Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143740.roa
File: AS143740.roa (raw, json)
Hash identifier: Mkt03zGYPqEcKUv0dp95Tr3WXw7ICfwj/a/wBD57KtY=
Subject key identifier: E8:D1:13:A9:CE:EE:C0:FF:0F:BC:4D:B1:A1:17:43:E6:F3:24:7B:6B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D8D59DF5B8B7212FA1C37320F9F0080A74209C8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143740.roa
Signing time: Fri 22 May 2026 04:08:30 +0000
ROA not before: Fri 22 May 2026 04:03:30 +0000
ROA not after: Fri 21 May 2027 04:08:30 +0000
asID: 143740
IP address blocks: 240a:a442::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8d:59:df:5b:8b:72:12:fa:1c:37:32:0f:9f:00:80:a7:42:09:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:30 2026 GMT
Not After : May 21 04:08:30 2027 GMT
Subject: CN=E8D113A9CEEEC0FF0FBC4DB1A11743E6F3247B6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:59:c2:33:a3:44:f9:0c:de:da:25:e5:9f:
ba:19:1b:3f:6b:f6:f8:61:01:dd:82:e5:01:18:99:
14:4e:fd:be:99:96:46:7e:ea:09:2c:50:78:9d:3e:
b7:0e:5b:24:ed:81:e1:64:0e:9e:c0:12:e8:6c:c7:
0b:46:bc:e4:58:27:96:ad:e0:e3:08:c9:8c:83:fe:
e3:a6:ed:77:31:c1:35:5d:73:d1:37:5d:90:91:2d:
c8:0d:ec:ed:81:48:2a:00:07:e8:58:71:fa:d7:f0:
88:29:84:39:45:09:34:0d:d0:57:68:0b:33:aa:97:
f2:f9:9f:97:69:4c:97:51:1c:77:79:05:5d:2d:7b:
b5:ed:ee:2d:97:d0:b5:d3:15:e2:13:73:42:6b:38:
73:9b:d6:48:4f:2a:b1:51:2e:00:fd:43:6a:dd:68:
61:80:94:de:57:61:1a:a8:74:e3:19:92:ff:d2:21:
93:fd:de:dd:8a:e1:05:1a:6d:70:5d:c4:e0:93:c5:
00:0d:db:7f:4c:7e:b4:21:11:e5:41:a6:f3:99:8c:
a2:70:03:e0:81:52:c0:f0:62:b9:98:0a:cf:b2:72:
78:50:7d:47:1d:f7:fe:84:44:dc:5b:e5:60:cc:06:
cc:62:fa:98:de:0b:79:f9:4a:f9:e4:41:59:44:3e:
91:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:13:A9:CE:EE:C0:FF:0F:BC:4D:B1:A1:17:43:E6:F3:24:7B:6B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143740.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a442::/32
Signature Algorithm: sha256WithRSAEncryption
bc:54:04:be:4e:0f:d4:d8:1e:0f:2f:8b:00:2b:dd:68:87:fb:
f0:62:42:28:83:80:f4:ef:7d:aa:30:a0:67:d7:41:d9:33:11:
ef:63:5f:d4:89:f8:ea:4f:77:a1:33:d0:bc:94:12:1a:71:7d:
2d:09:53:df:5b:51:ae:1c:29:7a:40:26:b6:69:8d:7b:17:ad:
2a:f5:9e:33:f0:e4:a2:63:62:67:39:08:1f:2e:b2:18:8d:58:
4e:ee:0b:b2:76:31:3c:ea:2a:23:41:59:fe:c9:4a:12:58:eb:
f1:63:e3:d9:f9:3d:93:13:33:bd:9e:92:64:e8:50:12:a0:eb:
34:33:66:0e:ca:03:29:d1:94:c6:7e:59:d0:0c:8a:e3:c3:cb:
20:c6:a2:c7:10:b5:47:9d:71:52:25:59:ec:ef:df:7a:7b:6b:
87:9d:65:d1:09:20:16:7b:42:6b:81:da:00:f3:91:8c:ac:16:
3c:84:9a:9c:ad:5b:3f:b6:cd:94:9a:fa:46:ca:31:8c:b7:4c:
eb:23:b1:d6:16:63:84:49:f5:3e:79:f6:22:d7:8b:89:e2:d5:
2e:e6:5d:56:37:07:bc:59:fc:ca:87:aa:1b:49:8e:29:38:e1:
b9:21:f2:ca:c1:bf:66:a3:a6:29:c5:1e:cd:a4:7f:9f:bf:56:
c4:45:c0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:39 2026 by rpki-client