Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143778.roa
File: AS143778.roa (raw, json)
Hash identifier: LOhlP1faHQXNMjjPcmLLJoPBrmIze2l72TD+6f85YNc=
Subject key identifier: 34:27:B3:FE:15:51:B5:DD:C7:EF:7C:3C:39:E3:14:94:77:35:3F:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 707D4D09DEEE26F538BC8138AB3E328BA8C54B6C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143778.roa
Signing time: Tue 26 May 2026 01:13:10 +0000
ROA not before: Tue 26 May 2026 01:08:10 +0000
ROA not after: Tue 25 May 2027 01:13:10 +0000
asID: 143778
IP address blocks: 240a:a468::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:7d:4d:09:de:ee:26:f5:38:bc:81:38:ab:3e:32:8b:a8:c5:4b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:10 2026 GMT
Not After : May 25 01:13:10 2027 GMT
Subject: CN=3427B3FE1551B5DDC7EF7C3C39E3149477353F85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:b8:06:3f:dd:c6:0f:7c:20:8b:05:89:4f:
6b:5d:e8:79:4b:92:3f:cc:d9:10:ce:91:c3:22:de:
58:e1:62:ab:20:fc:22:a5:23:cf:2c:32:1a:e0:4a:
cc:7b:02:36:a5:ab:9f:07:98:41:7c:74:76:68:d2:
2f:15:93:79:f9:22:85:79:ce:49:9c:c5:26:c8:32:
b8:23:e1:72:e0:f8:e2:a4:df:db:f0:cc:b5:d4:84:
fe:d8:28:22:78:2f:f4:3d:fa:b9:ac:27:db:c6:45:
f6:b1:bb:fe:0f:7d:8a:23:f1:83:32:c4:31:e2:88:
8c:8d:32:d4:dc:ed:b9:df:26:1c:91:21:2d:d2:97:
f7:59:0c:45:4a:10:ca:86:f2:d7:e8:03:b0:27:22:
b3:3e:7e:8a:e2:9c:ad:19:07:91:6f:6d:c4:ef:19:
eb:a2:90:62:e6:a4:92:aa:87:5e:cd:56:20:2d:54:
95:a6:b8:0c:58:2a:5e:a3:9f:e7:4b:27:e7:f8:6e:
89:26:e3:5b:99:64:94:b2:af:06:ef:d0:fb:3a:b9:
73:45:f8:88:4d:ae:a7:a0:18:1c:a6:63:42:68:90:
65:0c:63:e8:f5:a3:29:64:56:20:73:14:f4:83:15:
46:0a:d2:c6:65:0e:b3:ba:45:ee:52:72:b5:06:68:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:27:B3:FE:15:51:B5:DD:C7:EF:7C:3C:39:E3:14:94:77:35:3F:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143778.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a468::/32
Signature Algorithm: sha256WithRSAEncryption
5a:fe:7f:b4:31:34:5f:53:fa:3f:f6:b7:3a:49:d0:fb:c9:d1:
7e:66:1d:2d:ea:58:a2:68:e7:a4:35:5f:21:2c:ba:a2:af:99:
cf:e5:80:62:ff:be:6c:0b:bc:ae:31:48:6a:51:25:93:0a:8d:
75:ba:c8:4a:a4:90:74:4d:a4:5c:da:08:cc:0c:20:53:92:a9:
bf:12:12:c3:98:df:57:0b:01:9e:9e:e4:1f:5a:80:b7:c3:02:
b3:06:05:48:49:5b:c9:3e:9f:5f:58:74:ab:2f:00:f0:40:29:
d1:69:e7:55:c6:d5:44:2a:b6:8b:c1:9c:53:0f:6b:b0:be:a2:
60:31:38:29:f7:2b:34:b8:b5:3c:ff:2e:e5:61:fc:59:a0:3a:
41:32:b6:a8:ae:12:5b:87:c9:b0:89:56:d2:fa:3c:ca:1d:07:
37:78:be:5f:72:25:2d:3d:9a:b0:53:3b:10:db:93:c2:38:3f:
02:53:9f:e0:cb:6b:ca:c9:47:ae:8a:da:c7:3d:b3:78:bb:88:
f7:db:6e:06:fe:fa:5b:36:af:8e:de:c8:ca:b9:11:1e:38:00:
bb:8c:ab:c0:da:a2:1a:1a:bb:00:54:e3:0d:de:42:bc:3d:24:
e2:35:c1:05:23:9f:80:a3:b0:db:38:c9:80:5d:5e:30:ac:ab:
bb:9a:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:52 2026 by rpki-client