:2f:78:a4:44:34:6e:16:83:0f:
a1:f8:9d:b7:78:81:9b:a3:fc:f9:f4:29:a2:82:1f:
5e:74:49:ad:77:fb:48:7b:4a:56:6b:33:e8:b8:06:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:15:4F:2C:24:43:3F:5A:A4:E4:20:C1:76:6A:B4:39:90:03:83:6B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a43a::/32
Signature Algorithm: sha256WithRSAEncryption
70:3e:51:f7:e6:54:49:3f:6a:ec:f7:a8:7c:b2:3d:41:96:00:
bd:04:fb:7f:8d:5e:d9:10:99:26:8b:34:30:02:a0:b2:9b:eb:
92:64:38:fe:62:5a:25:b6:bb:c3:51:fb:72:c9:db:45:24:aa:
6d:6b:69:a3:be:e5:2c:b9:a1:f1:8c:98:bd:3d:33:6d:86:0f:
4e:7c:b8:c5:35:59:83:12:7b:37:55:74:a9:0a:a3:b2:bf:9a:
a5:76:4f:29:4b:2d:ba:f8:7b:04:97:ae:f7:8c:5f:9a:2e:57:
1c:3b:a2:7d:c5:9f:67:f4:86:f8:83:35:65:08:94:03:c2:11:
60:b7:8f:d4:ee:ea:0c:75:40:64:5d:e9:c6:46:30:46:17:30:
a5:85:61:d5:37:0e:78:0f:b1:58:bc:14:ef:13:8a:16:63:93:
f2:bb:d5:91:57:c4:23:d6:2a:6d:40:f8:13:2a:a0:2e:56:3d:
d5:e6:fa:ff:80:a2:8e:9d:cf:f6:ef:35:1a:e2:c1:99:be:6d:
09:25:eb:81:f6:cc:08:74:b9:c0:32:56:22:4b:e6:a5:6a:4a:
43:c9:6f:c6:e2:c1:19:b9:88:f4:24:b7:7b:bf:5f:ee:ca:ac:
b6:20:56:49:26:6e:be:da:92:26:04:a6:80:17:68:2d:06:c7:
0a:17:90:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:44 2026 by rpki-client