Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143790.roa
File: AS143790.roa (raw, json)
Hash identifier: TOdj1PhmuMB+3PpDkQWlJZyTEJbBtOMmvPFWTUx0QTU=
Subject key identifier: 45:1B:5A:25:0D:AD:18:C9:B2:B8:A5:C0:68:5C:2B:D4:48:FE:0F:48
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3EACEF0F682924EAAB0AE7F9269C26E430754E83
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143790.roa
Signing time: Fri 22 May 2026 07:40:43 +0000
ROA not before: Fri 22 May 2026 07:35:43 +0000
ROA not after: Fri 21 May 2027 07:40:43 +0000
asID: 143790
IP address blocks: 240a:a474::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:ac:ef:0f:68:29:24:ea:ab:0a:e7:f9:26:9c:26:e4:30:75:4e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:43 2026 GMT
Not After : May 21 07:40:43 2027 GMT
Subject: CN=451B5A250DAD18C9B2B8A5C0685C2BD448FE0F48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2c:5d:10:2b:40:c2:6b:d5:10:ed:db:e0:f1:
0d:79:44:96:e8:5b:ea:9a:78:25:8a:5c:c6:1e:be:
dd:c5:a8:49:5f:a0:1a:a7:5b:a8:dd:14:61:70:17:
2b:eb:13:47:06:58:98:52:2b:72:f6:6a:18:13:6f:
d4:57:f4:74:e0:19:62:71:27:4a:76:dd:5f:e8:39:
59:5d:eb:d4:bc:25:36:ec:08:41:61:0e:8b:9e:88:
18:4a:c7:75:44:f5:2a:af:e2:a3:9f:1c:45:c3:4b:
b9:4b:f7:b5:cc:66:dc:1f:ea:e8:2b:53:9d:ac:a2:
ce:7e:fb:80:59:88:49:14:ad:20:0b:05:b8:5c:cb:
3a:e8:ec:bd:f5:dc:9a:e2:11:e8:d8:b8:79:22:76:
c9:59:ec:fd:f0:9d:1f:db:d1:0d:00:2a:80:49:a5:
20:47:80:75:14:c2:59:6f:ed:f5:06:2d:d6:4d:21:
c4:fc:0f:5b:bd:46:ee:25:2a:77:77:1f:4d:a2:18:
f5:4c:19:2c:b9:2f:e4:ed:1f:23:18:60:2c:c5:4f:
47:0d:94:53:64:44:12:53:e8:b0:ca:fc:d7:1c:e2:
4b:f9:a3:94:1f:73:01:4f:c9:4d:c4:b5:2a:10:be:
d6:03:29:0e:3f:5c:e1:37:91:cb:03:f9:a8:37:0d:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1B:5A:25:0D:AD:18:C9:B2:B8:A5:C0:68:5C:2B:D4:48:FE:0F:48
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143790.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a474::/32
Signature Algorithm: sha256WithRSAEncryption
80:81:65:14:19:06:58:f2:a1:c1:eb:13:c6:9d:ed:2f:41:b0:
56:f4:12:67:4e:5a:29:36:b7:4c:c4:a6:f7:75:38:50:cf:f6:
51:c4:f3:7e:b5:54:18:87:f8:cf:02:17:bb:67:44:48:cf:c2:
1d:d0:82:a0:1f:cd:de:c3:23:cc:2c:44:ba:20:48:34:b0:ab:
a8:cd:0a:09:5b:1c:c3:9a:a0:0b:b0:14:ea:00:73:c4:97:3f:
b3:cf:5a:d4:f9:27:be:f5:cb:cb:c3:6a:ff:3d:52:f1:26:46:
2d:8c:69:1c:9f:05:dc:0a:fb:22:c7:b8:61:e2:3f:fe:a1:6c:
23:97:ca:62:0b:8c:5f:2a:d6:f4:66:dd:32:54:78:b0:29:56:
bd:0a:4b:d1:e2:4b:db:41:c4:73:8f:c5:c0:c7:99:f5:40:81:
8c:5b:a4:41:f9:b8:4b:73:38:16:f6:a6:7c:24:68:0c:37:32:
95:34:59:ba:98:27:bb:3a:97:c9:ff:fe:4d:77:d8:ee:90:16:
76:f0:6c:c8:73:f8:66:e8:15:d1:7d:9e:9b:ec:9b:fd:e4:77:
7c:7b:29:51:1a:1c:80:24:f2:a9:aa:b2:3a:97:33:51:9c:21:
85:60:b6:d5:33:dd:66:09:72:9f:c9:71:a7:1f:58:c3:fb:a1:
aa:c7:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:55 2026 by rpki-client