Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143785.roa
File: AS143785.roa (raw, json)
Hash identifier: zNqyCoBf26aF8cH41SJmVzRvDGC0PdwzU92drwXUXps=
Subject key identifier: 8B:9B:C7:28:09:5F:BC:42:AB:35:67:C7:F5:2E:05:FA:D8:71:5D:32
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: CBDBCA4A75BEE774BFA181AA179F35496A1A9F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143785.roa
Signing time: Tue 26 May 2026 02:35:26 +0000
ROA not before: Tue 26 May 2026 02:30:26 +0000
ROA not after: Tue 25 May 2027 02:35:26 +0000
asID: 143785
IP address blocks: 240a:a46f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
cb:db:ca:4a:75:be:e7:74:bf:a1:81:aa:17:9f:35:49:6a:1a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:26 2026 GMT
Not After : May 25 02:35:26 2027 GMT
Subject: CN=8B9BC728095FBC42AB3567C7F52E05FAD8715D32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:02:22:90:9a:de:29:97:bc:99:22:3b:94:
f7:07:33:81:26:fb:13:30:11:6b:55:38:19:5e:f7:
4e:b7:ed:55:e4:89:ed:bc:7e:0f:eb:47:39:ea:2e:
86:77:84:f6:da:10:fa:6c:c4:14:21:a6:5a:8b:1c:
87:73:22:e2:82:3e:4e:fe:ae:d0:e0:ce:9c:c4:c4:
91:89:0a:88:2f:e5:e7:fb:26:27:24:a0:c3:b6:dc:
33:e4:39:d5:dc:7a:c3:18:fc:71:07:e8:e0:bf:f5:
fd:96:8d:10:f2:72:f1:5e:47:d6:ac:e3:c0:11:42:
7b:85:ec:1c:a7:0e:7a:d4:ae:46:6f:ae:10:aa:3b:
c1:e2:dd:30:1d:23:f8:fc:c5:d7:48:f0:93:8a:19:
45:87:60:88:42:bf:44:73:fa:b8:7b:61:ba:d4:db:
58:43:74:ce:82:f9:04:02:96:ca:8b:61:5d:81:6e:
c9:5f:c0:a8:06:c4:0f:0f:1e:a3:57:04:f2:f2:ca:
2c:40:fe:81:d7:f6:ea:94:91:a5:04:21:c2:56:c8:
3b:e4:cb:b7:60:7e:5f:5d:82:3b:f1:63:79:c2:d0:
39:b0:e9:3e:c9:80:f7:7c:1a:db:d2:67:59:91:84:
cb:23:6b:dd:33:5c:a4:e2:29:74:ae:42:31:e9:5b:
70:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:C7:28:09:5F:BC:42:AB:35:67:C7:F5:2E:05:FA:D8:71:5D:32
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143785.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a46f::/32
Signature Algorithm: sha256WithRSAEncryption
34:97:65:59:a7:fd:a8:7b:35:f5:68:85:13:68:13:08:0c:e5:
9d:87:31:e0:1e:dc:77:c3:39:31:23:fd:c6:88:08:12:f1:0a:
a6:eb:a8:5e:e4:14:48:db:84:c3:7b:5a:4c:65:d0:64:90:12:
cb:30:dd:75:ed:fd:33:a9:d8:e6:11:09:55:87:e8:5d:a6:c3:
a9:42:80:20:b1:d6:94:5e:ae:db:7f:cb:1c:f9:bc:6b:73:8f:
26:96:48:39:86:2d:32:c0:34:6b:9e:da:53:05:bc:6a:61:9b:
a2:5b:b0:7e:9a:a1:c5:10:80:ff:a5:83:52:9d:8e:86:b8:c1:
7a:60:bb:43:29:73:a6:8a:d4:60:1a:6c:0a:d8:78:57:04:31:
45:07:b6:03:14:be:56:64:90:12:73:ef:a2:37:4b:7f:e2:2a:
eb:cf:85:95:4c:55:4d:10:1c:61:56:4d:75:5d:33:48:59:6c:
77:5d:13:f7:08:05:12:52:b3:65:7a:7a:e2:d5:84:64:b5:83:
c3:fe:08:b1:a3:39:b3:98:8e:2a:b5:66:cb:33:68:fb:17:6d:
4d:93:37:dc:dc:95:4e:1a:0a:46:b7:10:69:f9:80:cd:30:04:
04:57:66:e2:39:94:69:9e:4e:c0:f1:54:05:54:4f:2e:64:ef:
7b:22:7f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:09 2026 by rpki-client