Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143817.roa
File: AS143817.roa (raw, json)
Hash identifier: VNvnaEkuaFxHVq1WULb7ptiTj2/ycfpLcyvXso2C0M4=
Subject key identifier: A8:03:7B:51:C6:C7:EC:D2:F4:E4:0E:72:79:08:40:C3:E2:52:C1:0F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 40941256531027E10AE1B229D4B161653EF91BD4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143817.roa
Signing time: Fri 22 May 2026 06:46:02 +0000
ROA not before: Fri 22 May 2026 06:41:02 +0000
ROA not after: Fri 21 May 2027 06:46:02 +0000
asID: 143817
IP address blocks: 240a:a48f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:94:12:56:53:10:27:e1:0a:e1:b2:29:d4:b1:61:65:3e:f9:1b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:02 2026 GMT
Not After : May 21 06:46:02 2027 GMT
Subject: CN=A8037B51C6C7ECD2F4E40E72790840C3E252C10F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:8f:6b:8a:1f:23:64:54:c0:de:07:86:fb:
10:03:ad:77:1b:24:4a:f8:c9:84:aa:18:66:61:26:
4a:ee:e6:ad:f0:a5:5c:8c:36:66:e2:9f:58:bd:08:
6b:ac:58:1e:f4:ca:8b:f6:b4:19:e2:6d:3d:a3:31:
b8:78:36:85:58:a3:d7:41:cf:ef:da:65:66:98:97:
22:41:8a:3e:16:ce:cf:2f:2c:16:bf:ac:92:b2:02:
3b:2b:4b:9e:e0:6b:03:12:e6:14:84:6a:f3:9d:9d:
b5:27:9f:b4:93:31:1b:09:96:02:5e:d2:03:36:56:
a8:bf:ab:73:35:74:b2:7b:57:3e:d4:81:de:e1:ac:
19:df:c5:df:c0:0c:04:97:e3:40:99:18:89:b8:f1:
41:cc:7f:4b:0d:c8:fe:f9:e5:b0:04:b1:03:d1:46:
61:7c:3e:d9:eb:d8:51:9a:e9:32:ce:b4:29:e0:28:
0a:24:06:1e:b1:4a:e4:b4:17:16:2a:3f:3c:e8:1d:
89:b8:1c:fb:19:02:59:17:15:10:e9:8c:74:d3:02:
9f:f3:0b:c1:44:22:79:1a:3c:a1:da:0a:b9:30:2d:
9c:c3:5b:21:a5:c3:2b:86:b2:8c:6f:bc:48:0e:78:
7f:36:d7:f2:81:41:30:33:bb:2c:ea:21:23:90:81:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:03:7B:51:C6:C7:EC:D2:F4:E4:0E:72:79:08:40:C3:E2:52:C1:0F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a48f::/32
Signature Algorithm: sha256WithRSAEncryption
5a:e2:ef:56:cb:b7:15:d3:6e:8d:49:48:08:dc:9c:e8:e8:c7:
7d:b5:12:c0:58:7e:e5:23:b0:d8:99:4d:04:a0:db:27:62:13:
3f:73:87:7c:2f:5e:51:6d:86:7f:04:59:8b:97:30:e8:c2:cd:
75:06:39:8d:a6:17:8b:5a:d0:d8:da:a8:96:5e:5a:5e:4a:3b:
99:54:cb:be:cf:be:2d:97:f8:5c:ba:f0:91:3c:b8:09:35:a4:
31:1b:af:75:05:2d:b3:62:ae:c5:6f:7d:3c:29:bf:85:ef:c0:
63:d0:d2:aa:6f:9c:07:c4:01:06:d9:d5:51:cd:15:fd:09:0d:
08:9a:40:94:08:7a:8a:f8:1e:04:f5:5b:5d:7d:41:06:5b:2c:
5b:b6:08:10:2e:f8:89:5e:1e:29:f7:57:21:31:cf:78:b4:c7:
0c:68:1e:60:10:03:e7:44:d0:cc:46:40:77:b7:4b:b0:37:a3:
a6:ac:04:1e:42:88:06:59:53:e1:b1:33:8a:74:40:7a:df:c9:
1c:59:c0:85:4b:60:74:87:f6:ee:f2:67:00:d1:d1:fe:09:99:
2c:2b:6f:2d:51:a8:76:d1:31:4f:42:12:cd:48:b6:77:28:31:
9c:44:57:bd:b5:e1:75:39:3a:ac:69:61:da:20:e7:bb:6e:02:
0f:6e:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:10 2026 by rpki-client