Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143119.roa
File: AS143119.roa (raw, json)
Hash identifier: 85x54a1tUdqC5Xccdjtk8OiA0fu8yT9YOneSRMSR0Y0=
Subject key identifier: 4F:11:CD:61:19:31:FD:C4:6A:07:A0:80:1D:EB:06:8A:87:27:84:AC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4DF2994D96D3CE21951AB5FB4CF22B4CDA83FA1F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143119.roa
Signing time: Tue 26 May 2026 02:35:29 +0000
ROA not before: Tue 26 May 2026 02:30:29 +0000
ROA not after: Tue 25 May 2027 02:35:29 +0000
asID: 143119
IP address blocks: 240a:a1d5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f2:99:4d:96:d3:ce:21:95:1a:b5:fb:4c:f2:2b:4c:da:83:fa:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:29 2026 GMT
Not After : May 25 02:35:29 2027 GMT
Subject: CN=4F11CD611931FDC46A07A0801DEB068A872784AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:ad:6b:6d:27:54:75:db:97:ea:e8:3f:f7:
bc:99:2c:22:7b:d9:b5:03:fd:73:91:46:ea:e9:2a:
28:a2:fa:fa:f8:57:b0:61:cd:11:b0:d7:ff:d0:c7:
61:b5:35:ce:27:32:99:39:a0:d7:a2:d5:40:5e:64:
67:98:45:28:e1:6e:30:26:6e:26:93:98:08:d8:06:
8e:7c:0d:67:8f:b1:fd:da:8c:21:fb:f2:d2:f1:99:
6e:fe:56:53:3a:4b:d7:2c:d5:fb:21:89:db:c8:9b:
93:4d:11:19:e4:de:b0:a3:da:c2:32:2e:d4:51:c1:
ef:a1:dc:bd:ec:68:cd:c1:e4:59:51:49:a2:9d:4b:
27:6f:43:86:7b:9e:70:b6:26:1c:21:0f:97:6c:53:
a8:31:af:e9:1e:95:5d:bb:a8:19:10:91:d4:7f:72:
0a:26:74:ff:84:7a:39:b8:0b:67:3f:5f:d3:78:0f:
83:23:f8:13:90:f4:e7:bf:23:4d:50:0b:b3:73:a9:
04:0b:2b:4b:97:ca:72:16:e8:53:04:99:bf:c7:4a:
c8:f4:fc:02:90:11:ff:74:42:32:f1:52:8d:2b:85:
55:1f:56:8d:7b:fc:9a:30:45:7f:d4:51:2a:2b:85:
83:cf:ae:92:f7:00:2c:79:c4:8f:41:4d:8f:f9:2e:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:11:CD:61:19:31:FD:C4:6A:07:A0:80:1D:EB:06:8A:87:27:84:AC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a1d5::/32
Signature Algorithm: sha256WithRSAEncryption
4e:2e:c5:31:8e:ce:9f:b2:e6:56:32:1e:48:9d:d9:db:06:cb:
69:c5:31:c8:50:55:99:68:b0:a8:fd:94:58:46:e6:e1:ab:99:
37:80:65:aa:bd:7b:da:93:4d:22:58:66:01:24:08:6b:21:0a:
55:d1:f1:7e:98:13:8f:96:44:01:3f:9c:e1:f8:b6:c7:50:f7:
3c:75:d8:de:9a:45:61:d4:18:16:1d:15:50:c7:55:40:55:ec:
e7:c4:d0:b5:49:8a:1f:88:a2:c0:d7:b8:74:34:c5:c5:d5:6d:
48:27:7b:62:86:cc:e3:ed:69:c8:cb:b9:be:81:74:d0:89:00:
8e:14:4c:11:61:bb:e4:8c:62:14:9c:b3:f2:45:63:ed:2f:2d:
d9:83:6e:08:59:6a:26:2e:99:67:6f:13:02:ee:4d:4c:58:4d:
43:74:83:90:9a:23:a7:f6:d0:f8:c3:7a:f6:4a:60:b6:0c:a7:
e6:05:09:69:c8:0e:58:a4:ea:94:9f:2b:e7:96:d5:75:e4:47:
f6:68:f3:a7:93:6b:f7:e5:f5:c0:5f:a2:e3:ff:c3:00:38:a8:
8b:bc:47:43:e3:7b:d0:ab:19:f2:e8:61:3c:de:ea:d0:ac:86:
99:b8:e1:11:a2:e2:3c:49:b4:ab:77:4c:02:a8:60:96:bb:a8:
4b:54:af:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:06 2026 by rpki-client