Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143772.roa
File: AS143772.roa (raw, json)
Hash identifier: UgmfWL1oMVTxd67LrhFg+Wywdy26mtpBzV5lTmIfKvU=
Subject key identifier: 81:7E:0C:4D:1C:F3:31:46:A9:D7:C0:46:B8:8A:6A:03:29:6C:DE:67
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 23C0432DE880AFD9D6FB1EE034D28160A06A4CD4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143772.roa
Signing time: Mon 25 May 2026 02:22:23 +0000
ROA not before: Mon 25 May 2026 02:17:23 +0000
ROA not after: Mon 24 May 2027 02:22:23 +0000
asID: 143772
IP address blocks: 240a:a462::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:c0:43:2d:e8:80:af:d9:d6:fb:1e:e0:34:d2:81:60:a0:6a:4c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:23 2026 GMT
Not After : May 24 02:22:23 2027 GMT
Subject: CN=817E0C4D1CF33146A9D7C046B88A6A03296CDE67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:30:f8:ff:2c:7f:9f:1a:cf:6c:63:e4:ce:
19:7a:d9:23:a4:ed:b6:77:dd:39:2c:c7:5c:11:ca:
05:fc:b3:96:9b:28:41:28:a4:09:30:a4:ea:35:fc:
27:c3:c5:8b:40:b1:0d:e6:d7:70:3a:11:1d:b8:db:
9a:ac:38:a8:c8:10:cd:f4:33:a8:fd:80:9a:c7:77:
30:06:3f:88:c6:46:d8:2d:f2:44:70:ad:bb:11:a4:
e6:18:36:fb:84:59:a1:a1:2c:3b:97:c4:f7:f1:e1:
2e:23:4e:a5:9b:b2:77:ea:3c:0a:a9:f7:d3:f6:8a:
f0:ed:be:c5:b8:40:91:65:80:dc:33:1a:b8:47:7f:
07:6b:a4:15:92:c1:d5:92:58:1a:36:d4:09:ad:0d:
73:91:cc:7e:4e:51:2f:9b:0d:90:dd:17:fc:47:2d:
53:5f:47:a5:2e:8d:02:46:58:5e:e3:d4:fe:13:9b:
06:08:2e:c8:42:ab:f0:47:f8:be:9a:db:4c:de:0e:
15:00:8f:29:09:fe:cf:04:84:5a:6f:47:bc:cf:88:
a0:4b:da:29:34:45:50:78:c6:00:34:27:90:cf:0e:
1e:28:0d:a5:5c:3f:e1:c9:e1:b9:a4:81:fe:7a:d4:
37:57:f1:a3:f1:79:20:d6:7f:3b:d7:73:97:d7:1c:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7E:0C:4D:1C:F3:31:46:A9:D7:C0:46:B8:8A:6A:03:29:6C:DE:67
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143772.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a462::/32
Signature Algorithm: sha256WithRSAEncryption
a9:ea:f9:6e:0f:57:f0:4e:a1:da:48:18:5e:86:f8:55:ea:aa:
0d:3f:c2:21:13:b9:87:f2:f8:79:9c:f6:99:9b:f4:ec:54:9a:
d8:8c:34:9d:1c:85:3e:28:38:a2:61:63:37:e7:d3:be:de:ab:
e9:e8:a9:b6:ad:12:0d:48:99:fe:84:c9:78:30:6e:04:79:e3:
ec:b4:c9:1d:6f:a5:75:2d:fb:61:ab:de:d2:dc:c7:ee:45:33:
1d:5f:d1:ed:54:7a:68:1b:30:8f:44:4a:a0:55:3e:1d:ac:4d:
4c:20:28:bf:b5:9e:77:92:31:b1:c6:d5:da:bf:34:c4:08:0a:
e9:f8:fc:a0:55:82:4a:99:69:a3:81:4c:38:5f:e6:37:08:fb:
29:1f:34:d2:30:33:4f:82:e6:75:62:32:2e:81:cf:24:a1:86:
a5:c7:6b:e0:0d:d6:4d:3d:e5:18:79:20:db:d5:e9:e1:bf:68:
20:bb:83:f3:78:a0:a2:f3:ef:57:ed:37:6a:de:37:ff:cb:03:
89:52:5c:94:a5:55:ab:dd:93:2e:7a:e6:94:9b:6b:dc:c7:cf:
8d:dc:29:78:df:cc:54:10:52:f9:83:9d:d4:d9:a7:e0:d4:3e:
fd:c4:da:7c:4b:e6:cf:7f:25:95:58:d4:46:af:6a:99:a3:66:
62:26:fd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:55 2026 by rpki-client