Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143674.roa
File: AS143674.roa (raw, json)
Hash identifier: phxseqzsbu2tBTvOJxUrQx9qk0didAJphGIvV4obYks=
Subject key identifier: 39:92:8C:0A:11:0A:76:11:55:5B:58:47:D2:F5:AC:86:B6:DC:4D:09
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 215FCB6BE3B42D479E61810C9843E209CBFC5A4B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143674.roa
Signing time: Fri 22 May 2026 04:08:33 +0000
ROA not before: Fri 22 May 2026 04:03:33 +0000
ROA not after: Fri 21 May 2027 04:08:33 +0000
asID: 143674
IP address blocks: 240a:a400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5f:cb:6b:e3:b4:2d:47:9e:61:81:0c:98:43:e2:09:cb:fc:5a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:33 2026 GMT
Not After : May 21 04:08:33 2027 GMT
Subject: CN=39928C0A110A7611555B5847D2F5AC86B6DC4D09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:12:3a:03:87:df:08:5a:24:91:5a:d3:85:
3e:da:d0:5e:25:bf:9d:ef:cd:b7:50:30:65:0a:6f:
e3:02:3a:8a:b5:9f:7c:98:da:9f:8b:f3:96:fd:07:
30:f1:67:de:d8:c5:88:5c:85:fd:55:f1:8e:d4:d7:
cd:da:6c:87:e5:27:6f:73:2e:e7:31:5d:f2:79:34:
10:07:e8:c9:06:8b:29:d2:9d:a1:46:da:70:14:a5:
a6:84:28:2f:9b:cb:82:dd:6c:de:33:86:98:5d:2e:
63:00:ac:85:11:26:de:73:ab:60:c4:c9:c5:2f:b8:
72:e6:20:3b:5c:fc:10:67:35:67:46:6e:20:59:d6:
e1:d1:3f:69:d0:e7:b2:06:ba:f2:cf:65:b7:34:36:
fe:81:05:5f:11:e1:01:58:81:5e:1a:a1:87:0b:e6:
c3:14:d6:13:26:41:29:d5:ff:da:55:bc:04:15:41:
a9:43:29:d2:e1:7a:6e:26:20:6a:df:a6:1c:17:1b:
c6:95:db:e4:9d:af:52:47:14:e6:d7:90:05:a2:cb:
5a:a8:df:bb:05:e9:7b:71:31:02:74:2a:f9:bb:1d:
ad:64:e6:1b:41:fe:ae:eb:0e:c9:1c:a5:25:cc:02:
8d:20:6d:bd:25:03:db:50:e1:f0:36:62:d8:2a:06:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:92:8C:0A:11:0A:76:11:55:5B:58:47:D2:F5:AC:86:B6:DC:4D:09
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143674.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a400::/32
Signature Algorithm: sha256WithRSAEncryption
04:6a:af:cf:0e:90:72:05:f6:23:4a:0f:4d:94:86:32:ec:70:
09:2d:c1:f4:e1:79:7c:56:88:98:3d:64:04:9f:ec:f9:01:56:
94:21:db:2b:3f:14:76:b9:65:86:d6:66:f5:d0:8f:a6:0d:ee:
18:2e:e0:6d:45:dc:bf:5a:7c:65:b7:90:78:4a:e1:8c:e2:1c:
62:e8:0c:0b:19:39:84:72:65:4e:4a:c4:9a:8b:af:95:fe:83:
d2:40:09:15:08:05:d6:3f:f9:3a:31:e2:a7:58:cf:b3:74:f3:
96:50:f3:24:ea:2b:fa:4e:4f:68:2b:80:4b:2c:0a:0f:6f:2b:
ed:a0:fd:80:50:ba:a0:a0:38:85:6f:82:4e:27:09:35:69:ae:
9f:0d:98:23:42:a9:dd:12:3f:c7:28:89:d0:45:68:c6:79:47:
f7:c7:dc:07:47:71:4a:22:fe:50:95:6f:ec:01:72:f6:05:34:
12:f2:25:6a:d3:aa:66:50:d6:c6:a8:c9:95:65:61:59:62:b0:
63:ae:87:ff:d3:fa:e7:94:50:20:79:42:4f:1e:bc:b2:ad:49:
79:1c:d3:c1:87:89:e7:c0:a5:da:5b:ab:f5:00:44:69:78:e6:
fc:54:a7:60:7d:fd:02:85:4f:b6:d5:ac:46:b7:23:bd:14:80:
4b:32:a4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:18 2026 by rpki-client