Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143788.roa
File: AS143788.roa (raw, json)
Hash identifier: 7SuSU4Zcr4h5igH/X2/74LRfYcE6dlABW2Ckozn5nHw=
Subject key identifier: 63:41:66:D1:20:03:34:61:C8:81:C5:6E:D4:9E:21:90:00:32:BE:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 51AB7919AC2547961C7D35224CC15FBD391AC278
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143788.roa
Signing time: Fri 22 May 2026 04:26:41 +0000
ROA not before: Fri 22 May 2026 04:21:41 +0000
ROA not after: Fri 21 May 2027 04:26:41 +0000
asID: 143788
IP address blocks: 240a:a472::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ab:79:19:ac:25:47:96:1c:7d:35:22:4c:c1:5f:bd:39:1a:c2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:41 2026 GMT
Not After : May 21 04:26:41 2027 GMT
Subject: CN=634166D120033461C881C56ED49E21900032BE02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:e6:be:d2:a3:44:f2:87:d2:7a:3f:9d:d4:
4d:e0:c8:63:36:28:8c:76:de:bd:02:20:14:62:ab:
3a:cc:e5:c6:ad:12:22:73:51:a9:60:cf:50:67:2f:
06:d6:fb:86:cd:29:72:f3:41:22:3c:d4:33:2a:1c:
9d:97:66:05:db:93:40:8a:c5:61:18:20:25:54:34:
bf:63:a7:15:a8:a2:ae:e9:e7:c4:3d:6b:ca:37:bc:
bd:2d:a1:0a:ff:41:4b:73:e8:e1:e7:8e:01:f1:2a:
35:29:a1:7b:71:eb:b8:eb:e0:bb:bf:5b:1b:e3:44:
ba:4f:06:ab:6a:56:55:bc:41:dc:e0:5e:8d:10:5f:
19:b0:74:26:61:58:00:01:52:ec:00:8e:29:ed:80:
9c:1b:1e:fd:07:a3:23:0f:81:46:aa:37:0a:03:5f:
5b:42:f5:f4:35:3d:9a:26:82:b3:cd:65:a0:c3:dd:
85:cf:9e:8b:a9:02:e5:3d:08:4f:8e:67:71:c9:49:
d3:03:28:22:48:7e:6e:80:30:94:5c:f8:fd:91:03:
eb:50:32:74:c0:ea:4c:b1:1d:17:c6:20:03:ab:75:
80:1b:6a:41:77:de:66:41:ff:6f:ac:2b:a6:4d:15:
eb:f1:5d:c6:92:cb:7b:43:93:75:3a:b9:32:7b:35:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:41:66:D1:20:03:34:61:C8:81:C5:6E:D4:9E:21:90:00:32:BE:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143788.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a472::/32
Signature Algorithm: sha256WithRSAEncryption
8a:35:e6:53:fb:69:b0:52:c8:86:bd:3a:ac:36:7d:2e:15:e8:
a1:81:e5:bf:be:6f:b3:a9:38:20:a2:ff:6e:aa:3c:3e:5a:54:
91:3d:63:c0:88:d4:01:44:87:58:30:0b:51:46:dc:da:b3:17:
9e:e4:be:6b:e4:e4:44:73:33:02:61:ca:79:be:ae:2a:88:85:
91:7c:27:ff:98:68:1d:5a:7e:ed:12:e8:db:4a:ec:4e:9b:44:
67:59:af:62:9c:31:dc:26:7a:6b:28:1c:da:62:f5:ef:65:5c:
08:fb:df:c2:49:db:91:ea:33:fe:fb:f6:92:09:13:4b:76:35:
29:9e:2b:d6:55:99:66:de:c3:3f:af:f3:4b:ef:aa:1e:d3:1e:
dc:dc:fe:11:f0:a9:c3:fc:8f:ba:05:ca:2e:be:9c:bb:fe:be:
f2:b8:28:ea:d8:1d:36:b7:04:f3:3c:01:35:a0:12:3a:22:d8:
8f:51:2c:a7:af:f5:f0:e3:d9:20:df:00:cf:cb:1f:dd:56:bb:
a4:29:e2:cc:5a:cc:c2:9f:93:c2:5f:56:c2:d8:e3:63:54:64:
ea:6c:6b:4a:e4:5d:20:29:29:68:63:33:1b:e3:c9:8c:1c:f1:
bd:c6:19:a5:ad:7c:9d:06:8d:b0:c6:c8:6f:0d:6e:9f:f5:e4:
2a:22:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:08 2026 by rpki-client