Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143737.roa
File: AS143737.roa (raw, json)
Hash identifier: QINe6h6t6N0WS5oQV7RWBQC6XO6HUE3btxb19OE7yF4=
Subject key identifier: C4:B3:E4:CD:15:F9:40:7E:15:36:E8:38:3D:50:6E:E2:18:2E:50:DF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 710F1AA9EE0FAB385E95151F0CE99A445A686A9E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143737.roa
Signing time: Fri 22 May 2026 07:32:15 +0000
ROA not before: Fri 22 May 2026 07:27:15 +0000
ROA not after: Fri 21 May 2027 07:32:15 +0000
asID: 143737
IP address blocks: 240a:a43f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0f:1a:a9:ee:0f:ab:38:5e:95:15:1f:0c:e9:9a:44:5a:68:6a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:15 2026 GMT
Not After : May 21 07:32:15 2027 GMT
Subject: CN=C4B3E4CD15F9407E1536E8383D506EE2182E50DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:ba:67:0b:1e:68:f6:04:6b:5e:51:ce:e5:
07:05:4a:d9:7a:39:29:65:29:3e:54:9a:7c:20:d9:
11:ef:61:fe:c1:22:71:34:7a:73:0d:4e:ac:58:bf:
2f:87:64:19:bf:0e:35:b5:0e:54:ba:d5:53:b9:f0:
f1:44:73:1a:47:68:62:ee:66:50:f2:d7:5f:0c:9e:
2c:ed:e8:76:21:5a:2a:d1:4b:8b:a4:78:78:6c:eb:
fe:62:92:db:68:57:ff:02:d3:72:44:a7:b1:4b:e5:
6e:08:ee:81:4a:6c:e8:7e:8a:4b:b3:a0:b6:8a:fe:
e0:b1:09:3e:b9:3c:c3:9e:4a:c4:8d:73:bb:f7:e7:
11:cd:18:85:34:0e:2a:8e:02:97:d3:fb:5e:41:86:
90:d2:e6:d4:99:18:c7:6c:24:dd:73:e9:73:91:b1:
e7:ab:74:05:21:fd:08:58:8e:b8:91:4d:8f:9b:98:
8c:5a:3e:dd:47:42:6b:17:b7:b2:78:fc:d3:38:d2:
d2:1d:3a:71:7b:a2:11:f7:2d:b7:02:06:7e:23:3d:
7c:df:7b:23:4c:1b:e9:26:32:12:cb:c5:21:58:41:
6b:f5:9a:69:b2:f2:75:3f:62:f6:56:08:22:85:69:
a6:19:f2:86:70:8e:0d:3f:93:a5:2d:e0:18:ea:d5:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B3:E4:CD:15:F9:40:7E:15:36:E8:38:3D:50:6E:E2:18:2E:50:DF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a43f::/32
Signature Algorithm: sha256WithRSAEncryption
3f:30:30:8e:96:37:42:5d:d3:9b:69:3a:62:8f:41:bc:53:20:
3b:a6:f5:af:35:e9:81:2f:60:aa:00:a9:53:c8:39:8b:96:78:
a6:f1:3b:63:ac:02:88:33:08:7d:11:5f:c5:3f:f7:3a:e6:3e:
78:ac:61:e5:39:d2:d0:62:c4:f6:ab:57:2e:73:40:77:cf:70:
a1:1b:e9:83:ae:ab:c2:21:4a:ee:3b:cb:a8:fa:4d:81:0d:bb:
ca:4a:82:02:3e:09:d1:8c:09:d0:23:eb:55:a2:b0:55:4b:ca:
62:e3:97:3b:a5:a4:0c:29:6d:c4:58:4b:80:2f:e5:31:4e:2d:
fd:71:3c:db:9b:07:2a:15:2c:45:4a:41:5c:da:6d:3b:f8:bc:
d5:c9:f1:fc:a1:2b:0b:a4:6b:e2:95:70:d4:e0:43:c4:89:1f:
de:44:f4:49:5b:d0:48:07:89:99:12:a9:41:f5:d8:f4:ec:b3:
bd:2c:1d:85:0a:1d:bf:20:12:e4:52:4b:4b:75:fd:45:c9:c3:
3d:63:7f:01:fd:0a:11:4a:4f:3c:9f:bd:1b:c7:bf:05:66:6f:
88:18:5f:c1:57:ac:3f:40:61:49:c7:1d:ac:17:08:2e:60:19:
3d:a9:2f:82:89:b4:b6:66:ec:4c:1c:86:d6:55:a6:7b:14:27:
f9:05:8f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:13 2026 by rpki-client