Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143796.roa
File: AS143796.roa (raw, json)
Hash identifier: L9hsX9OpVWiYpcfK+YxseB9m9MeAmOKfR0rW0lVo6qU=
Subject key identifier: 92:7F:D2:7C:2B:A4:C5:BF:50:3F:99:66:5D:60:A5:2C:D7:02:C8:78
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5D50656CE3C515B54D3377C6362BD80A731564FF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143796.roa
Signing time: Mon 25 May 2026 06:28:26 +0000
ROA not before: Mon 25 May 2026 06:23:26 +0000
ROA not after: Mon 24 May 2027 06:28:26 +0000
asID: 143796
IP address blocks: 240a:a47a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:50:65:6c:e3:c5:15:b5:4d:33:77:c6:36:2b:d8:0a:73:15:64:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:26 2026 GMT
Not After : May 24 06:28:26 2027 GMT
Subject: CN=927FD27C2BA4C5BF503F99665D60A52CD702C878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:3e:6a:82:d3:32:48:b8:a8:5f:dc:69:e2:
38:34:12:79:9b:b3:74:9e:7d:7f:3e:ee:71:1d:f0:
69:fd:1a:27:4e:14:7c:c3:f5:a6:1d:b4:8a:9b:b6:
0d:75:ed:ea:84:0a:ea:a9:7a:98:c9:28:57:8d:85:
a7:2b:32:2f:cb:22:ea:e4:9c:59:c4:d1:8d:6b:45:
42:27:a6:72:bc:0f:67:69:01:05:f9:c1:cb:99:15:
7c:b6:c5:ca:7a:5c:3a:32:99:8f:41:f3:ba:a1:41:
e5:7a:b2:e4:c3:0c:95:83:c6:b5:e8:c1:21:b8:da:
e7:18:a3:7e:5e:1c:17:8d:e4:a4:a7:1d:43:e9:f9:
0c:e0:68:7b:3b:c7:81:a5:af:16:0d:83:80:36:b7:
57:80:9c:bf:83:71:1e:9e:2b:e4:a8:e0:6f:3c:6e:
f1:ad:5c:6a:e3:d3:6b:0c:81:2f:69:00:8a:83:17:
37:bd:76:f7:dc:51:93:13:82:06:84:53:92:2c:da:
01:f7:5d:d9:ce:09:9d:bf:5d:8f:2f:42:be:13:c1:
e2:85:c2:06:5a:96:41:7d:ba:0f:a1:e4:b9:f0:2b:
f2:70:cc:3b:bf:6d:91:e9:08:1c:6b:61:27:65:cb:
74:1f:38:aa:57:b4:d7:59:b1:4a:c0:57:99:ef:65:
f4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7F:D2:7C:2B:A4:C5:BF:50:3F:99:66:5D:60:A5:2C:D7:02:C8:78
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143796.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a47a::/32
Signature Algorithm: sha256WithRSAEncryption
20:e2:85:30:27:57:fb:e0:31:0c:fa:21:20:c1:61:aa:78:9b:
fb:13:a5:d7:13:0d:50:e6:45:56:f2:11:a9:cf:8f:19:b2:ce:
57:62:2c:88:2d:f2:54:0b:79:ee:9f:e7:2e:ce:e3:73:36:88:
4c:55:bd:ee:d0:57:b5:c4:ab:93:8f:d0:21:25:df:6d:08:c0:
03:36:92:16:f1:e9:75:da:e4:d8:93:52:e1:be:f8:63:67:78:
c6:13:6c:48:e1:ba:03:7d:56:58:d6:a2:a6:bb:f7:69:20:49:
1d:50:17:25:2c:0f:1f:ce:f1:73:3a:ef:89:cf:55:0b:fc:4a:
b5:af:b5:6f:0d:91:49:6f:47:09:0a:7f:39:df:62:9f:57:8b:
90:03:05:bd:40:1a:41:d1:fa:f9:89:65:a6:a8:64:b4:d0:01:
6f:dc:a6:b4:80:76:d5:d9:8d:7a:5a:65:af:cb:65:5d:60:ac:
39:af:d9:bb:74:f8:18:25:4b:21:77:7b:fa:58:8d:cb:86:75:
46:fd:c1:c2:7a:9e:68:b5:71:a8:97:6f:7c:79:6a:83:c7:75:
36:64:8c:2b:9b:7a:93:d2:c3:5a:af:13:4a:64:06:08:9c:b2:
27:cb:d8:88:d7:e0:9d:7f:7a:3c:ff:9b:38:dd:c9:fe:e1:e7:
31:09:9a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:21 2026 by rpki-client