Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143759.roa
File: AS143759.roa (raw, json)
Hash identifier: DZv6Lr4ZT+lJM6WDCoO42XXJdvp0zFzeM72nHVBYevw=
Subject key identifier: 10:37:BC:7C:CB:2D:E4:A4:3A:8E:6A:03:16:05:90:DC:CB:C0:DB:5B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B0CC70479CBB6B625BECF81B7E36B03B6F01298
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143759.roa
Signing time: Fri 22 May 2026 07:32:10 +0000
ROA not before: Fri 22 May 2026 07:27:10 +0000
ROA not after: Fri 21 May 2027 07:32:10 +0000
asID: 143759
IP address blocks: 240a:a455::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0c:c7:04:79:cb:b6:b6:25:be:cf:81:b7:e3:6b:03:b6:f0:12:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:10 2026 GMT
Not After : May 21 07:32:10 2027 GMT
Subject: CN=1037BC7CCB2DE4A43A8E6A03160590DCCBC0DB5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:30:bd:37:da:38:81:9e:5e:8a:07:d5:90:
cf:e7:b2:03:f1:2e:42:91:a6:f4:06:e4:67:c0:17:
68:62:83:09:d6:ce:52:13:dc:fc:63:03:2d:e4:77:
a7:25:2b:49:00:73:c0:7a:d7:35:2c:34:ff:3d:7f:
45:39:c1:48:5a:83:b5:71:70:e9:c2:34:3f:22:e5:
f0:17:9d:b3:1f:4e:ae:e7:25:81:15:de:b7:24:9a:
42:03:3d:52:b4:cf:58:15:de:c5:5d:d3:32:a9:7e:
4a:8c:f3:ae:89:53:82:a8:4f:e9:37:65:b4:6a:f2:
bb:9a:4f:ef:d2:57:dc:33:7e:dc:83:24:84:c5:9a:
46:0c:1a:fa:71:85:78:c4:aa:bd:7b:16:93:26:47:
f4:cd:e4:59:75:0f:93:64:7c:04:8b:a2:41:cf:c2:
da:0a:2c:94:70:49:9b:6d:7b:d6:f5:2e:5b:ba:de:
4e:f0:63:5d:44:4f:a8:5a:7a:08:db:b9:f7:9c:59:
58:e5:70:92:22:9c:31:b2:ec:9f:97:68:a6:4d:ae:
90:40:cf:60:aa:54:f8:93:64:79:2c:d6:89:d3:79:
9c:ea:93:49:17:20:c9:b6:db:8d:9c:90:80:f6:27:
8b:6f:c8:80:0e:c9:40:2d:c1:5d:ff:a7:9e:5b:2e:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:37:BC:7C:CB:2D:E4:A4:3A:8E:6A:03:16:05:90:DC:CB:C0:DB:5B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143759.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a455::/32
Signature Algorithm: sha256WithRSAEncryption
1d:09:b0:c2:11:3d:58:51:05:c3:e0:77:8a:c6:73:95:7d:08:
3e:fd:a4:cc:fc:ce:dd:33:6a:02:71:71:e1:78:d7:df:ae:bb:
cc:d0:d7:5c:c9:60:92:b3:3a:f0:ce:ae:ea:f0:15:2f:e5:ac:
a0:c1:00:86:33:11:c6:9c:78:ac:2e:2d:fe:bb:cf:84:d9:02:
36:f8:88:8b:05:2a:a2:8c:e3:42:0c:49:b8:73:1b:21:40:16:
76:72:37:fe:de:30:db:b0:66:50:04:e3:a1:69:ee:12:d4:67:
a8:4e:72:80:cd:11:2d:dc:51:75:1d:a3:07:3c:81:40:a2:f4:
1f:65:35:86:a8:2b:07:d7:0b:1d:14:13:95:01:d0:16:6a:19:
61:42:a6:c5:60:87:7f:b8:0f:f5:fa:c7:84:76:4c:06:8b:f0:
e5:8e:2f:29:d2:76:d1:ae:e3:b2:4d:ca:94:9d:5e:f7:5d:c7:
3f:b9:bc:4b:8f:a6:f4:18:f2:e2:36:17:9d:89:96:cd:44:c1:
03:5e:44:dc:6c:57:0d:a5:a1:18:bd:f0:c8:14:49:b1:1c:78:
18:79:10:6c:0d:72:dc:7d:39:46:c8:2c:6c:fe:c1:a9:3f:46:
bb:12:23:d8:28:b5:e6:a1:44:a1:7a:f5:0a:5e:dc:74:6f:19:
70:e4:e7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:48 2026 by rpki-client