Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143822.roa
File: AS143822.roa (raw, json)
Hash identifier: k0OEIEGgGRhKHWIsBiUnYLPswsQjeMe9hwWxr2lvlSA=
Subject key identifier: D3:CC:57:F7:41:8E:68:6B:D1:11:B8:D1:ED:53:12:55:3C:07:40:7E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B1D591516AC82CDEC17F7F3D0C08D4F21489BE5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143822.roa
Signing time: Tue 26 May 2026 02:35:03 +0000
ROA not before: Tue 26 May 2026 02:30:03 +0000
ROA not after: Tue 25 May 2027 02:35:03 +0000
asID: 143822
IP address blocks: 240a:a494::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:1d:59:15:16:ac:82:cd:ec:17:f7:f3:d0:c0:8d:4f:21:48:9b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:03 2026 GMT
Not After : May 25 02:35:03 2027 GMT
Subject: CN=D3CC57F7418E686BD111B8D1ED5312553C07407E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:c5:a3:20:e8:2a:88:fd:b3:85:12:73:9b:
41:c4:f6:fd:d5:38:c7:4d:36:f9:be:15:7b:ac:68:
99:a9:4d:5a:cf:53:f4:f3:63:be:c9:4f:e2:26:87:
62:08:7a:4e:ed:8b:28:38:d8:14:85:dc:82:99:23:
47:bc:53:a4:20:c2:c4:93:66:9b:a8:34:a2:89:e1:
58:cd:ec:2f:f2:99:0b:59:ff:54:f2:f9:31:f7:64:
33:a9:c5:fc:07:c1:f9:f9:40:ea:d2:12:2d:6b:e4:
24:91:66:65:52:cb:6f:9f:24:5f:13:ac:62:a3:13:
56:6f:61:36:4c:ea:a8:2f:73:99:c0:a7:f9:e1:c0:
7f:58:c8:10:2d:7c:f7:3b:9a:44:e5:6d:8d:fe:f0:
7b:52:26:bd:ca:44:0c:0b:3d:4c:47:a3:c2:e6:f0:
d4:7a:e2:f6:58:69:57:1d:49:32:e5:4a:56:2d:c4:
4a:28:eb:26:a6:bf:f2:fb:aa:b5:d9:79:c7:8d:d4:
08:dd:71:81:23:8f:60:b2:79:52:a1:04:0b:11:88:
a4:0b:c7:37:02:9f:73:25:f0:c5:98:cb:27:ac:47:
25:1f:47:ff:c4:72:ca:33:e0:3a:68:8f:72:cd:d9:
c4:bf:9c:af:de:58:9b:c2:08:ec:41:f6:96:a3:b2:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:57:F7:41:8E:68:6B:D1:11:B8:D1:ED:53:12:55:3C:07:40:7E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143822.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a494::/32
Signature Algorithm: sha256WithRSAEncryption
93:82:88:3e:41:8b:08:7b:a9:23:79:4e:88:96:8b:d9:d4:2b:
98:75:4d:6b:14:59:d6:b6:9f:2a:4e:79:64:ac:59:9f:33:1a:
70:d8:62:d8:c6:30:45:e2:dd:3e:41:58:49:37:62:27:22:95:
5c:84:0c:32:5b:41:8a:18:11:02:8c:da:c1:8d:7e:9e:a1:c5:
f9:6a:b9:90:35:aa:f4:3e:b2:18:59:25:1f:d3:ab:26:7b:4b:
4b:34:75:50:3b:66:40:41:a7:45:77:f7:2e:65:e2:f7:87:a1:
c5:4b:97:4f:b2:54:c4:9d:52:bb:54:e4:d0:6b:11:a9:d6:e8:
7f:46:c3:02:96:b1:63:b3:98:b4:06:6b:99:80:5f:4f:72:95:
5a:64:a9:d6:06:34:a2:94:30:86:cf:8a:6f:09:26:b7:e6:f0:
44:de:f3:20:8d:53:06:30:9c:aa:66:40:ad:88:d3:61:f0:e5:
c9:61:0e:fe:9a:f1:79:2f:b9:46:38:73:4d:76:67:6e:fd:0f:
ee:d2:24:a8:1e:b0:15:b8:e6:7f:7a:e8:30:47:79:02:e3:07:
93:e2:27:d5:d0:63:e1:b8:df:1e:74:b2:e9:af:4c:f3:fd:fc:
c6:e1:5f:0d:5a:42:7f:52:ee:84:7f:03:09:fa:8b:e1:0c:66:
77:ee:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:16 2026 by rpki-client