Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143744.roa
File: AS143744.roa (raw, json)
Hash identifier: CzwU0xdMWK+lWHKJXb3/LKCSzd9SzLSvJ9rYSbpTEwU=
Subject key identifier: 89:2A:56:C2:FC:68:44:4F:BD:00:53:60:81:4B:18:CB:11:E2:AE:67
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: A15066F536BF9218F7A48041170831B8244016
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143744.roa
Signing time: Tue 26 May 2026 06:31:07 +0000
ROA not before: Tue 26 May 2026 06:26:07 +0000
ROA not after: Tue 25 May 2027 06:31:07 +0000
asID: 143744
IP address blocks: 240a:a446::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a1:50:66:f5:36:bf:92:18:f7:a4:80:41:17:08:31:b8:24:40:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:26:07 2026 GMT
Not After : May 25 06:31:07 2027 GMT
Subject: CN=892A56C2FC68444FBD005360814B18CB11E2AE67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:cc:5c:b7:db:c9:5d:69:75:23:81:46:30:
c0:4f:f3:0e:46:ca:62:52:b5:1d:7c:c1:d8:db:a9:
d8:5a:0a:ea:55:65:40:90:24:bf:4c:63:0c:03:98:
40:a6:55:83:c5:3a:8e:82:e2:64:45:ae:c9:c2:4b:
8e:f1:cb:0b:52:7f:c2:ed:0d:b0:74:19:c5:9c:94:
0a:13:71:a1:f8:20:23:2a:4e:82:66:69:76:1d:fc:
3c:5a:c4:b0:48:1e:c0:a2:60:a6:70:4d:c2:bc:e5:
59:4a:35:e5:d9:bf:e1:05:a2:a4:b6:7b:83:7f:d9:
9c:40:f1:1e:e3:1e:a7:53:63:79:2e:f2:02:43:46:
9a:50:45:ff:f9:90:ba:75:dd:21:66:bf:8a:6c:f0:
2c:c4:47:95:58:bd:09:5b:d9:50:f4:82:54:90:6d:
25:07:0c:90:6a:40:9b:72:c7:8e:3a:6b:0c:8e:5c:
ac:c8:d2:68:8a:e1:5d:ca:79:33:8c:e8:dc:9f:b3:
b3:c2:25:ce:33:40:f5:04:74:31:52:68:20:0b:08:
41:33:bf:b0:1b:1c:79:a1:00:a3:56:22:2e:c8:11:
61:5c:b4:34:15:f6:89:5c:f2:18:7a:21:90:82:4f:
1f:82:0e:a1:18:0a:f2:34:91:36:37:94:16:16:bf:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2A:56:C2:FC:68:44:4F:BD:00:53:60:81:4B:18:CB:11:E2:AE:67
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143744.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a446::/32
Signature Algorithm: sha256WithRSAEncryption
87:14:1f:00:bf:86:ee:48:e7:0a:05:18:f2:d1:00:4f:e7:32:
a8:dc:9d:fc:9e:ff:f5:54:8d:c1:58:f0:86:e5:ab:23:09:3d:
05:c0:af:bc:e0:38:f0:61:88:eb:de:a2:a2:df:2e:3b:78:c2:
0a:62:3c:49:44:bd:55:3a:cf:00:c0:8d:0a:6a:71:e0:15:22:
45:7d:44:a1:1f:db:65:8d:50:10:1e:1a:76:e0:d2:e3:20:18:
a6:ab:25:be:40:7a:84:1d:72:03:11:34:89:3d:ef:57:2d:31:
a5:a4:3d:c3:72:19:3a:72:0f:be:f7:49:a3:21:b0:b9:8d:c0:
7c:b0:a6:58:9c:e2:ab:75:01:84:0e:b1:d5:e0:9d:4e:3c:ba:
02:ec:ce:4a:56:2c:58:25:f1:6f:59:ed:39:b2:c6:f6:1a:77:
b4:4e:8a:a2:8d:fc:e0:c6:eb:fc:2e:82:81:68:00:7c:0b:c5:
9e:3b:43:71:b9:c6:c4:9f:a5:f4:5e:f8:5c:f4:6e:d2:f2:2d:
52:6a:55:78:2b:6b:2a:37:8b:7e:36:89:01:56:3d:ec:b6:70:
70:b4:c6:60:30:0b:b3:93:3c:c7:a4:1d:71:5a:85:42:e6:d1:
a7:e5:77:16:ea:5a:de:40:d6:fb:81:2f:4e:36:fd:f9:3b:88:
74:82:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:59 2026 by rpki-client