Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143766.roa
File: AS143766.roa (raw, json)
Hash identifier: LzebkaH9I+F+iN0ydfEngbCqiTeksedTWHtBaKmGQVY=
Subject key identifier: EC:F4:D4:67:31:13:BF:D1:03:56:25:A9:B1:D8:30:24:CB:E5:16:7C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 544AB04AED4BC43F1C5129D104F6490108DF7E2C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143766.roa
Signing time: Fri 22 May 2026 06:46:21 +0000
ROA not before: Fri 22 May 2026 06:41:21 +0000
ROA not after: Fri 21 May 2027 06:46:21 +0000
asID: 143766
IP address blocks: 240a:a45c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:4a:b0:4a:ed:4b:c4:3f:1c:51:29:d1:04:f6:49:01:08:df:7e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:21 2026 GMT
Not After : May 21 06:46:21 2027 GMT
Subject: CN=ECF4D4673113BFD1035625A9B1D83024CBE5167C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0e:bc:79:9e:27:d9:e2:f6:db:49:3f:32:75:
89:76:df:fd:4d:aa:73:6b:5f:2a:79:34:2c:77:f0:
63:b6:28:f1:56:0d:83:ec:09:7c:35:71:d2:f9:9f:
09:7b:d6:a6:ab:46:7b:1e:15:de:94:19:1d:de:f9:
f7:39:59:ab:02:18:ae:8b:18:53:f0:3b:f5:4c:cd:
68:79:00:65:44:64:c5:eb:49:96:0a:b7:08:09:54:
ea:02:c7:90:3f:e7:5e:97:a9:42:6e:f6:cb:02:f7:
68:17:86:a4:e5:04:76:b8:b9:ee:72:c1:e3:38:77:
a4:15:36:67:2e:63:0f:16:be:42:9a:c4:ea:d3:6e:
8e:ea:66:39:91:95:b8:e5:23:34:21:69:67:b6:95:
2d:85:f6:e6:52:29:fe:d7:71:43:0c:93:b4:1c:35:
4f:ac:f0:3a:8b:50:10:78:96:59:93:12:4a:b5:33:
59:b2:18:3d:ee:50:02:41:21:5e:07:dc:f0:fe:fd:
bd:7f:32:d4:05:a3:f1:30:b5:be:a0:3a:01:7f:24:
5e:6f:b2:41:b9:ee:cd:88:51:e4:fa:82:7e:ad:2f:
ab:fe:98:73:fd:07:df:d6:59:c3:5d:6f:96:25:5c:
0d:b2:27:be:43:7c:97:5d:b4:89:07:03:1e:6b:07:
02:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F4:D4:67:31:13:BF:D1:03:56:25:A9:B1:D8:30:24:CB:E5:16:7C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a45c::/32
Signature Algorithm: sha256WithRSAEncryption
6b:6d:b6:63:86:dd:25:f0:87:59:24:e8:f5:53:0a:3a:a2:78:
8c:c4:32:ab:e6:a2:71:ee:33:de:1f:81:c2:f8:92:4d:55:48:
d4:2a:2e:d8:b7:f9:4d:08:67:c2:d5:75:7a:1e:78:ea:1b:35:
57:02:f0:a6:71:de:be:b0:58:84:c7:2e:7e:c5:1a:7f:03:e7:
a4:bb:f0:0d:0b:80:e5:4b:56:94:e3:96:cf:c4:1c:52:50:ff:
f5:b5:5c:e6:84:a9:e0:06:38:77:c5:4d:94:50:c4:a3:88:49:
d6:f2:0b:16:f3:2b:22:36:e0:fe:a9:af:ad:59:0e:28:06:96:
3c:81:2f:38:60:79:cc:ea:cc:b7:88:fb:b8:ad:ec:9f:2f:a6:
c7:a6:63:e5:55:6b:cc:1c:eb:65:64:5c:35:34:65:93:65:7a:
ef:c7:27:82:a5:d7:3a:21:76:9a:8a:61:a6:cd:80:67:d3:73:
45:9a:dc:cf:b2:c0:a2:05:64:6c:f5:b1:4d:46:06:7c:19:ee:
36:83:e3:7f:c9:d4:f9:7e:4b:fc:52:42:71:b3:0a:f1:19:37:
64:43:51:70:8d:ba:b1:87:49:72:b8:25:dd:fd:c7:83:d2:c3:
bd:ef:f8:52:0c:82:5b:34:83:9e:a9:a5:45:16:e0:0d:d7:ea:
25:16:b5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:35 2026 by rpki-client