Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143832.roa
File: AS143832.roa (raw, json)
Hash identifier: xO2gXyxtl1sAc9fOclNPU7xJDbgto02wUjWQioehNqo=
Subject key identifier: 91:55:FD:E2:78:AB:23:61:A7:74:DB:87:2F:80:56:73:D6:53:96:39
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0EE40346C4C393F9116A6DCDD10CD548CC6E2F5A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143832.roa
Signing time: Fri 22 May 2026 06:58:16 +0000
ROA not before: Fri 22 May 2026 06:53:16 +0000
ROA not after: Fri 21 May 2027 06:58:16 +0000
asID: 143832
IP address blocks: 240a:a49e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e4:03:46:c4:c3:93:f9:11:6a:6d:cd:d1:0c:d5:48:cc:6e:2f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:16 2026 GMT
Not After : May 21 06:58:16 2027 GMT
Subject: CN=9155FDE278AB2361A774DB872F805673D6539639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:aa:82:e2:08:70:c2:3a:b0:ea:d1:10:1d:
7a:96:f5:29:3b:da:e3:67:28:a6:30:d0:d2:37:56:
c3:7c:ce:68:4c:04:29:c4:f8:19:9b:9b:c1:f1:ce:
8c:4f:6f:f6:ee:3d:43:11:c8:24:de:c1:d8:6d:b5:
b2:53:34:34:86:31:a6:a6:59:b2:25:cc:69:00:6a:
bd:5c:35:b7:5b:4e:72:73:27:34:94:fd:ca:b1:6a:
55:3a:80:1a:ec:e2:26:e5:89:ec:eb:83:0a:82:64:
da:9d:ed:89:cf:25:fb:da:75:a0:96:85:cc:09:82:
6e:b6:9d:9b:4f:79:09:d9:39:dc:c7:c7:2d:ee:95:
dd:12:1f:c1:74:c4:de:b8:bd:13:60:66:04:34:44:
af:e9:80:93:d9:f5:ff:63:35:7f:59:93:cf:28:c9:
46:ff:19:35:fb:9d:18:8e:5d:3e:01:4f:ab:cd:a8:
74:4a:ea:75:66:17:e7:e7:0f:83:fe:37:0f:f6:84:
17:cf:2b:c5:ae:bb:15:7d:02:05:a6:b4:92:0e:43:
3e:24:f7:17:4e:cc:e4:03:fc:c8:2c:27:4c:20:48:
04:ac:88:bf:be:d4:e1:89:18:db:27:38:d5:13:fa:
29:2c:e9:24:d2:03:75:c7:3b:75:4c:6e:ea:b6:f4:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:55:FD:E2:78:AB:23:61:A7:74:DB:87:2F:80:56:73:D6:53:96:39
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a49e::/32
Signature Algorithm: sha256WithRSAEncryption
0c:65:fc:93:8e:41:2b:f4:cb:62:ee:61:08:c4:7a:3f:c2:68:
fa:95:b0:3a:90:74:c2:15:5a:55:c1:ac:72:71:08:88:5b:02:
29:9d:ed:34:c4:07:1b:db:fd:b2:ee:5a:27:9c:e5:dd:f2:b5:
a8:1a:9a:b8:18:c4:fe:8d:89:9e:ad:c8:d1:85:59:9f:c5:83:
0c:5e:37:f4:35:3e:ec:a5:d2:0a:67:e1:65:84:b6:7a:3c:8d:
43:b7:ef:c4:c2:71:34:72:7d:25:16:25:96:de:79:4d:dc:83:
8e:bd:b3:07:77:a2:86:5e:8b:96:54:05:c2:4c:9c:ef:81:75:
92:9e:b0:e4:b5:30:77:03:3b:81:01:d8:2f:6a:51:49:b4:1d:
e5:22:1c:63:0a:e9:4d:dc:20:b8:8a:7f:47:b3:65:30:61:8e:
ba:9e:a4:7a:fb:ee:38:c1:82:56:96:45:4a:07:d1:05:d5:29:
28:ff:bb:d7:45:46:5e:e2:4c:25:69:7f:08:c2:ab:17:a7:e5:
22:78:0f:0d:6d:40:60:5c:a4:0c:e4:5f:60:49:5a:52:4a:7d:
bd:18:c7:2b:71:45:ed:12:aa:8e:ec:7a:50:4b:38:e0:1a:70:
de:5e:89:e7:da:66:76:b2:4b:a5:c4:82:ef:ac:52:21:45:de:
92:fb:08:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:15 2026 by rpki-client