Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143799.roa
File: AS143799.roa (raw, json)
Hash identifier: YEr1Nb9Y9dGOtONHPGpx6DYkVNpDUrdQGgFnjhi0oOY=
Subject key identifier: 27:A5:F6:D4:67:7F:AB:63:FA:AE:D3:96:7F:89:91:08:0B:16:64:69
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1407DD953FA89A352F254DA7FC5C68B255D8DD32
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143799.roa
Signing time: Fri 22 May 2026 06:58:42 +0000
ROA not before: Fri 22 May 2026 06:53:42 +0000
ROA not after: Fri 21 May 2027 06:58:42 +0000
asID: 143799
IP address blocks: 240a:a47d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:07:dd:95:3f:a8:9a:35:2f:25:4d:a7:fc:5c:68:b2:55:d8:dd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:42 2026 GMT
Not After : May 21 06:58:42 2027 GMT
Subject: CN=27A5F6D4677FAB63FAAED3967F8991080B166469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:ff:eb:8b:be:ed:91:f1:01:c1:f8:75:fb:
76:16:28:d1:dd:dd:ae:69:06:49:ec:34:f5:73:5a:
bd:c4:e5:0c:f0:9b:8d:8b:3b:08:bc:9d:f7:c8:ef:
9e:ed:bd:54:20:68:71:af:f2:26:14:f0:0f:0a:9b:
53:36:f5:0b:77:5f:03:5f:29:8f:1d:86:07:ab:5f:
11:7e:a2:8a:c7:36:35:f8:f5:ff:bb:ff:40:74:51:
1c:21:24:d4:c8:74:66:44:5f:3f:5d:7c:36:e4:b6:
ac:0e:25:5f:5c:c2:e2:63:d9:2f:e0:a8:ad:91:fc:
9e:a5:9c:ba:84:c4:45:fc:e3:90:0b:9f:54:e8:70:
33:40:4e:08:48:f7:d3:f1:09:a8:66:5f:2f:94:c4:
f9:f0:0a:a3:a4:78:e6:b5:d6:2c:ca:ab:dc:d8:da:
8f:34:17:f3:cb:8c:8e:06:b8:0f:8e:ec:50:3b:87:
0f:bf:4e:81:c0:f8:7f:9c:08:e7:27:fc:19:1e:27:
1a:f6:b4:41:6b:ed:34:12:45:f5:d8:06:74:c9:e5:
ca:b4:30:57:40:92:0f:39:3d:38:21:ad:00:42:1b:
40:23:28:5e:32:07:d7:62:43:e1:42:92:72:8e:35:
24:f7:be:e8:13:71:90:19:df:0f:00:d0:5c:37:41:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A5:F6:D4:67:7F:AB:63:FA:AE:D3:96:7F:89:91:08:0B:16:64:69
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a47d::/32
Signature Algorithm: sha256WithRSAEncryption
18:ff:8b:a7:49:aa:3e:13:50:42:be:92:d4:6e:36:33:64:de:
82:af:a0:0d:96:e8:15:c1:10:72:44:44:b1:35:d2:a9:4a:88:
64:61:ba:63:5e:4a:03:79:2b:9e:d4:8e:64:c5:78:ee:73:1d:
1d:34:e1:d9:08:9a:8a:f6:cb:b4:97:38:e7:fb:f7:fc:e8:26:
59:89:49:86:7c:16:e0:92:2d:6f:30:ff:4b:71:ab:58:65:7f:
70:cf:04:97:e1:41:9b:71:9a:d4:7d:ab:2f:f1:6d:33:ca:8e:
6f:14:6b:95:26:dc:43:0d:46:65:e4:85:73:57:3b:a2:e9:3b:
5e:13:ce:b2:ed:39:3f:95:18:46:1b:24:88:eb:5f:91:89:cc:
37:dd:ba:8a:43:01:e9:10:7f:37:94:cb:84:a3:44:de:68:ff:
1b:f8:59:3b:08:92:56:48:91:8d:bb:49:c8:4d:18:f8:47:78:
84:fb:df:f3:0e:db:6a:74:4d:76:81:99:5b:0e:fa:80:1a:0c:
19:ca:ff:49:5d:ed:e9:2f:07:1f:cc:d3:96:35:10:bf:69:cc:
38:33:a1:44:cb:87:39:ef:2a:26:71:66:dc:65:a6:94:5c:cd:
64:36:29:00:19:51:98:b2:09:40:dc:4d:ba:e5:94:c2:e9:3d:
6a:e4:dd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:24 2026 by rpki-client