Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143825.roa
File: AS143825.roa (raw, json)
Hash identifier: aePIWoka3HLMJ53NAtcOo6UbAg5tClBw5O2Nrwi3Ghc=
Subject key identifier: 3F:CE:2D:B5:0B:FD:12:21:1E:4B:21:AD:0B:A9:06:93:9F:BE:53:A6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 59ADA23702E80FC4EFD2530E8DA2D6D6F79D745F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143825.roa
Signing time: Fri 22 May 2026 07:40:44 +0000
ROA not before: Fri 22 May 2026 07:35:44 +0000
ROA not after: Fri 21 May 2027 07:40:44 +0000
asID: 143825
IP address blocks: 240a:a497::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ad:a2:37:02:e8:0f:c4:ef:d2:53:0e:8d:a2:d6:d6:f7:9d:74:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:44 2026 GMT
Not After : May 21 07:40:44 2027 GMT
Subject: CN=3FCE2DB50BFD12211E4B21AD0BA906939FBE53A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:ba:60:de:56:4a:13:c3:eb:00:40:b4:43:
3e:2a:f9:b3:46:ab:ab:0d:c6:91:f5:be:aa:8d:61:
27:68:1e:c5:18:fc:79:f5:c7:c2:10:b3:76:5d:1f:
fc:5f:59:b9:cf:3b:ba:b5:23:9b:c0:89:4f:28:6f:
c1:28:ab:00:6c:8c:33:c3:7e:91:ce:3c:91:84:19:
f6:25:ee:31:d6:c2:20:d6:e2:f9:18:e3:ff:92:9e:
06:73:fa:17:40:82:e2:92:d9:6e:72:c4:0b:89:9a:
4d:c2:0c:84:c9:a1:63:77:c1:ac:44:5e:84:51:e0:
5a:4c:56:91:60:9c:f1:37:2c:77:6c:30:ac:d7:cc:
10:6f:87:f2:95:3a:9c:fe:bc:8b:ee:a1:60:47:77:
88:b7:51:89:b7:c2:d7:b8:cf:65:40:f1:fe:d1:ff:
e7:98:04:a4:8d:bb:81:63:28:96:bd:6f:05:ef:30:
1a:60:f6:f9:7b:d3:3e:28:86:d1:ca:b1:c3:a9:9b:
e5:5d:fe:e1:39:59:59:8e:c7:a3:7d:f8:b2:d2:02:
2e:ad:84:c4:08:29:fb:c5:4f:01:52:d5:f5:61:28:
51:fa:e2:88:c2:59:d0:8c:b1:2e:72:fb:86:7d:c4:
07:97:1a:2f:cb:de:20:31:4b:6c:46:c4:34:2c:25:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CE:2D:B5:0B:FD:12:21:1E:4B:21:AD:0B:A9:06:93:9F:BE:53:A6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143825.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a497::/32
Signature Algorithm: sha256WithRSAEncryption
9d:87:73:06:75:73:7a:e8:ba:e3:46:8a:95:de:57:5c:a9:cf:
5e:40:0f:8c:8c:5c:00:2c:fc:ec:10:01:ac:95:31:19:9d:16:
86:70:85:af:93:b8:bb:f5:dc:64:63:a6:27:20:93:8a:e4:18:
a0:02:18:e9:06:95:37:41:8e:3f:fd:40:bd:48:4e:bf:1c:01:
85:7f:ac:8b:81:f2:eb:db:9f:3f:71:6f:72:dc:a5:98:46:6c:
b5:34:ab:aa:6b:04:18:3c:71:29:be:e4:3a:4a:7f:5c:48:6d:
70:f8:09:c3:43:b1:cb:f8:a4:b8:db:cb:3f:e9:c2:3e:21:fb:
7e:8d:61:12:e3:de:b3:48:1f:93:24:2b:93:13:e3:26:a1:fb:
45:09:8d:7a:0f:67:9f:e9:fa:77:e8:37:0e:0f:fd:56:34:86:
6d:1d:29:a6:ae:12:5f:77:0f:89:4b:1f:2a:9c:d5:52:76:f8:
bc:76:d8:e3:1e:0e:ad:67:53:77:27:91:73:a7:7b:dd:87:65:
7b:bb:4f:68:5a:c8:72:11:14:30:39:6a:88:be:ce:8a:4c:ed:
a2:c3:1d:8e:66:af:d3:2a:e8:1d:24:ce:32:88:61:65:60:59:
8d:e3:d1:cc:21:37:8b:1a:73:e1:33:92:32:cf:c3:65:62:35:
c3:73:37:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:01 2026 by rpki-client