Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143746.roa
File: AS143746.roa (raw, json)
Hash identifier: O350sGBUX9OxhvotfnFDswJdik06oRjBfxUZO5dEYOY=
Subject key identifier: 9A:7B:E5:53:6E:E1:26:B7:CB:8C:43:32:0C:98:EC:94:71:AC:7D:1E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2CD55F6C2ED553F8ADBD600733695B932ED7A242
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143746.roa
Signing time: Fri 22 May 2026 07:32:17 +0000
ROA not before: Fri 22 May 2026 07:27:17 +0000
ROA not after: Fri 21 May 2027 07:32:17 +0000
asID: 143746
IP address blocks: 240a:a448::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d5:5f:6c:2e:d5:53:f8:ad:bd:60:07:33:69:5b:93:2e:d7:a2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:17 2026 GMT
Not After : May 21 07:32:17 2027 GMT
Subject: CN=9A7BE5536EE126B7CB8C43320C98EC9471AC7D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:76:bc:f3:12:2c:95:c0:5a:3d:1e:cb:e6:
95:60:43:3e:b0:35:44:6e:4e:d0:b3:77:45:0f:c4:
22:99:9d:86:43:ae:13:eb:b7:c5:e5:ef:da:13:19:
93:0d:a0:ff:8d:5d:7c:08:ab:e5:30:ae:b2:2d:31:
eb:2f:30:7b:fa:01:05:8d:3b:f5:4b:7f:80:1d:6b:
86:98:d1:2e:26:59:4c:3e:22:33:58:6a:a2:5a:96:
19:a7:71:43:1f:5f:31:00:16:69:61:10:73:81:b7:
d4:d1:44:fd:00:54:14:76:e5:67:c1:30:6f:e8:3b:
30:cb:62:76:02:16:84:4a:5a:33:95:1d:10:f9:94:
d8:1d:f1:15:97:a6:9e:da:4e:ae:a5:ef:26:7d:68:
fd:5e:f7:54:3e:8f:99:73:34:eb:ef:18:7a:06:3e:
2c:11:1d:f8:5c:7b:58:08:84:47:6f:50:d0:6b:6d:
c9:3d:27:95:df:bf:be:70:b4:a9:e1:a7:16:a9:4e:
93:8e:28:dd:24:f6:29:11:29:e1:59:ca:cc:cc:ab:
45:0d:fe:91:f2:be:37:3e:32:bf:86:b9:dd:4e:d3:
81:a5:e3:cb:a0:6c:de:1a:37:fe:79:85:ec:bb:49:
46:7f:c2:42:b5:62:63:ad:36:88:99:68:82:e4:9f:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7B:E5:53:6E:E1:26:B7:CB:8C:43:32:0C:98:EC:94:71:AC:7D:1E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143746.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a448::/32
Signature Algorithm: sha256WithRSAEncryption
6b:81:e3:7e:52:5c:a8:cf:0d:bc:80:52:ef:82:e7:dc:ae:32:
43:be:f5:c7:f3:6e:b4:1c:f9:61:bf:19:9b:58:f7:18:3b:1b:
d1:85:d6:93:b3:ca:d6:8c:80:5f:da:ed:f1:dc:bb:ab:3e:9c:
43:fd:f6:33:02:d6:9e:16:0c:f1:ab:f3:3f:bc:5d:62:8c:0f:
96:28:27:2d:9b:61:66:36:4f:52:24:ea:46:c3:17:86:3b:e0:
3d:ac:79:26:d2:72:c1:06:fc:0e:5c:f8:fb:41:af:aa:1f:b0:
b8:6a:27:98:2f:d4:cf:ce:8b:52:cc:3f:5f:85:ac:c2:e9:a5:
0a:d3:bc:07:74:be:83:49:72:df:40:17:01:38:6b:92:b4:95:
f6:37:40:f7:62:22:34:36:56:3d:8d:17:22:07:bb:73:ab:9e:
09:e9:d6:94:19:e3:dd:ba:54:7c:2f:5c:f0:01:7a:b7:90:2c:
26:3b:93:37:be:9e:b1:6a:01:35:6d:9a:ff:57:b0:64:e1:6f:
8a:49:c9:bd:93:3a:66:e9:75:9d:cd:6f:c8:0c:ac:b6:8e:cb:
be:97:dd:70:00:b2:c4:7b:f6:0b:3a:36:fa:42:f6:8a:a6:f7:
27:5b:b3:b6:a2:cb:bb:32:1e:d4:36:8f:42:26:95:3a:d1:0e:
56:49:80:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:17 2026 by rpki-client