Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143750.roa
File: AS143750.roa (raw, json)
Hash identifier: rvcFzQntU/YHRQWQZzuHAnmE5wBt0smbhKLkz0Ak4B4=
Subject key identifier: 1E:C7:86:21:AF:F0:83:91:21:70:FC:4D:38:48:5E:E3:40:0A:02:54
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 656965659834668019B9E5FBB7D63ADBB8F3DE3B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143750.roa
Signing time: Mon 25 May 2026 06:28:28 +0000
ROA not before: Mon 25 May 2026 06:23:28 +0000
ROA not after: Mon 24 May 2027 06:28:28 +0000
asID: 143750
IP address blocks: 240a:a44c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:69:65:65:98:34:66:80:19:b9:e5:fb:b7:d6:3a:db:b8:f3:de:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:28 2026 GMT
Not After : May 24 06:28:28 2027 GMT
Subject: CN=1EC78621AFF083912170FC4D38485EE3400A0254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:ae:c8:56:d1:8e:32:18:0d:c9:fa:43:35:
58:7c:fb:1b:69:26:e3:13:ad:cc:de:00:52:ba:48:
a2:51:85:4f:d5:57:7f:98:90:38:03:01:ae:8d:9f:
31:48:5b:27:7a:5f:e3:d8:e4:fb:d1:bd:93:16:1a:
a6:66:ad:f3:39:5b:3a:a9:bd:ff:30:fb:3f:15:30:
8b:60:7b:ca:ac:d9:ae:05:2a:94:9e:2c:7c:c8:ef:
85:eb:ad:0d:d9:b9:c4:ba:f2:c0:99:a8:0d:7a:03:
8b:41:a0:79:a0:6b:05:9f:f5:ed:ea:08:77:8c:02:
8b:fb:dd:a7:f9:fc:92:66:49:43:2d:fa:f7:48:5d:
9a:cc:f7:30:f3:b9:1d:a5:ec:2d:ee:4a:aa:0d:6c:
63:9d:01:12:cf:9a:3d:ab:72:7c:2f:a3:22:b9:13:
43:2d:c2:6d:bd:43:2e:b0:98:61:4f:12:33:13:c3:
7d:c3:87:6b:4d:f6:ed:96:17:f8:57:e8:98:f9:ba:
53:af:3e:5c:9e:a8:3d:03:b4:38:de:65:50:7b:bb:
51:22:84:c9:ad:27:b4:8d:67:5c:cd:02:f5:e4:86:
d5:20:85:a9:fb:fa:a4:59:e7:68:0d:4b:fa:fb:4f:
3d:4b:ce:15:49:06:2a:58:26:6d:97:54:35:4a:75:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C7:86:21:AF:F0:83:91:21:70:FC:4D:38:48:5E:E3:40:0A:02:54
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143750.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a44c::/32
Signature Algorithm: sha256WithRSAEncryption
26:98:c7:d0:7a:8a:d1:13:de:f2:b7:c5:d2:fc:02:92:5b:58:
b9:87:f9:49:0e:cc:62:2e:15:5b:22:22:41:89:03:35:00:f9:
94:3f:3f:12:62:d8:cd:bc:f2:ee:3d:9b:f4:6d:c6:90:20:49:
8a:a8:9f:86:4d:42:2e:bc:ce:6c:be:b9:e9:45:f6:4b:aa:43:
fd:c5:bc:39:1b:f1:99:78:be:fc:7c:37:0f:dd:32:4c:75:6c:
98:96:ca:58:81:ee:9f:f2:54:03:d3:52:ca:4e:03:e6:db:77:
55:7e:2b:00:3e:11:dd:1b:f5:33:97:cb:d2:ed:a4:94:42:d8:
c5:1b:cf:d1:32:bf:07:10:3f:b5:e5:b5:41:33:6e:37:8d:0e:
c5:24:48:80:fc:c1:12:d2:3f:95:f6:5a:13:eb:2f:7e:f4:c0:
c4:f3:4e:b0:1d:af:24:76:a1:99:d3:54:d5:f3:cc:a8:82:22:
af:0c:6a:74:6b:73:97:4e:c5:86:2a:d4:5c:0a:d1:a4:79:06:
ae:a7:26:d5:dc:1e:9d:80:81:13:21:6b:df:54:88:8e:de:e2:
46:d8:8c:16:66:15:4c:48:32:d8:f0:1f:44:f9:28:f5:ce:b2:
6f:d0:10:99:b1:b7:40:72:ae:50:a3:ad:64:c0:aa:36:04:d2:
03:e0:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:07 2026 by rpki-client