Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143741.roa
File: AS143741.roa (raw, json)
Hash identifier: 733TPwf0q3gsGZE4nwX5haPEdx7QS5GHeY+MFbh/4yg=
Subject key identifier: 47:07:56:FE:FF:2B:44:DB:57:56:80:28:C9:9E:98:51:C6:23:51:D6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0D8C7CDF139BA323E1D3CBC6ACB6B4049160495E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143741.roa
Signing time: Mon 25 May 2026 02:22:48 +0000
ROA not before: Mon 25 May 2026 02:17:48 +0000
ROA not after: Mon 24 May 2027 02:22:48 +0000
asID: 143741
IP address blocks: 240a:a443::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:8c:7c:df:13:9b:a3:23:e1:d3:cb:c6:ac:b6:b4:04:91:60:49:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:48 2026 GMT
Not After : May 24 02:22:48 2027 GMT
Subject: CN=470756FEFF2B44DB57568028C99E9851C62351D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:9f:73:85:3b:7c:98:6d:d9:6f:49:16:4c:
43:83:30:59:78:62:c0:d2:9b:12:55:1c:6d:64:4f:
9c:f6:aa:5e:35:75:0d:5e:fb:2c:90:37:62:ff:76:
76:da:31:c0:d7:05:8b:cc:35:67:37:e6:94:9f:c4:
f5:53:51:f2:ae:d5:74:4a:30:ab:2d:25:c9:ef:30:
74:91:25:dc:82:71:81:e2:cc:5a:1f:9c:85:0f:e3:
a4:45:a5:60:81:f0:1f:ed:74:bb:c1:4f:bb:08:6f:
ab:77:9e:89:07:f7:81:f9:ed:c6:27:a2:8a:08:c9:
10:58:88:b3:a5:c2:dc:32:2b:40:8d:f0:40:fa:53:
b1:a4:3d:ed:6c:fe:af:06:ba:23:0d:e6:c2:95:01:
a9:70:bc:e1:cc:e0:83:5e:20:00:ac:eb:93:81:22:
dd:7a:18:47:49:12:2f:28:cf:fb:37:b2:9e:fe:20:
61:06:31:83:4f:2c:5b:bb:9d:f1:80:65:4f:71:0b:
da:bc:88:45:a1:ce:68:aa:ec:d2:dc:30:a3:90:a9:
50:99:bb:5b:bc:6c:c2:10:2f:27:cd:48:97:1c:63:
77:8a:37:33:06:97:76:25:9f:3d:d7:22:aa:07:eb:
04:88:38:e0:59:35:9e:17:93:96:9b:28:8f:70:00:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:07:56:FE:FF:2B:44:DB:57:56:80:28:C9:9E:98:51:C6:23:51:D6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a443::/32
Signature Algorithm: sha256WithRSAEncryption
ad:a5:3e:9b:ff:3f:35:a5:35:de:c4:ae:a7:a3:05:f6:eb:af:
b3:ee:9c:19:df:36:f6:03:88:09:d1:aa:08:11:19:35:20:63:
05:b3:03:66:a2:82:c8:e8:cc:d0:0b:82:01:21:a0:f7:83:53:
67:50:ec:14:2c:b1:ff:aa:99:8b:04:1f:83:3b:f8:2c:ef:d5:
b2:ea:e6:c8:a9:55:bc:7a:00:d3:cb:ad:ed:87:98:32:4c:03:
f8:6b:3c:ca:a5:2c:60:92:bd:21:5c:89:0a:24:77:b6:66:8d:
1c:81:3b:03:97:82:d5:c6:a2:1e:30:43:df:f2:a2:79:a1:75:
74:88:b7:96:aa:f0:54:52:4b:aa:ea:68:e2:df:46:f2:e4:eb:
65:69:c6:0a:20:14:85:9b:15:08:ee:a6:05:94:4b:25:1b:c5:
19:dc:32:59:99:4a:ba:45:b1:6e:b8:84:1a:d2:ac:23:3f:35:
89:12:a8:bd:6f:94:26:45:77:4c:32:46:34:5a:d1:46:56:d0:
2b:c3:3d:e1:ec:c0:18:96:7b:e4:cc:70:d7:a6:b7:9d:0d:3a:
d9:a0:37:49:b5:0e:cf:48:31:ad:80:d8:b1:07:8e:85:97:9d:
a9:11:40:db:ed:5e:46:de:eb:18:04:7a:57:ae:35:07:18:fa:
ed:c2:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:28 2026 by rpki-client