Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143775.roa
File: AS143775.roa (raw, json)
Hash identifier: n6mC3Q/oddTLeYNUuRLGk30wA/AaYJmhYi2gsPWgpjQ=
Subject key identifier: B6:23:6D:4C:42:6D:5A:45:B4:D1:0E:E5:36:27:F5:23:6F:8D:82:5D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D90DBE5AFADE33D94E04C6E8B1466BC36AD4580
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143775.roa
Signing time: Tue 26 May 2026 03:17:13 +0000
ROA not before: Tue 26 May 2026 03:12:13 +0000
ROA not after: Tue 25 May 2027 03:17:13 +0000
asID: 143775
IP address blocks: 240a:a465::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:90:db:e5:af:ad:e3:3d:94:e0:4c:6e:8b:14:66:bc:36:ad:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:13 2026 GMT
Not After : May 25 03:17:13 2027 GMT
Subject: CN=B6236D4C426D5A45B4D10EE53627F5236F8D825D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:31:33:f0:32:eb:25:32:c6:d9:6a:25:e1:
cf:d6:e7:54:27:c5:30:43:cf:24:cd:cf:8f:e0:46:
72:03:70:d0:7a:de:bd:8f:fd:e6:55:6f:a6:63:0b:
6a:14:bb:4e:65:1d:10:6b:70:45:d9:35:50:91:ec:
fb:53:4a:b2:b6:b9:b0:db:73:68:b6:fe:ed:15:07:
2e:d8:41:ae:8b:de:ac:de:99:fd:8b:20:4e:51:c9:
38:f7:79:44:c7:35:89:00:34:07:d9:13:f8:ce:d3:
3b:c3:33:1d:5e:50:6f:fb:fb:6a:3f:6c:da:90:44:
57:c2:59:c0:e9:b1:0c:1c:28:10:5c:3f:1c:bf:5e:
c6:f1:a7:d9:ac:ad:dc:90:a0:41:c8:9b:da:ff:78:
50:e9:f1:f3:6b:c0:ed:34:11:e3:9f:57:5d:c4:78:
7f:e2:a7:2c:52:28:f4:6f:c5:c3:ae:49:02:4b:34:
59:0e:1f:f5:01:5f:6e:06:cb:e5:4f:5b:f9:ab:51:
7d:90:12:fc:b7:b1:18:c8:0a:95:3c:bb:41:af:26:
ea:18:41:49:21:5c:81:4d:42:a1:f1:10:c0:4f:fe:
07:b0:59:24:5d:4f:8a:cb:d3:81:56:7a:f5:89:94:
e8:99:9c:9b:1e:69:75:62:62:cc:35:ff:7b:ae:36:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:23:6D:4C:42:6D:5A:45:B4:D1:0E:E5:36:27:F5:23:6F:8D:82:5D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143775.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a465::/32
Signature Algorithm: sha256WithRSAEncryption
26:d4:ad:11:34:23:c9:b3:f8:65:51:b4:e6:f4:43:b3:56:4f:
33:a5:a2:ee:2c:af:b5:a5:12:47:32:70:0a:44:95:55:9c:46:
9a:2f:a2:28:7a:50:ff:33:c9:dd:13:95:b8:5f:6d:0c:f8:6c:
06:9a:59:86:6b:14:a9:63:d5:9c:c2:30:54:14:82:f3:50:e4:
7a:f2:a7:22:80:8c:d2:28:b0:62:ac:60:36:b9:c8:fe:d1:29:
5f:7c:5a:fa:58:8a:8e:d8:a7:0c:f8:16:57:49:80:e7:55:10:
cd:0d:51:92:fc:96:99:cc:de:a4:87:6c:52:52:33:52:ca:b3:
46:6e:e2:3f:bf:8f:42:1d:e6:60:a2:74:f9:e4:bb:4d:cb:89:
80:de:12:dc:0c:e7:f9:27:db:4f:be:96:4b:0d:34:e1:0d:fa:
cc:1a:ff:3b:9a:49:a1:57:da:12:fd:d4:67:fe:4a:04:45:5d:
1e:fb:c6:df:9e:19:11:b5:85:df:84:48:6c:b3:9f:b9:8b:7a:
d2:bf:c4:5c:a4:15:48:3d:67:37:87:47:f0:78:1b:b4:a4:ef:
69:2c:56:64:c4:67:da:d2:b7:04:30:46:ab:5a:30:ec:5d:62:
70:c2:bc:15:a4:a1:44:17:83:89:48:fc:bd:e5:42:33:14:8f:
10:40:31:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:55 2026 by rpki-client