Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143039.roa
File: AS143039.roa (raw, json)
Hash identifier: GiPhJYjO+ZZRSBQEiVrp9fQoURXK+MBmgpriefCD6oE=
Subject key identifier: A6:AA:3F:C2:C8:CA:B7:D9:0D:99:3A:E0:C1:9F:E6:69:63:7A:2D:27
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 55394F63125E88632314DCADB6DBB5FD8E98F4DA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143039.roa
Signing time: Fri 22 May 2026 04:26:54 +0000
ROA not before: Fri 22 May 2026 04:21:54 +0000
ROA not after: Fri 21 May 2027 04:26:54 +0000
asID: 143039
IP address blocks: 240a:a185::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:39:4f:63:12:5e:88:63:23:14:dc:ad:b6:db:b5:fd:8e:98:f4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:54 2026 GMT
Not After : May 21 04:26:54 2027 GMT
Subject: CN=A6AA3FC2C8CAB7D90D993AE0C19FE669637A2D27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:29:f0:4d:d1:75:0f:3e:a0:5e:57:30:a6:
1d:1b:0c:0b:5b:91:22:63:48:d1:42:0e:20:a1:35:
67:e1:20:e4:c0:95:33:0c:d3:56:28:4a:c8:42:3a:
ef:46:67:9a:3d:23:7f:4f:3f:db:e5:64:97:b0:ec:
68:8a:50:4a:91:41:b8:94:37:5b:2d:6d:5e:ed:81:
0e:d2:bc:ba:7b:e2:ee:08:5d:90:1f:38:01:c8:62:
3a:a9:cc:42:4d:15:50:65:30:2c:f0:f0:79:b6:48:
eb:cf:c0:da:4e:12:56:34:07:74:ac:92:80:32:8c:
f7:c2:30:cd:11:c7:d3:ce:43:d9:79:35:61:df:e3:
91:09:d6:e4:8e:26:c7:2a:e8:d1:3f:54:87:53:7c:
46:d7:d2:81:09:29:67:7c:7d:c9:fe:b2:7c:d6:c5:
fa:36:06:0d:b2:e9:92:98:65:f1:ba:e1:43:ee:f8:
77:88:9b:99:3d:59:2e:7b:cf:2d:eb:f2:55:b4:6c:
e9:75:85:ac:f1:54:58:d9:6c:63:af:7f:fa:38:e0:
13:77:cc:e8:74:b7:97:47:1e:75:4c:19:1f:e6:af:
6d:c1:37:58:77:39:35:d6:80:9a:8a:44:32:0b:56:
38:e5:cc:42:0e:0d:34:c8:95:23:51:85:38:ee:a3:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AA:3F:C2:C8:CA:B7:D9:0D:99:3A:E0:C1:9F:E6:69:63:7A:2D:27
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a185::/32
Signature Algorithm: sha256WithRSAEncryption
77:48:f9:1a:1c:02:76:ad:78:f4:d9:2b:c4:62:3c:46:a1:68:
52:8c:58:0a:d1:cb:7d:a6:21:96:0e:2f:77:02:7c:41:a2:b2:
fe:4e:f5:79:e4:fe:81:34:93:70:b0:47:9f:9f:99:6e:13:f8:
df:40:c0:46:0a:6a:6b:a7:20:83:82:21:f0:96:d9:6d:13:b3:
69:b1:54:c4:ff:1f:62:2f:d8:52:77:69:72:99:1a:05:ae:d0:
18:b7:3e:a4:e9:1d:84:9b:42:3f:27:4d:de:75:8a:b7:51:5d:
16:66:68:ac:f0:88:0a:d1:22:ac:b1:8f:08:39:09:91:96:18:
f1:7f:1f:86:f5:31:26:a4:14:48:09:c8:ea:33:de:fb:9c:38:
1f:4a:ed:fe:a3:31:09:92:98:12:4c:20:cf:dd:07:9a:aa:f1:
e8:d0:cc:f5:8c:0b:d5:11:3a:b3:44:6d:15:c2:7b:4d:06:07:
46:cf:85:55:17:78:70:72:ed:11:65:a9:55:cb:0d:54:98:85:
d1:8e:0c:a7:5c:c0:1d:7d:eb:8d:5d:84:62:d9:4d:73:65:23:
95:8c:d3:02:12:d7:7e:a8:5c:ff:1c:f4:31:b1:67:9c:dd:00:
8f:a1:89:91:84:34:8c:7e:3f:a9:66:08:c9:59:11:6f:e7:5c:
93:4e:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:29 2026 by rpki-client