Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143823.roa
File: AS143823.roa (raw, json)
Hash identifier: ljkL6wtfdc9N5lO2EMM4uIfICUX7G9/I0gE88SF6O5A=
Subject key identifier: E5:D8:91:1B:74:34:93:E8:25:24:BB:91:61:FB:31:97:35:F6:C5:5C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32A1FB2175EDD0423DFA2FF4E142C3A10EBBE45E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143823.roa
Signing time: Fri 22 May 2026 02:48:01 +0000
ROA not before: Fri 22 May 2026 02:43:01 +0000
ROA not after: Fri 21 May 2027 02:48:01 +0000
asID: 143823
IP address blocks: 240a:a495::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:a1:fb:21:75:ed:d0:42:3d:fa:2f:f4:e1:42:c3:a1:0e:bb:e4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:01 2026 GMT
Not After : May 21 02:48:01 2027 GMT
Subject: CN=E5D8911B743493E82524BB9161FB319735F6C55C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:da:fc:b0:d1:94:59:23:57:ed:0e:b6:ac:
51:a0:87:87:e3:83:c6:32:b8:ce:88:fa:90:79:4b:
fe:e8:fc:23:0c:f3:63:b4:f7:97:9a:10:fb:92:d4:
13:2c:0b:95:b2:97:ab:9c:0b:ab:45:d5:ab:44:83:
65:99:2b:ee:88:08:b2:c2:b6:20:92:0a:dd:47:07:
2e:01:c2:67:60:90:ab:e1:e4:ea:6c:ec:f0:d2:b6:
e9:6d:74:b3:45:2e:27:57:42:61:30:1d:82:42:f5:
dc:8f:2b:12:b0:a2:2c:8d:98:95:1e:e5:ed:24:01:
78:21:97:a6:bf:75:8c:39:49:a2:17:00:a4:a8:fc:
d1:77:3e:e3:16:4d:0c:c4:a6:36:e3:3a:6b:bc:9a:
b3:f0:2d:7e:1d:da:11:e5:26:e3:57:6c:c2:e1:5d:
cd:10:ab:c0:8f:08:19:75:32:79:97:61:5d:f3:bb:
27:c9:26:ba:4d:af:8e:fd:fc:8a:24:39:4e:03:4b:
51:1a:1f:33:7b:99:93:8c:f6:3d:e6:c5:af:d1:8f:
ab:f1:62:f5:e1:5b:26:d6:2c:bb:50:d9:1b:32:cd:
bf:b2:5a:3f:78:f2:c6:0b:71:fb:10:a6:99:0b:47:
37:cb:e6:72:e9:bd:c4:74:7c:03:61:df:97:7e:86:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D8:91:1B:74:34:93:E8:25:24:BB:91:61:FB:31:97:35:F6:C5:5C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143823.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a495::/32
Signature Algorithm: sha256WithRSAEncryption
52:59:f7:cf:48:49:ef:98:c0:47:e4:d6:e8:ed:9c:a4:17:1b:
94:f3:8c:f1:d0:fd:f2:d7:2d:8c:2b:ff:d4:a0:7f:8e:7e:f4:
80:02:d2:39:b0:ea:86:67:d5:b5:6c:b8:31:1e:fc:07:c9:20:
aa:fc:60:9b:dc:05:ce:d7:a6:62:3e:e7:ea:41:8f:ae:23:bc:
46:ad:9e:e8:20:87:29:2a:3f:c0:65:fe:f9:2a:75:d9:f3:33:
ec:a3:03:ce:93:66:ab:b6:0d:03:85:96:2d:62:ff:c8:5c:f3:
cf:2f:6b:58:77:9a:1c:25:53:8d:59:d2:0f:ef:fe:fe:bd:72:
00:c3:a4:fd:7a:ac:ba:8d:35:06:2f:5f:c8:c7:78:6f:0c:09:
dd:49:f6:b8:3a:e1:5e:72:0d:4d:3d:6b:9b:94:dd:fd:0b:a8:
2e:21:00:c7:f8:b2:c7:39:c6:10:2a:1c:c2:a0:c3:42:ee:e0:
38:8c:a2:e2:48:26:20:39:98:5f:87:1d:cf:7f:68:fc:13:5d:
4c:3a:d8:08:03:18:71:46:a8:6c:88:7f:b2:90:f3:a0:a4:3d:
02:f8:0b:9d:bd:a4:4d:c1:f0:52:f8:4e:ff:ca:ed:3e:a1:f1:
4e:41:43:6f:f1:88:73:fa:90:fe:4b:0a:1c:60:86:e4:14:6b:
e5:f2:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:02 2026 by rpki-client