Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143749.roa
File: AS143749.roa (raw, json)
Hash identifier: 0InpUf1LjC0QSvSRDJVwdhT5HIFhNVwroTFEsh86yVk=
Subject key identifier: 25:0F:45:9A:9A:3B:C2:07:20:B2:9F:ED:C2:D2:DE:BB:F6:1D:D1:3F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7FFEF6EFD0E982947E16A9E1216A896EBB18924F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143749.roa
Signing time: Fri 22 May 2026 06:05:29 +0000
ROA not before: Fri 22 May 2026 06:00:29 +0000
ROA not after: Fri 21 May 2027 06:05:29 +0000
asID: 143749
IP address blocks: 240a:a44b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:fe:f6:ef:d0:e9:82:94:7e:16:a9:e1:21:6a:89:6e:bb:18:92:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:29 2026 GMT
Not After : May 21 06:05:29 2027 GMT
Subject: CN=250F459A9A3BC20720B29FEDC2D2DEBBF61DD13F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:46:dd:cf:5b:d4:d6:e6:ef:93:c1:92:06:12:
f1:e9:cc:5c:ee:9d:21:e0:5e:8b:58:55:0b:60:06:
e3:85:0f:db:a1:da:c1:95:de:c7:54:dd:ee:15:5d:
23:f6:f3:75:be:98:da:01:b1:73:5d:a6:0e:36:a2:
72:16:09:21:53:d0:f5:8c:e9:0c:52:0b:1a:81:42:
3e:ee:1a:30:97:a9:3b:e8:85:67:4f:ce:3c:78:5d:
2e:a3:5f:7d:2f:13:0d:14:da:7d:4d:16:e5:ea:fa:
6f:d2:b4:6f:4a:29:56:9e:fd:a0:2d:1b:3b:72:55:
53:72:a0:44:07:37:e3:01:c4:45:99:85:6d:15:95:
4f:af:c1:4e:c1:76:01:72:f8:00:94:c3:47:cb:da:
69:00:72:a2:e1:39:06:df:f5:32:7d:1b:47:54:c9:
78:46:fd:b7:26:aa:72:fd:dc:b3:b6:78:ec:f7:e8:
57:09:fc:5b:15:c0:f1:e7:d7:25:dd:c8:d5:41:84:
78:e1:35:68:dd:fc:d8:db:ab:e2:88:b4:99:f6:0d:
c0:64:cb:86:2d:41:4e:26:42:82:b6:c3:30:d4:b1:
9f:89:59:87:d9:bd:2e:49:86:46:f6:09:fe:81:21:
20:96:17:cb:67:c9:6b:b2:de:d1:68:b5:eb:73:33:
c9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:45:9A:9A:3B:C2:07:20:B2:9F:ED:C2:D2:DE:BB:F6:1D:D1:3F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143749.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a44b::/32
Signature Algorithm: sha256WithRSAEncryption
7b:20:ee:ed:d3:49:fb:11:e1:00:a3:b6:ab:af:e5:1d:b7:a3:
b1:67:6b:0e:24:6f:1f:b2:bd:e8:04:3e:e6:5f:2f:08:96:89:
ff:b1:99:c0:c0:07:c9:fb:86:01:37:2e:0c:a5:91:d5:de:bb:
c2:a1:62:4a:0a:a2:0b:55:8a:ce:fd:3f:bd:77:ea:ff:e9:ef:
50:1d:c1:ae:8d:8c:43:bd:32:b9:8e:70:8e:8e:21:7a:a7:1c:
19:51:bf:56:af:96:ae:9e:e2:a7:45:d6:ea:5d:d5:4c:b2:d0:
17:32:a4:39:8e:f2:10:66:80:9b:69:16:8a:96:b8:36:e5:79:
1a:ab:b1:db:68:0d:d0:ac:2e:98:78:62:01:e1:ad:86:66:ae:
2f:8a:5d:4b:92:a5:b7:29:d2:48:58:c7:36:dc:22:aa:29:36:
ad:eb:c1:79:11:a2:8b:ca:bf:a0:f1:a6:2e:04:27:f9:06:0f:
63:bb:7c:6a:e7:f4:21:e4:ef:67:4c:0b:67:f7:d5:0b:b7:e3:
9b:50:ec:9a:cb:47:44:02:14:68:0a:ae:90:9e:6e:e6:20:ef:
eb:ba:5b:bd:8c:02:ff:e0:6f:9e:09:0f:de:1a:a2:f7:32:b1:
46:e2:38:22:47:fd:e1:48:35:02:8e:0d:95:6d:89:0e:33:93:
9b:cd:45:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:24 2026 by rpki-client