Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143779.roa
File: AS143779.roa (raw, json)
Hash identifier: 9Puw7nmkLgBQlE02vStTdunFr0oWr7TItP09j4qPzmM=
Subject key identifier: BC:23:89:D3:CC:C3:5E:BB:31:0C:D1:EA:44:BA:40:0C:97:6A:52:34
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D733AE5FEE8A7F244F4EC46DA9A0B0B443299DB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143779.roa
Signing time: Fri 22 May 2026 04:08:29 +0000
ROA not before: Fri 22 May 2026 04:03:29 +0000
ROA not after: Fri 21 May 2027 04:08:29 +0000
asID: 143779
IP address blocks: 240a:a469::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:73:3a:e5:fe:e8:a7:f2:44:f4:ec:46:da:9a:0b:0b:44:32:99:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:29 2026 GMT
Not After : May 21 04:08:29 2027 GMT
Subject: CN=BC2389D3CCC35EBB310CD1EA44BA400C976A5234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:4d:bc:8f:b4:bc:24:19:9a:48:f9:bd:93:
e0:08:4b:b9:55:ed:6c:78:22:6b:05:84:69:8e:f8:
7b:ab:4d:69:ce:42:0a:09:cb:48:1a:87:27:70:fb:
c3:3b:bd:a3:3d:75:1e:5b:2c:72:87:4a:77:a6:f3:
2c:08:a1:e9:be:1f:a6:04:67:94:ae:50:11:8b:a7:
e2:cb:e5:bc:7c:ef:d8:89:32:f5:a5:73:23:ed:93:
38:21:ad:47:2f:52:73:44:e7:af:da:fb:0d:9a:b4:
56:a2:3f:7d:27:25:a3:e2:05:1d:f7:1d:7d:f3:4a:
d8:59:02:cd:c4:24:5c:8c:23:4b:42:da:b0:c8:0e:
ca:90:b4:31:55:a9:01:26:9f:e1:f1:b5:13:ca:8c:
b4:fc:d2:6d:e4:15:93:bb:a7:ed:87:53:bf:f9:9a:
2f:06:c3:2b:27:13:c7:f0:20:c7:ae:1b:5c:e5:46:
fe:5c:4a:df:95:c3:b3:44:63:e5:23:6a:41:99:dd:
c0:93:c6:4e:1d:b9:c3:92:b3:0d:e4:6b:03:03:85:
a3:7c:6f:9c:77:ce:a0:ff:c0:4f:56:ee:c0:45:05:
3f:f3:9d:ee:ab:bb:9d:32:93:9e:61:2f:b7:fb:69:
8f:14:7b:33:6a:f4:6e:2a:cf:a3:47:47:0c:3c:89:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:23:89:D3:CC:C3:5E:BB:31:0C:D1:EA:44:BA:40:0C:97:6A:52:34
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143779.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a469::/32
Signature Algorithm: sha256WithRSAEncryption
39:13:7e:8c:78:ca:ef:d0:6f:d0:ab:26:1d:4b:ee:b1:25:97:
ce:76:c0:70:e2:e4:76:98:2a:c6:20:89:e7:19:53:01:9b:ba:
f4:c9:7a:8a:fc:51:41:e4:f5:5e:29:82:f0:85:e2:f3:60:4b:
4d:bf:4c:96:b4:ed:b6:19:c9:50:41:a5:6e:32:40:0e:2f:34:
f8:bb:f8:4e:35:97:c0:8f:fd:2d:e0:9c:15:64:d1:18:3c:f2:
11:2d:8d:2d:5a:ee:4f:5d:a2:21:3a:28:56:61:85:55:21:cc:
03:12:61:e4:b3:6b:12:45:97:b9:8b:da:86:f5:cd:be:d1:97:
ca:e9:97:10:cd:ba:2c:25:fa:c4:6f:34:fd:1a:da:98:88:d4:
bd:56:07:98:15:dc:e3:57:11:b1:75:bc:0b:b5:d6:35:a2:1b:
cb:88:bd:e8:7c:e1:e5:e4:fa:06:7b:8a:ff:a8:87:f5:e5:95:
87:78:3c:e3:32:fe:95:87:eb:1c:1f:81:91:8f:95:21:a1:0b:
16:40:91:59:3f:57:c3:f7:d9:ba:c7:55:4c:12:2d:ce:14:72:
e0:ad:64:b4:2f:bd:1a:47:ff:7c:d3:8f:a9:19:c4:57:cd:89:
97:bd:9c:19:69:27:9a:41:e2:f0:3b:2f:93:b7:34:f3:47:f9:
8b:63:4f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:31 2026 by rpki-client