Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143773.roa
File: AS143773.roa (raw, json)
Hash identifier: YjtrXjh9FMURuy4wraN3n0JaBuZYoyEsnbPErwyuyls=
Subject key identifier: A0:01:0B:BD:78:00:E3:FD:32:C0:B9:BE:26:22:1E:93:5A:A8:C6:FA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4CB14ECB6282A80023678AD8AB1FB995756C2A10
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143773.roa
Signing time: Fri 22 May 2026 07:40:50 +0000
ROA not before: Fri 22 May 2026 07:35:50 +0000
ROA not after: Fri 21 May 2027 07:40:50 +0000
asID: 143773
IP address blocks: 240a:a463::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b1:4e:cb:62:82:a8:00:23:67:8a:d8:ab:1f:b9:95:75:6c:2a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:50 2026 GMT
Not After : May 21 07:40:50 2027 GMT
Subject: CN=A0010BBD7800E3FD32C0B9BE26221E935AA8C6FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:61:bd:6d:6a:4e:be:2f:b8:98:81:da:c5:e2:
0b:fc:28:10:a8:a0:05:80:31:11:8b:02:e3:78:29:
a6:40:82:30:1d:bb:f2:96:fa:32:2d:81:ad:a5:80:
5b:a2:37:b3:95:c5:37:8d:5d:4c:a1:b1:09:ec:a2:
1d:d9:58:21:3a:28:3f:ba:af:5c:1d:cd:14:2e:a6:
9a:d7:51:a3:62:5a:43:f2:2f:ca:1d:5c:ff:59:f3:
3f:8b:a2:5c:41:a6:95:7f:4d:55:61:fd:d7:50:85:
b7:cd:93:45:e9:94:bc:da:7a:9b:b7:e8:28:17:d9:
db:5f:73:cb:3d:f6:a6:b2:c9:6e:66:09:8f:ff:5b:
95:6e:92:70:ef:28:e5:e3:39:60:93:bb:29:07:22:
b7:19:18:b6:63:c8:dd:4a:8f:ab:55:d4:a9:39:33:
cb:cd:28:4a:3b:05:6d:08:aa:8b:ea:2f:a4:b7:26:
5b:e2:80:75:3a:ee:41:40:a8:9d:df:00:ad:e1:4c:
8d:93:dd:96:cf:25:1c:94:69:5f:f1:4c:bd:7e:e7:
1b:6e:51:b6:d4:e2:9c:1b:84:66:69:45:5d:3c:aa:
82:ec:ab:19:7e:84:69:3f:e0:71:14:4b:c5:0b:25:
38:01:e7:4b:8d:e9:a6:c9:fb:34:f2:c0:73:fb:46:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:0B:BD:78:00:E3:FD:32:C0:B9:BE:26:22:1E:93:5A:A8:C6:FA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143773.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a463::/32
Signature Algorithm: sha256WithRSAEncryption
b2:3e:88:73:80:3a:c4:47:12:c0:39:d9:ae:f9:57:69:c9:3d:
41:a7:a2:c3:37:90:7e:d2:46:56:68:e6:84:29:a4:73:a7:4b:
17:6e:8c:e2:af:51:82:df:82:87:63:f7:a2:d1:56:30:66:16:
d0:6f:cf:ed:be:7d:ce:bf:e2:59:10:d0:8c:30:ae:95:5c:59:
75:f5:f0:c6:a4:b5:2a:3e:90:5f:5a:dd:76:fb:f0:67:a9:ec:
ff:46:2d:2d:72:b3:3b:3c:cc:57:69:e9:f2:5c:58:1d:65:51:
10:dc:96:72:38:b9:89:b1:e7:91:f5:3c:92:cc:78:92:f6:63:
ba:a1:8e:04:49:b7:75:e5:c8:fd:f0:da:68:f2:98:f0:52:53:
a7:65:41:db:59:ef:db:3a:5a:2a:40:6d:95:67:c6:c4:ab:a3:
be:27:2f:53:b3:25:c9:aa:5e:62:c9:ee:5c:fe:08:87:8e:9e:
a7:f1:41:9b:d9:83:4a:5c:52:52:15:d7:97:cc:78:9c:94:be:
1c:6d:fa:19:43:04:d7:10:4b:19:ad:ef:75:f4:e7:3e:14:ab:
9f:3f:f3:de:b3:23:39:80:12:b3:fe:3f:86:10:f0:95:29:9e:
4e:0a:9d:ef:e7:66:42:a6:c4:34:d2:6f:68:23:d5:ff:ff:72:
ca:18:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:02 2026 by rpki-client