Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143757.roa
File: AS143757.roa (raw, json)
Hash identifier: GH7fnkhOy2YAcLZfEyOPXte43+BjWI8yQp08NkeSrDM=
Subject key identifier: 59:BA:CA:D5:38:1F:8B:D8:5D:86:80:A1:2D:D7:3B:CE:BD:72:00:90
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7587304CC29CABA876E9E2E4E101F32A03F52613
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143757.roa
Signing time: Mon 25 May 2026 06:28:27 +0000
ROA not before: Mon 25 May 2026 06:23:27 +0000
ROA not after: Mon 24 May 2027 06:28:27 +0000
asID: 143757
IP address blocks: 240a:a453::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:87:30:4c:c2:9c:ab:a8:76:e9:e2:e4:e1:01:f3:2a:03:f5:26:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:27 2026 GMT
Not After : May 24 06:28:27 2027 GMT
Subject: CN=59BACAD5381F8BD85D8680A12DD73BCEBD720090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:6c:55:9d:21:f4:bb:07:ef:0e:71:fb:60:
cd:98:0e:ae:7d:ba:b1:f7:90:90:7c:07:e9:54:de:
4e:b9:f3:1f:52:3f:de:42:93:ce:ad:80:a2:c3:49:
16:54:95:27:1c:da:82:8c:f7:a5:d9:ab:35:46:dd:
3e:f9:ae:5c:7b:20:59:1d:fe:a7:e7:2a:1e:f9:96:
da:0e:45:9e:ce:d7:ec:4a:49:95:1c:83:e2:cd:ca:
db:94:f8:63:e2:19:f6:62:3e:03:4e:e9:0a:2f:1e:
84:18:2e:52:fb:14:13:52:46:7f:2d:7c:a3:83:13:
60:85:5f:87:4f:c9:64:8e:5f:e5:1a:5a:f3:b1:20:
78:c7:db:65:2e:51:e6:5a:54:3f:4e:58:fa:50:ea:
9f:1d:c4:c3:9f:a4:2b:b3:c4:14:f2:92:fe:6b:51:
43:ba:ce:dd:6d:7f:58:a5:14:8d:17:ce:b6:fd:d1:
85:45:1d:f8:d4:e2:89:83:03:8b:8b:a9:65:a9:ae:
e8:92:e1:05:cb:19:b0:5e:f7:a5:30:ef:11:f9:0a:
54:28:4a:87:79:65:9d:cc:6f:91:03:55:bd:41:49:
f7:69:9e:bb:af:17:a0:36:26:91:b1:07:35:bb:4d:
5a:45:74:a5:0d:5e:63:3e:28:1f:35:bc:b5:ea:8a:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BA:CA:D5:38:1F:8B:D8:5D:86:80:A1:2D:D7:3B:CE:BD:72:00:90
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143757.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a453::/32
Signature Algorithm: sha256WithRSAEncryption
46:b2:52:57:46:fd:bb:d4:df:22:cf:be:23:85:8c:b3:c8:fd:
47:0d:93:48:6d:93:78:8e:77:60:71:71:c3:b4:4b:f3:07:bd:
16:a7:92:3e:02:5e:b6:48:58:56:08:a6:17:13:78:28:f0:8e:
d1:39:91:0b:f5:99:78:a2:f5:cb:59:cc:ee:05:14:2c:c9:32:
6c:00:4f:78:38:34:d8:2d:fd:b7:97:82:a3:61:cb:9e:0e:45:
90:df:15:02:87:10:0f:a9:15:71:c4:17:93:3b:7f:51:c8:e6:
c5:3e:33:b0:63:4f:41:29:91:ef:a0:68:9d:01:1a:3e:9b:df:
9f:9a:22:ca:7b:08:06:9b:fc:e4:13:44:a1:c8:90:1e:d9:e2:
58:bf:63:ad:92:ab:d0:59:81:61:78:ee:cb:c0:ea:0e:44:17:
88:51:7e:6b:23:20:3e:4b:d9:21:20:bd:54:40:78:93:4f:c6:
58:ec:ed:5f:01:5f:6d:0b:5f:c6:5f:f3:c1:ae:9b:6b:1d:8b:
19:fb:16:d7:65:4c:25:60:b1:af:65:40:d2:6e:5f:3e:46:a3:
f0:fb:b5:ab:c7:53:49:55:e3:d0:df:71:73:f7:c3:7b:33:9c:
6f:2e:61:af:d9:6e:aa:74:94:25:fc:36:f0:88:55:30:96:0d:
58:ff:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:04 2026 by rpki-client