Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143805.roa
File: AS143805.roa (raw, json)
Hash identifier: HoeuH3smDjWEPXvmQEdgFRqUyUcB6SXEsuD5S7qlYEk=
Subject key identifier: 43:3A:3C:7F:27:FB:B6:3F:73:AC:54:91:BD:DE:D4:D3:C6:66:27:EE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 444479BCA653103EEE3FF72190006722EC0C23EF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143805.roa
Signing time: Fri 22 May 2026 01:50:28 +0000
ROA not before: Fri 22 May 2026 01:45:28 +0000
ROA not after: Fri 21 May 2027 01:50:28 +0000
asID: 143805
IP address blocks: 240a:a483::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:44:79:bc:a6:53:10:3e:ee:3f:f7:21:90:00:67:22:ec:0c:23:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:28 2026 GMT
Not After : May 21 01:50:28 2027 GMT
Subject: CN=433A3C7F27FBB63F73AC5491BDDED4D3C66627EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:5a:4e:b9:7b:c9:d4:5f:0c:d5:61:1b:d8:
a2:84:dd:f0:a7:2a:98:a3:aa:a5:a0:51:73:82:f7:
bd:2f:c4:76:1c:83:70:6e:a0:6d:3b:9a:58:b8:d8:
39:d5:ef:c7:6d:30:4a:4a:6f:27:3b:80:b7:c6:e5:
45:a5:79:01:04:c4:22:55:de:70:aa:b7:73:e2:1e:
41:3c:fc:e0:4c:62:ee:6a:c5:3e:36:da:7f:fa:17:
39:57:4a:a6:af:ec:a1:62:7a:b9:6f:05:6b:8d:f9:
5a:87:a1:16:b0:c7:e9:32:fd:f4:da:ee:d1:bb:54:
59:46:86:1e:ba:81:9d:9d:6a:ec:e2:25:04:e9:ff:
fb:8e:f3:9d:71:94:33:49:3a:87:b7:f5:60:7f:2b:
5e:c5:78:6e:2a:14:aa:fc:de:e7:61:8f:f9:bb:d4:
a4:ca:39:18:fc:6a:84:5e:5e:c4:97:88:e1:c3:64:
b1:6f:b0:58:2d:02:69:5e:0c:c1:f2:d8:2a:a4:8e:
f0:de:20:b4:ba:43:c9:de:10:56:5c:52:cb:c3:b1:
d9:8f:a8:3c:e3:45:9c:f8:67:59:41:b5:92:1b:ab:
6f:60:f5:59:5e:26:9c:20:aa:0b:c7:77:46:2f:9d:
7a:50:51:7d:3f:f2:db:61:e7:d2:9f:0d:0d:54:14:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3A:3C:7F:27:FB:B6:3F:73:AC:54:91:BD:DE:D4:D3:C6:66:27:EE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143805.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a483::/32
Signature Algorithm: sha256WithRSAEncryption
bc:bc:09:25:f7:5f:b2:47:6c:cb:44:8f:9d:4c:ce:d9:d6:34:
91:37:1d:4d:0e:8c:a9:ee:5e:42:4c:00:c1:0a:69:a6:3a:57:
0e:8d:c8:80:4d:4e:2b:61:42:1f:68:fb:a9:38:c5:d2:11:e4:
b8:ff:31:4e:da:c8:90:17:5b:24:b6:11:b6:bc:a8:2d:c8:08:
f1:5b:83:2e:97:f7:32:7c:80:90:ab:3f:bb:38:81:be:33:de:
0c:ff:b2:4e:7d:39:1e:19:d4:52:a3:ec:ca:17:13:8d:68:1a:
17:4b:52:e6:72:42:b1:f7:94:c7:13:70:66:87:3b:e8:01:a7:
72:05:1f:93:9d:1b:07:bb:86:df:52:5d:5d:10:e7:81:34:4f:
e1:5b:80:09:32:1e:4d:ca:99:2f:8e:6c:33:40:db:12:0a:53:
f0:eb:fe:bd:ab:6e:7a:92:ce:4c:59:ee:0d:54:10:0f:79:29:
69:a7:62:5d:b1:05:a1:05:2b:40:43:d0:09:63:b0:48:7b:6b:
4d:09:3d:af:d6:31:0c:ff:3d:e0:c5:c8:d0:f7:c6:df:79:e4:
27:63:69:9e:4e:f7:f8:79:3e:8a:e2:52:c4:cb:90:51:cb:1b:
4b:59:75:a6:7e:d6:a2:1e:3d:cc:04:90:ff:2e:75:90:08:e2:
70:b0:13:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:05 2026 by rpki-client