Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143791.roa
File: AS143791.roa (raw, json)
Hash identifier: tXWL6x53zTENHm+Toblkkdmm+B/I9MAUdaxA4ug8Snw=
Subject key identifier: 6A:DF:FF:FC:F2:B4:1B:A5:10:73:80:F6:DA:D0:96:0F:57:72:02:05
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B377F3D33F911562B2732CD64663000488BC55E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143791.roa
Signing time: Mon 25 May 2026 06:48:52 +0000
ROA not before: Mon 25 May 2026 06:43:52 +0000
ROA not after: Mon 24 May 2027 06:48:52 +0000
asID: 143791
IP address blocks: 240a:a475::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:37:7f:3d:33:f9:11:56:2b:27:32:cd:64:66:30:00:48:8b:c5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:52 2026 GMT
Not After : May 24 06:48:52 2027 GMT
Subject: CN=6ADFFFFCF2B41BA5107380F6DAD0960F57720205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:32:70:94:3c:3a:d3:27:1e:1b:d7:64:f3:
a6:70:99:44:55:7d:4d:a4:de:ea:ae:22:fa:10:16:
23:96:ae:de:59:fe:8d:8d:1a:cb:54:8a:b4:c0:42:
03:92:ad:88:07:0b:99:1f:33:17:9e:76:98:a6:88:
62:a7:1e:73:25:2c:c9:07:9a:e0:fa:ac:31:47:e3:
f3:78:5e:3e:b5:95:ac:bf:b1:f1:52:e9:f1:c9:ae:
4a:bc:65:43:53:cb:f0:dd:1d:6c:f0:32:0d:57:84:
b8:54:99:33:85:58:bb:c7:cd:b7:5b:f8:94:b2:4e:
86:40:9c:55:66:fa:ae:32:e0:be:ee:bd:85:80:d5:
b6:80:d5:a1:03:c6:ff:93:0b:53:c1:4a:84:95:8c:
33:65:af:7e:20:8f:5e:87:37:f0:09:bd:aa:21:87:
0f:66:40:31:00:51:98:75:2b:3e:c9:aa:fd:d8:75:
10:7f:a5:28:53:f8:37:d9:2b:5a:ea:32:92:68:e2:
0f:c5:aa:89:cb:90:3b:d6:e1:21:22:24:d0:32:29:
20:b3:59:54:c6:82:4c:47:66:e9:2d:97:2d:82:3c:
27:d6:d4:78:bb:36:13:46:7c:3c:0d:7b:d2:63:e4:
3e:d1:97:78:c2:a3:72:61:a9:e7:7f:3c:4c:2d:1e:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:FF:FC:F2:B4:1B:A5:10:73:80:F6:DA:D0:96:0F:57:72:02:05
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a475::/32
Signature Algorithm: sha256WithRSAEncryption
27:5a:31:4b:bc:73:8b:d4:39:d0:4d:4c:25:38:d3:94:f8:a5:
55:87:c8:f3:cd:8f:62:11:c9:e6:72:e5:45:4a:30:c6:0e:db:
fe:93:fd:3c:65:f8:a2:da:45:1e:40:16:ae:c6:9c:38:79:4f:
8b:d8:4a:0f:fe:30:08:12:0e:5d:13:ea:0c:47:fb:cc:19:f8:
2c:05:10:29:7b:28:c7:3b:bf:88:47:8a:3b:ba:7d:1f:50:5e:
74:d7:97:f5:27:3f:af:83:84:15:1e:05:8a:8f:87:db:92:ae:
e9:46:d2:2e:4b:16:98:3b:db:12:d1:e0:0f:fb:5f:c8:ca:ca:
8a:32:c2:cf:2f:5c:f2:94:e5:6a:af:17:bf:f4:a0:6a:c2:88:
ad:60:0f:23:2e:37:c8:5d:8e:2c:43:08:f4:8a:ca:2c:4f:d9:
6e:7c:cd:34:fa:0d:b8:ec:ab:d4:8c:64:1c:55:87:7c:75:eb:
7a:d7:7d:1a:97:06:a2:46:e4:82:81:34:27:4b:e2:25:ea:76:
9a:61:8f:ff:01:7a:4a:3c:aa:5b:ad:28:2f:a0:77:22:9a:8b:
39:ff:68:24:a7:14:ad:b3:a8:ce:d1:0b:5f:84:ac:96:38:12:
5a:51:3f:ef:84:4d:ed:d9:81:8b:da:89:9e:e5:2d:53:ed:b3:
87:96:fd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:44 2026 by rpki-client