Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143735.roa
File: AS143735.roa (raw, json)
Hash identifier: qD/gz9+7c7fXOyMXkuo1l8E72c10q7N+CFs5PMtvtig=
Subject key identifier: E0:C1:83:C1:59:6C:A1:47:A5:F4:47:D0:F2:5B:0F:5D:3C:B1:19:81
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 418AE74822A34869F082A7F90A83B6318BC33FF3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143735.roa
Signing time: Mon 25 May 2026 01:20:13 +0000
ROA not before: Mon 25 May 2026 01:15:13 +0000
ROA not after: Mon 24 May 2027 01:20:13 +0000
asID: 143735
IP address blocks: 240a:a43d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:8a:e7:48:22:a3:48:69:f0:82:a7:f9:0a:83:b6:31:8b:c3:3f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:13 2026 GMT
Not After : May 24 01:20:13 2027 GMT
Subject: CN=E0C183C1596CA147A5F447D0F25B0F5D3CB11981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:d2:97:6e:2d:84:f0:41:cf:1c:1a:30:8a:
48:5b:8e:e3:d9:61:cf:e7:9e:fa:d9:d6:92:ab:5e:
1c:3e:08:eb:d1:aa:79:75:a1:8d:1f:54:38:c6:44:
a3:f5:cc:d2:96:13:ce:98:a5:f4:6c:90:08:c0:be:
c9:ed:f6:dc:7b:88:cf:f0:c4:57:ae:9e:9a:64:70:
31:57:7d:67:db:90:a0:28:c9:7c:f1:09:d3:8f:d1:
4f:fd:38:ce:73:6d:7b:7f:29:c7:47:70:81:23:2c:
e9:b2:6f:da:bf:db:71:71:90:12:96:89:64:1c:9d:
c5:9c:33:bf:2a:d9:d2:c8:5a:8e:5c:25:07:0f:26:
91:3f:41:72:80:03:b5:44:10:24:40:15:8a:08:38:
d5:54:8c:ce:61:af:1e:76:e2:49:3f:4f:29:b9:9f:
5a:70:4c:ef:0e:bb:b5:3a:d5:58:e9:c4:be:94:a3:
07:e3:4b:87:fe:e2:a5:9e:7e:41:f5:d0:f5:df:b6:
26:5c:44:3f:8e:e5:69:c4:96:cc:b6:ba:48:a2:1c:
d8:32:c5:5e:72:db:34:77:5c:16:e0:95:98:ae:43:
1d:ca:7c:fa:b0:6f:58:4e:cd:10:e0:ca:05:6c:3d:
42:7e:9f:2b:12:89:15:f7:d2:4c:78:61:b2:34:97:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C1:83:C1:59:6C:A1:47:A5:F4:47:D0:F2:5B:0F:5D:3C:B1:19:81
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a43d::/32
Signature Algorithm: sha256WithRSAEncryption
6f:a0:9f:b1:b3:44:05:89:87:7c:22:b9:ac:9c:e0:50:d3:8d:
b2:57:a7:51:27:33:aa:f8:55:23:8f:39:42:19:fb:07:22:c8:
48:54:f2:de:4a:17:c8:bd:ca:a2:25:c5:30:94:3a:60:93:ea:
95:3e:2f:b5:43:97:6b:9c:ce:63:66:28:2c:eb:61:55:b2:6d:
7b:85:78:52:07:72:cc:ca:b1:6c:5d:98:9b:b1:05:64:83:a5:
be:bf:9e:f7:10:fe:c8:a8:59:c5:d9:97:57:cb:fd:25:6a:85:
e8:08:38:57:5a:bb:7c:da:32:96:ea:22:f9:4c:4d:cc:e0:5e:
d9:9e:e4:17:66:06:c4:0d:a0:4f:4b:be:e2:d5:1a:1b:f0:81:
05:7e:68:ef:9d:e6:bb:38:6c:f4:d1:f8:9d:69:bb:da:af:cc:
02:1b:37:4e:4c:18:d4:96:a7:51:a4:93:05:ac:2d:7e:6b:36:
bd:d4:a6:cd:03:2b:d2:a4:b7:ae:5d:86:b9:7b:65:d9:8f:0b:
68:ab:06:ae:a0:80:fc:23:b9:f9:c7:7e:68:13:5b:35:91:b5:
44:03:2e:b9:9a:f6:99:c8:95:d7:1e:f9:8f:7e:cb:f9:7b:71:
db:8e:0d:41:7d:e4:d2:0a:c8:5c:c3:5d:87:19:34:7c:9c:dc:
f9:b9:26:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:35 2026 by rpki-client