Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143807.roa
File: AS143807.roa (raw, json)
Hash identifier: PmWbHJ7iLWVGKsgqLkE6jLuvGSEz0s5I1y1mMENk0iM=
Subject key identifier: 38:55:C1:1A:E4:BD:E7:E1:E9:4E:5D:B5:E7:75:BA:94:D5:E6:C3:EE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4A38E31DDB1E36177C83B2D0E569EFC8F9E43E14
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143807.roa
Signing time: Fri 22 May 2026 06:27:43 +0000
ROA not before: Fri 22 May 2026 06:22:43 +0000
ROA not after: Fri 21 May 2027 06:27:43 +0000
asID: 143807
IP address blocks: 240a:a485::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:38:e3:1d:db:1e:36:17:7c:83:b2:d0:e5:69:ef:c8:f9:e4:3e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:43 2026 GMT
Not After : May 21 06:27:43 2027 GMT
Subject: CN=3855C11AE4BDE7E1E94E5DB5E775BA94D5E6C3EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:b0:67:17:a5:3e:7e:f4:7b:51:14:25:77:
05:af:ee:17:76:bb:38:db:42:5a:8e:44:22:d5:d6:
c0:5a:b8:9a:92:f6:5d:26:36:cc:9f:3f:10:9f:da:
86:3c:ae:12:d6:9d:f7:92:f1:35:ed:1d:dd:31:7c:
bd:4b:53:15:ba:86:69:c6:60:90:2e:e5:30:fe:1c:
b7:ce:5b:e7:ed:3c:bf:92:b1:ab:57:a6:c6:08:93:
9e:c8:7f:bc:9d:b6:95:df:84:ed:78:1e:4b:b4:ed:
8c:47:ba:ee:52:1e:50:78:e2:e2:67:ce:aa:24:3b:
af:d6:8d:b5:b8:09:99:be:7d:f9:39:fd:0a:de:6e:
b5:79:bc:e6:66:26:d6:d8:22:4f:90:45:b7:f7:68:
d0:be:7f:21:6e:b5:84:08:69:ac:70:2d:1a:8f:a0:
31:94:82:60:40:cf:3b:74:6d:6e:e1:42:1b:99:80:
c7:58:62:cf:f1:24:b7:68:ba:0b:12:e1:fc:de:8e:
2a:ad:52:c9:57:dd:d9:42:24:e7:d0:1c:b3:7e:62:
34:b5:2c:e8:36:92:3c:24:10:ac:65:42:0d:49:08:
df:81:04:38:bb:39:8d:fa:b2:e0:f4:35:52:21:2b:
0e:30:64:77:e1:fc:6f:10:8d:eb:46:d0:74:31:ff:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:55:C1:1A:E4:BD:E7:E1:E9:4E:5D:B5:E7:75:BA:94:D5:E6:C3:EE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143807.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a485::/32
Signature Algorithm: sha256WithRSAEncryption
9d:83:93:af:65:ed:fc:5a:fd:6a:47:8f:0b:2a:05:cb:cc:df:
25:fa:79:06:18:1d:0d:67:cb:30:7d:4c:2a:d1:fe:b2:4a:07:
83:41:4a:4d:3c:75:c5:41:09:e1:4c:26:3d:ca:8f:9f:fd:a2:
57:a9:57:da:89:b3:f5:9b:b6:7a:da:02:db:7e:68:0b:a5:ce:
73:6b:24:70:b4:53:63:24:1d:79:5d:b6:c4:89:0e:92:9d:e0:
dd:2b:9f:8d:1e:b7:55:db:50:1c:98:ce:08:72:e2:9c:ff:25:
15:55:55:ca:44:9c:f1:b6:a9:c6:eb:98:6d:bf:63:5c:44:a4:
9c:d3:39:39:a4:72:16:87:7f:d1:9b:22:93:93:ab:75:d3:09:
df:af:f2:66:f4:d7:fa:40:90:7a:17:d4:6f:49:6f:76:55:e1:
9e:03:ce:22:9d:4c:33:f5:7c:d4:0d:73:ca:eb:75:08:7c:41:
d9:6d:3e:72:4a:37:30:cb:03:5f:96:7a:c9:43:00:fe:a5:51:
6a:7f:8e:ea:c9:a9:64:ba:9b:d5:3d:41:3f:e2:ad:f7:f8:98:
ae:2e:93:99:7d:fb:db:72:2c:4c:ca:0f:a9:bb:16:ad:dc:cd:
e9:ee:58:c0:ed:b6:75:0a:a9:82:2e:4e:5a:3c:2d:87:e2:e6:
e1:e3:48:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:19 2026 by rpki-client