Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143767.roa
File: AS143767.roa (raw, json)
Hash identifier: WYHca7RSQokIw+onsvlk34bVOU0+AHS3GvecbPpvG8o=
Subject key identifier: 0E:F4:3D:C5:50:47:00:1D:9C:69:62:1D:16:93:A2:CD:27:85:22:41
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 42ABFC07F4648E759FE1C06CDF1F7BFC916799E2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143767.roa
Signing time: Mon 25 May 2026 06:49:11 +0000
ROA not before: Mon 25 May 2026 06:44:11 +0000
ROA not after: Mon 24 May 2027 06:49:11 +0000
asID: 143767
IP address blocks: 240a:a45d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ab:fc:07:f4:64:8e:75:9f:e1:c0:6c:df:1f:7b:fc:91:67:99:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:11 2026 GMT
Not After : May 24 06:49:11 2027 GMT
Subject: CN=0EF43DC55047001D9C69621D1693A2CD27852241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:6c:58:97:d8:3c:6e:a7:0b:f3:dd:7f:13:
ec:50:cf:fc:0b:50:a3:a7:76:c0:98:37:76:f9:07:
69:22:0f:74:b5:88:f2:00:68:6e:f1:aa:3d:27:35:
86:2f:37:09:59:d7:11:db:ad:da:9b:ea:68:09:db:
13:a0:f5:91:60:71:9a:7d:a5:71:39:5d:5d:2c:fc:
f2:f9:ea:61:4f:69:e8:61:37:d4:68:40:15:4c:85:
41:4a:4e:3c:48:61:50:9e:58:c7:ba:20:60:89:0e:
ed:e3:32:86:79:22:2b:92:de:67:0a:8e:45:bf:0f:
23:9e:2c:ae:da:e1:7b:68:a3:9c:7d:dd:29:cc:e5:
c5:4e:89:04:bf:47:e7:5a:f2:6e:79:51:85:2e:e7:
f1:68:72:10:99:07:ab:79:ae:ac:b6:a5:d3:6e:c1:
01:4f:8c:4b:21:6e:61:08:51:fb:46:18:49:73:37:
28:b2:cf:cb:f6:45:a4:ac:be:c3:3f:65:c7:2a:e6:
aa:d6:4b:58:5c:03:ba:5d:18:a0:e0:9f:33:d5:59:
ff:c5:c6:60:6a:2b:40:0d:5d:f3:d3:13:e8:c6:47:
fc:9d:02:a8:c2:e5:71:70:34:f7:dd:b2:1d:d8:4a:
e6:c4:5b:84:9c:5d:23:b9:89:ca:d3:15:09:13:34:
dc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F4:3D:C5:50:47:00:1D:9C:69:62:1D:16:93:A2:CD:27:85:22:41
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143767.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a45d::/32
Signature Algorithm: sha256WithRSAEncryption
84:ae:4d:ad:94:7f:64:e9:93:d4:56:9c:ec:e0:94:a6:7b:3c:
86:b4:2c:7d:57:50:34:d3:90:40:36:eb:06:06:ee:67:9a:7b:
9f:d1:9d:96:8d:ff:51:da:78:21:57:f3:8c:5d:16:9b:66:43:
44:20:aa:43:49:7d:d1:16:f0:5b:7f:d9:28:87:a4:94:ca:fa:
41:0b:65:75:6e:06:1c:29:6e:28:56:7d:aa:23:bd:1d:d4:70:
b5:f6:13:d9:96:2c:3e:85:01:1f:7b:cb:94:55:12:4d:69:cd:
4c:d7:7c:71:35:56:51:f1:bb:e7:de:81:0c:ce:dd:5b:0b:23:
ee:c0:82:05:dd:1b:99:c3:12:c8:8c:0c:8b:d7:7a:a1:55:8f:
c9:ce:61:61:e1:ba:3a:3e:f5:23:0b:3b:e3:a5:ed:c5:d6:f2:
9f:24:48:d3:b9:bd:53:fd:6a:2f:1b:4f:79:e4:a6:34:28:a5:
40:34:ed:20:5d:5a:e3:d9:15:32:d4:0f:99:27:a5:31:f1:eb:
84:d6:41:23:6a:22:d6:96:a4:61:87:76:80:e1:2f:9f:25:92:
f1:3f:4e:5e:5e:83:30:6c:c4:e4:37:3c:c5:e5:09:2f:75:59:
ab:01:1b:2e:79:5f:c4:d8:4b:af:77:5b:e9:0b:f5:d2:79:41:
30:ec:f0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:40 2026 by rpki-client