Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143834.roa
File: AS143834.roa (raw, json)
Hash identifier: TyfjJ0ougjKTiEMP5gt7plUCkvBO2j4zYgnPJ8Xbb+c=
Subject key identifier: 43:5A:7B:2A:49:05:4F:76:AD:8C:65:C1:91:C2:12:13:10:FD:92:68
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 11B18C44EF9942B6AEA2B0294AFD5BB79F84759B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143834.roa
Signing time: Mon 25 May 2026 06:48:59 +0000
ROA not before: Mon 25 May 2026 06:43:59 +0000
ROA not after: Mon 24 May 2027 06:48:59 +0000
asID: 143834
IP address blocks: 240a:a4a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b1:8c:44:ef:99:42:b6:ae:a2:b0:29:4a:fd:5b:b7:9f:84:75:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:59 2026 GMT
Not After : May 24 06:48:59 2027 GMT
Subject: CN=435A7B2A49054F76AD8C65C191C2121310FD9268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:20:fa:c5:e1:46:5f:76:8a:9f:0e:4c:12:
66:53:5c:98:a6:cd:e1:26:6e:2b:d1:d7:c8:f7:29:
e6:ed:25:de:15:9e:fb:e5:4f:f3:ea:c4:b2:fd:6e:
e0:d8:81:61:fa:f3:24:d8:9c:45:ab:00:7a:88:7f:
53:7e:f9:55:c5:07:7b:2f:f4:df:d9:75:15:40:cc:
9d:ef:ea:74:a0:d6:70:b7:d1:f8:1d:c2:00:3a:01:
2c:cc:6c:ef:33:53:39:4e:90:38:6f:cb:c9:db:23:
91:e9:49:a5:f5:b5:0f:38:f1:8e:98:52:e5:4e:aa:
b0:8b:d7:40:84:e5:98:89:7d:1d:50:be:89:c2:92:
bc:da:ec:db:5b:99:77:c1:e5:35:9b:2b:ca:6f:e6:
25:13:7b:0c:91:23:5a:57:27:7c:2f:19:97:ec:ee:
24:c7:6a:a1:a3:49:8e:cb:b9:1a:f8:37:a5:b0:cd:
3b:73:81:f5:1a:f9:e5:e5:90:84:b7:25:ad:3f:57:
5a:46:0c:07:6c:a3:f9:11:ca:2c:58:8a:61:6d:a0:
a1:61:7c:25:e5:d7:9a:3f:83:e4:0c:e8:08:c4:57:
bf:af:31:a7:12:62:b4:56:49:33:cd:8c:32:f0:8c:
ed:9f:ec:2b:95:04:88:03:b8:67:da:03:04:19:86:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5A:7B:2A:49:05:4F:76:AD:8C:65:C1:91:C2:12:13:10:FD:92:68
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4a0::/32
Signature Algorithm: sha256WithRSAEncryption
56:64:1a:66:e6:48:27:e2:c8:4b:52:69:85:81:d8:e3:0f:23:
e4:a0:74:6e:1b:03:cb:e8:99:ad:54:b8:20:2f:e6:80:0a:53:
f5:95:a1:e4:b3:bb:9c:c5:5f:50:e0:c7:fe:d4:dd:51:c6:be:
19:c2:76:78:33:bc:e3:8d:b2:27:cd:82:e7:4b:8f:a3:46:82:
c0:4a:d6:54:b7:84:72:35:d6:f4:79:e5:12:d4:c6:fa:38:41:
c0:83:75:99:dd:10:16:be:5b:04:f5:e7:d0:ca:12:28:da:e1:
31:b4:3b:49:c2:45:34:88:37:79:26:94:4e:65:54:cc:1b:44:
4d:e2:ee:81:78:21:65:57:14:fc:f9:28:25:fe:b2:ae:2d:f9:
9b:2e:ea:87:f3:ff:87:aa:61:11:38:ad:ec:58:1e:ce:00:dd:
7a:cb:fb:57:39:0e:bf:c9:87:01:30:98:52:60:76:5f:88:94:
e4:76:f0:24:67:82:7d:32:e2:75:44:f3:ab:e3:55:73:b0:2d:
83:0b:00:ea:cb:b9:85:33:f7:d3:f4:27:80:57:64:bd:9c:be:
e7:8d:f7:62:43:29:a8:d5:03:34:98:f0:d4:05:84:c6:53:04:
d9:e2:c1:7f:7f:a2:6d:b8:c0:e3:0f:25:85:cf:14:5c:45:f7:
2f:d0:21:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:47 2026 by rpki-client