Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143763.roa
File: AS143763.roa (raw, json)
Hash identifier: A3G8nAaYRlS5W1fucbE3WyJPdtS84SmlLewB9IfdoJs=
Subject key identifier: 48:E7:8A:7A:5D:8B:4B:4B:33:84:2B:B1:55:90:2F:A3:2A:C0:85:0D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5A32DBCE348668A07E191EDD3948CF6FE3CB5523
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143763.roa
Signing time: Tue 26 May 2026 08:52:57 +0000
ROA not before: Tue 26 May 2026 08:47:57 +0000
ROA not after: Tue 25 May 2027 08:52:57 +0000
asID: 143763
IP address blocks: 240a:a459::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:32:db:ce:34:86:68:a0:7e:19:1e:dd:39:48:cf:6f:e3:cb:55:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:57 2026 GMT
Not After : May 25 08:52:57 2027 GMT
Subject: CN=48E78A7A5D8B4B4B33842BB155902FA32AC0850D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:6a:ea:84:9c:ea:1d:82:fe:65:f4:48:9b:
a7:14:29:bd:ca:f1:68:05:14:80:f4:3b:68:13:14:
b1:6f:79:65:5a:4a:b6:f0:c6:08:70:54:8d:cb:1e:
f4:0b:fe:87:ab:e3:17:aa:ca:5e:05:c7:de:56:9e:
35:7e:04:fe:7f:6d:4d:94:7c:d3:cc:ad:92:ec:7c:
49:ec:77:4f:7b:2c:c1:5b:1a:dc:85:d9:53:3c:53:
63:d5:cc:cf:72:b0:4b:27:bb:29:c1:b5:75:7e:09:
15:fd:7e:42:d4:b3:15:e4:ca:dd:79:f5:fe:b5:c3:
56:cc:6b:e2:9d:55:84:68:e1:12:2b:df:af:7e:04:
59:bd:9d:06:09:27:d0:d4:6d:27:1b:3f:e4:df:fd:
bc:f8:b6:62:f3:82:78:4a:af:b4:da:f7:cd:8d:b9:
2f:d3:b2:9a:eb:09:a7:b9:87:24:14:da:2f:b5:39:
5c:e4:e3:42:68:94:6a:25:a9:63:b8:da:15:82:f5:
d2:a1:bc:1b:22:1d:2c:19:4d:68:53:44:5d:e4:c8:
b8:90:61:8d:b6:bd:a2:a1:c2:e8:a2:0f:67:b5:df:
20:4e:ff:3d:a8:8d:d1:ea:27:a1:35:44:88:ab:3c:
24:3c:e6:75:0d:de:fa:eb:4e:fa:c6:4c:05:6a:b1:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E7:8A:7A:5D:8B:4B:4B:33:84:2B:B1:55:90:2F:A3:2A:C0:85:0D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143763.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a459::/32
Signature Algorithm: sha256WithRSAEncryption
47:74:f6:9a:8e:57:de:02:9d:a7:66:d1:66:e5:22:22:29:f1:
12:65:d9:91:ad:a5:35:04:ed:04:49:0e:5b:3f:10:33:6c:a1:
c4:9e:16:1d:8e:db:b8:96:53:ca:42:08:85:64:30:a0:51:df:
83:bc:e2:51:1c:9a:af:37:31:ae:47:09:52:8c:69:3d:13:8e:
68:80:62:40:26:73:79:31:b6:1a:35:d8:1f:f0:46:5b:5a:ac:
c6:84:e4:a4:e9:4c:20:e0:5d:c2:8b:a9:fd:e0:7e:e6:e5:92:
9c:55:55:99:8c:ad:fe:f5:ba:9c:92:a4:87:59:12:65:ee:25:
47:9e:40:4f:c8:35:43:42:ff:99:ef:b9:22:48:11:da:6f:5f:
78:b7:a5:56:9b:e0:32:b9:68:3c:aa:83:31:da:e4:a4:ce:9d:
0f:6b:72:36:01:d4:78:55:12:1f:db:34:e3:3d:a0:aa:5a:50:
db:89:42:20:bb:bb:d5:bf:61:3c:82:9a:22:65:37:79:0c:eb:
2e:15:8c:21:ad:24:19:f2:c5:68:75:c4:db:26:53:6e:8c:7a:
c5:67:af:94:e5:33:e9:f9:fc:99:6b:64:72:53:2c:95:55:b2:
af:23:fb:dd:91:0e:ca:34:58:2d:49:81:da:68:44:41:0e:86:
d7:7a:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:18 2026 by rpki-client