Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143768.roa
File: AS143768.roa (raw, json)
Hash identifier: u8KrDFXH1GYXgh5zLlqjmmQO5hPX1c5kw1A+qYUf9Rw=
Subject key identifier: D7:02:21:14:07:D0:A7:D4:7F:A3:15:5E:32:0C:B0:3A:BE:BD:DF:B5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5179CCFD15FD737B52AD77CFC04CBF5BF231663A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143768.roa
Signing time: Fri 22 May 2026 04:26:41 +0000
ROA not before: Fri 22 May 2026 04:21:41 +0000
ROA not after: Fri 21 May 2027 04:26:41 +0000
asID: 143768
IP address blocks: 240a:a45e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:79:cc:fd:15:fd:73:7b:52:ad:77:cf:c0:4c:bf:5b:f2:31:66:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:41 2026 GMT
Not After : May 21 04:26:41 2027 GMT
Subject: CN=D702211407D0A7D47FA3155E320CB03ABEBDDFB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:14:a4:52:15:b1:48:50:14:bd:01:43:95:
25:62:34:e2:cb:c6:87:d4:b8:06:9b:82:f1:5b:57:
9b:92:47:f6:8b:8d:cf:a2:37:4e:1e:6b:b9:6e:86:
a7:64:a2:ff:e2:27:e5:54:75:77:ea:c9:57:15:1b:
4e:e8:b5:b7:2c:e9:37:77:cf:4d:6a:1c:2b:ab:f2:
70:b3:90:ec:50:a5:11:23:53:9a:63:63:d1:c6:01:
b2:36:0b:d2:9b:ef:b0:d2:af:72:f0:c1:65:6c:f6:
0c:49:20:73:ef:a8:17:c0:c1:91:df:6c:6c:cd:45:
f3:e2:8a:cb:88:7a:6e:27:38:4d:cd:19:09:b4:f0:
81:11:2c:aa:71:4e:d1:5a:28:3c:f4:39:bd:2e:e9:
c4:5e:7c:a8:6d:29:eb:71:9e:f6:33:88:bc:90:c8:
2b:81:39:ab:12:e3:28:55:72:90:1d:c7:b3:95:f7:
a4:f3:fd:b0:e7:22:17:a1:7f:b0:3c:0e:f4:b7:b3:
64:37:a7:7d:55:d6:b1:1e:2f:35:fd:f4:06:45:72:
71:e7:63:1a:9f:9b:63:56:c0:01:af:c3:e0:1a:67:
4a:01:86:62:69:2f:1c:24:39:78:da:2d:f3:70:48:
31:b1:4a:ac:98:80:46:14:05:b7:1d:75:8e:d3:52:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:02:21:14:07:D0:A7:D4:7F:A3:15:5E:32:0C:B0:3A:BE:BD:DF:B5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a45e::/32
Signature Algorithm: sha256WithRSAEncryption
4d:14:c2:aa:63:e1:40:19:60:3b:b0:2c:86:36:4f:76:b8:d1:
52:70:c8:51:b3:42:6e:e4:83:bd:e7:99:f8:d5:79:97:e5:73:
f7:ad:5a:b4:05:89:57:e0:c6:9a:ef:5c:d1:10:85:d7:fd:54:
91:75:ee:6d:cb:c9:3e:e1:45:5c:34:e2:aa:48:2f:3f:4f:10:
f8:3f:92:01:e3:81:d1:ae:b5:ac:14:fd:0e:3c:c9:fb:0e:21:
a6:f2:c6:16:70:22:da:d2:33:25:99:f6:3c:8e:4d:90:cd:98:
bc:f0:3e:0a:4a:50:b6:da:15:1f:f3:13:55:46:bd:1c:98:fe:
c2:2e:ee:84:2a:db:de:94:82:a5:6e:bf:ae:83:1e:8e:1f:33:
34:c0:ba:e7:21:01:a1:2c:62:8d:c6:b7:ce:16:a3:28:92:05:
88:bd:6a:c0:89:33:f2:a7:61:30:f7:9f:ed:ce:2e:aa:92:6c:
58:f6:0f:eb:9b:61:e1:be:17:7a:ad:b9:cd:f7:b0:a0:a4:67:
8b:2f:69:e2:ab:b4:bb:3c:f4:22:12:f3:04:22:90:cc:ec:49:
48:47:b5:1a:ab:27:b1:ce:be:ea:2f:c5:ca:4a:58:5f:ac:4d:
c7:78:f9:8f:51:22:f1:ab:84:9b:52:82:98:9d:9c:08:77:e0:
39:c1:df:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:20 2026 by rpki-client