Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143821.roa
File: AS143821.roa (raw, json)
Hash identifier: Fr0CrUEyH/dhz1ZyeqFn68A2O/FnhVkeqzr1JOCACNc=
Subject key identifier: 9D:1B:6F:79:35:60:9F:36:B5:B7:D5:4C:84:3D:F3:F7:47:B5:3F:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7AF919E20FB896AF234FDFB14A34CBE69BA3A4DF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143821.roa
Signing time: Mon 25 May 2026 06:28:32 +0000
ROA not before: Mon 25 May 2026 06:23:32 +0000
ROA not after: Mon 24 May 2027 06:28:32 +0000
asID: 143821
IP address blocks: 240a:a493::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f9:19:e2:0f:b8:96:af:23:4f:df:b1:4a:34:cb:e6:9b:a3:a4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:32 2026 GMT
Not After : May 24 06:28:32 2027 GMT
Subject: CN=9D1B6F7935609F36B5B7D54C843DF3F747B53FD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:05:3a:75:97:eb:aa:a8:da:f4:0d:7f:4e:
f7:a2:1a:3c:3c:b7:62:e6:57:40:7d:3c:d6:cc:14:
ad:53:7d:42:cf:6a:78:bc:e7:b4:17:1b:78:02:94:
db:02:0e:5e:3c:77:a0:39:3e:c1:f0:bb:93:ad:ac:
0c:5e:e5:d2:f7:51:35:01:8f:19:87:cc:a2:d1:65:
58:a7:92:c1:7e:02:d2:d0:77:97:0f:22:d2:6c:8e:
b8:1c:44:7a:12:3a:3f:89:ee:6a:92:9b:dc:bf:5e:
e9:b0:8d:e7:d7:f2:77:1f:67:ad:37:b2:1c:4c:e5:
97:fa:3f:e6:5e:d5:b0:4f:c6:b9:ce:49:52:4a:2e:
51:70:a3:0b:26:00:b9:21:d8:a5:ca:ef:8b:51:ca:
17:75:7c:d8:b8:fa:bb:c4:fa:be:52:fd:0f:58:4a:
f3:23:88:b4:bc:30:3e:ac:ef:19:6f:f3:39:7a:3c:
2c:cd:a9:23:e1:bb:d6:03:04:7d:b3:ae:61:a1:13:
e7:d0:8a:d6:44:48:4c:7a:a4:ff:fb:60:6d:6f:33:
e2:93:3c:33:b8:14:eb:5c:ce:37:30:ce:b7:17:9a:
11:e2:26:ca:b7:3b:9d:ff:78:f8:7c:cb:81:76:8a:
16:2b:42:20:94:65:1a:85:77:a5:55:d3:39:99:90:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1B:6F:79:35:60:9F:36:B5:B7:D5:4C:84:3D:F3:F7:47:B5:3F:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143821.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a493::/32
Signature Algorithm: sha256WithRSAEncryption
4f:fd:78:99:71:e7:b3:15:fc:33:93:d7:48:5c:43:37:06:0e:
8a:df:53:12:c9:c2:97:22:25:79:68:06:50:69:b5:83:5d:bb:
d0:ee:b8:29:6f:77:cb:8a:1f:84:2e:c3:44:3a:0b:52:ff:09:
83:5e:a2:09:2e:cb:87:08:3d:6d:e2:6d:71:6c:f2:22:e6:b4:
7d:56:19:b9:c2:a7:d3:96:38:82:82:f7:7d:98:7a:b7:f0:ff:
fd:42:56:af:67:e5:f2:95:84:fe:31:96:98:a2:16:de:98:8c:
07:30:1f:b7:95:54:28:95:02:0e:2c:3f:e3:c8:b2:6d:80:47:
1a:dc:22:ac:e4:83:67:34:d7:55:8c:af:b2:1b:19:bc:c6:49:
53:eb:07:f0:90:aa:84:2d:59:e0:2f:72:87:ac:fd:dd:13:e1:
2e:d9:1b:12:af:c3:13:5c:95:88:27:4c:3f:dc:1d:61:5d:f3:
2a:8d:ef:76:ad:fd:f8:7d:4c:50:07:7c:8d:89:83:f2:d4:a9:
c7:dc:11:e6:3e:ca:e7:a1:4e:e5:8b:1f:8a:a5:13:9e:47:50:
71:39:3e:dd:ef:e8:e0:c3:9e:27:50:4e:32:45:bf:ff:97:56:
03:b5:c2:59:a7:f4:83:85:fc:46:3f:29:07:e8:52:d7:b5:d2:
ce:9a:db:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:55 2026 by rpki-client