Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143836.roa
File: AS143836.roa (raw, json)
Hash identifier: Tl2+TU3gZIyb+81rh1D5+oCROE4PfXjK7GBLNVsHcv4=
Subject key identifier: 73:DF:5B:8F:AA:4D:84:22:CE:27:40:DA:F8:33:D8:7E:5C:09:50:BE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D57754D9D4FD1391D6F672975EFD9537C528BFC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143836.roa
Signing time: Mon 25 May 2026 06:28:29 +0000
ROA not before: Mon 25 May 2026 06:23:29 +0000
ROA not after: Mon 24 May 2027 06:28:29 +0000
asID: 143836
IP address blocks: 240a:a4a2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:57:75:4d:9d:4f:d1:39:1d:6f:67:29:75:ef:d9:53:7c:52:8b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:29 2026 GMT
Not After : May 24 06:28:29 2027 GMT
Subject: CN=73DF5B8FAA4D8422CE2740DAF833D87E5C0950BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:52:49:89:65:9f:88:c5:29:07:dc:1a:16:
d9:67:55:de:eb:50:d8:fb:d0:b5:20:7d:88:74:a5:
dc:c7:a7:1d:c4:0f:3a:2e:8b:8c:6a:6d:10:06:58:
ec:8a:6b:40:e6:67:b8:de:e2:d4:6e:bc:8d:be:6e:
10:ab:5a:2f:0f:73:33:da:2c:19:b8:64:05:af:18:
8d:20:fa:49:9b:1e:89:2a:ea:52:ff:c2:2f:f8:8e:
3b:27:cb:84:2d:8b:b6:22:dc:00:89:ab:00:34:ba:
bc:0e:8e:b4:1e:e1:2e:5d:fc:82:0d:f0:b5:9b:6e:
2e:51:33:47:20:06:b8:38:b6:98:3f:3f:c8:00:79:
d2:3e:68:f6:9b:6f:2e:2b:7b:b8:69:ab:75:65:81:
4c:7b:e6:4e:38:32:30:2b:a9:32:00:aa:0b:c3:0f:
6a:ee:25:42:03:06:09:f5:b5:46:fb:e9:c8:06:71:
fb:85:5f:d7:b1:38:56:28:dc:8b:05:c9:10:36:4b:
3c:68:0f:ed:8f:51:5c:bc:37:33:03:a1:74:b9:80:
44:c4:b3:20:15:db:57:cd:ff:aa:2b:6c:76:58:e8:
dd:a3:3a:d9:81:67:62:e3:fb:3c:1b:0d:a4:37:26:
58:3c:8f:a2:1b:34:90:4e:1d:32:56:a7:d5:c9:3a:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DF:5B:8F:AA:4D:84:22:CE:27:40:DA:F8:33:D8:7E:5C:09:50:BE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4a2::/32
Signature Algorithm: sha256WithRSAEncryption
11:a2:b2:77:69:4f:b6:17:22:97:04:c0:c1:7b:c1:1d:d9:45:
e5:6e:f4:f3:8c:e1:41:77:1c:55:32:8c:5d:34:0b:b4:56:50:
63:4d:36:59:77:4e:ec:f7:60:9a:4e:c3:7d:43:cb:a9:b1:4f:
dc:63:e9:a8:0e:08:e7:21:40:69:a0:5d:c5:f3:f5:13:ab:c3:
31:8c:02:09:ee:0c:57:06:2d:90:55:fc:c1:a0:55:d6:02:39:
52:21:44:86:17:7a:70:9a:19:26:6a:19:4e:9e:07:38:42:ca:
b6:a2:6c:a3:8c:c3:1c:41:0f:03:2a:f1:50:ff:3a:76:c0:78:
eb:61:84:00:ec:ee:5e:6c:a9:98:d4:66:80:8b:f8:db:7b:9b:
69:a9:2e:5f:2e:8f:e0:a1:82:d3:a1:a6:c3:ec:7b:7c:c6:36:
2a:26:a2:e0:07:1a:b3:a9:76:88:b2:98:5a:b8:b6:1c:2b:0c:
d2:54:14:f4:5a:da:da:02:25:92:4b:60:42:21:c2:b8:30:9b:
68:60:ba:80:74:ee:8e:8d:37:fb:43:bc:5f:a7:57:9f:f2:1b:
d0:59:96:2f:d9:ad:9a:ed:f9:f3:e1:85:f3:6b:32:bb:21:f7:
91:79:6c:34:23:4f:b3:ac:8d:90:77:55:dd:e9:bd:d0:09:9b:
27:71:ec:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:04 2026 by rpki-client