Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143742.roa
File: AS143742.roa (raw, json)
Hash identifier: 7iC+rcVosc+V6VmiS7YdWCctcUg9ORCnxuyjEGUdwYw=
Subject key identifier: 29:EF:89:57:8D:14:00:6D:67:F8:90:C1:A5:07:D9:58:C9:7E:AF:41
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5E9241747CD9F04C093495459A208309545E01BD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143742.roa
Signing time: Mon 25 May 2026 06:49:03 +0000
ROA not before: Mon 25 May 2026 06:44:03 +0000
ROA not after: Mon 24 May 2027 06:49:03 +0000
asID: 143742
IP address blocks: 240a:a444::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:92:41:74:7c:d9:f0:4c:09:34:95:45:9a:20:83:09:54:5e:01:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:03 2026 GMT
Not After : May 24 06:49:03 2027 GMT
Subject: CN=29EF89578D14006D67F890C1A507D958C97EAF41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:12:05:42:ef:3d:09:9b:51:3f:5e:06:42:
9d:af:c9:00:17:eb:0e:82:d7:a1:a1:a9:d7:95:53:
df:d0:0e:04:cf:65:fb:e1:4d:34:e0:12:37:7c:b4:
e3:f0:e8:b1:12:ed:e3:aa:c2:34:2a:5d:65:47:3e:
90:9b:8f:80:f8:54:55:2b:8b:7a:67:59:a6:af:3e:
6c:d0:72:76:6f:63:bd:9d:3a:bb:2e:b5:58:fa:6b:
a2:06:f9:cd:e3:29:2d:0c:4e:31:9d:ec:e8:3d:34:
51:b8:d1:db:57:07:d9:31:0b:37:29:86:b8:04:ec:
ab:8e:42:39:d7:49:c2:bd:98:ee:0c:7e:b6:2e:b7:
b5:83:fd:94:9f:01:c2:d9:75:13:3d:4d:06:10:dc:
26:bf:8b:5f:84:8c:98:cc:d5:5f:44:c2:15:b2:46:
fd:b7:46:2e:48:9e:84:41:ef:f0:21:6b:ef:87:7b:
b7:0f:b3:7f:ce:07:ec:ec:96:29:7d:f9:83:a7:6c:
82:c8:40:88:41:24:b7:80:01:a0:35:ff:ea:f4:1d:
d6:1a:68:a4:03:7b:09:e9:63:0b:80:ae:48:5b:1e:
58:f9:ef:e3:2b:22:4d:cb:6f:f1:d0:84:d3:4a:3e:
20:43:9b:8e:60:49:d6:b9:51:83:4d:43:1b:b2:4b:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EF:89:57:8D:14:00:6D:67:F8:90:C1:A5:07:D9:58:C9:7E:AF:41
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143742.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a444::/32
Signature Algorithm: sha256WithRSAEncryption
28:d3:8c:94:8b:6b:e7:1d:af:4e:29:76:7e:1e:3a:4a:e6:b0:
73:ed:86:e2:5c:dd:d7:fc:8c:cb:01:9d:6e:a0:92:1f:ab:49:
b5:6c:2e:05:73:2a:2c:8a:8c:8f:ff:14:43:f2:3d:eb:a9:8a:
d0:ad:fe:8d:16:3e:10:fe:cf:7c:57:0f:4a:ff:16:41:48:48:
c0:88:73:40:c2:50:82:3f:69:55:8e:87:2d:c1:16:7b:be:92:
d5:32:eb:8a:9a:02:e2:10:6b:29:31:ff:5e:76:c4:3b:0a:56:
67:db:37:75:8d:26:dc:da:4f:c7:ac:75:d7:34:4b:60:2b:e7:
eb:36:31:4b:26:73:0d:09:64:e9:26:5b:5f:b5:af:49:38:df:
ef:00:7f:6c:65:27:6c:4a:9c:2b:20:44:f3:6c:53:e1:a2:85:
4d:08:36:2f:c1:58:6a:dc:ea:82:cf:cd:b8:fd:79:9b:74:f0:
a6:b0:45:af:49:2d:fa:92:69:63:a5:91:c3:fa:2a:a5:5c:4a:
7c:5b:8e:09:a1:7a:81:82:b0:de:4b:3a:53:ea:0f:61:f7:cb:
97:03:08:b5:aa:d0:ab:d1:8c:a7:a9:0a:84:41:fe:29:99:d0:
f3:e5:0d:d5:2d:bf:ae:f0:c9:49:7a:7a:72:1c:ad:b8:89:69:
2a:24:54:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:24 2026 by rpki-client