Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143824.roa
File: AS143824.roa (raw, json)
Hash identifier: JzNrAnlYlY3GM0ASL8L8aAB37IKgmcE5M0guqm0U1Is=
Subject key identifier: AF:48:C9:E2:86:55:29:90:F1:8A:17:6D:06:E2:64:3B:6C:87:74:16
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 624E9D13B1A6B4B684196AD582DA724379DD6FC8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143824.roa
Signing time: Mon 25 May 2026 01:38:04 +0000
ROA not before: Mon 25 May 2026 01:33:04 +0000
ROA not after: Mon 24 May 2027 01:38:04 +0000
asID: 143824
IP address blocks: 240a:a496::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:4e:9d:13:b1:a6:b4:b6:84:19:6a:d5:82:da:72:43:79:dd:6f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:04 2026 GMT
Not After : May 24 01:38:04 2027 GMT
Subject: CN=AF48C9E286552990F18A176D06E2643B6C877416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:d7:aa:d7:f8:21:52:ec:60:b9:2a:47:68:
bd:63:56:fc:ff:ea:30:45:1b:a6:4a:7e:30:ba:bc:
84:fd:19:22:73:b3:34:25:e5:fe:23:47:4c:3a:36:
b3:03:eb:b3:2c:c1:18:bb:aa:0b:dd:3d:02:90:61:
b5:67:bb:ca:43:48:59:82:18:bc:d9:74:b6:8a:7a:
6f:4f:6b:9f:06:4c:4c:ec:ba:dd:ee:87:7d:1d:01:
96:67:2c:e7:05:82:d8:f6:f2:d4:c8:1b:bc:98:ee:
4d:1d:39:cd:dd:94:80:3a:2f:f0:f5:e3:ac:26:5d:
0f:8f:d0:0d:f6:25:1b:55:ec:16:05:da:83:b8:e4:
a2:ac:f3:84:8c:6d:65:99:c8:3b:a8:f2:f4:a4:82:
80:6c:cf:e2:fb:4c:39:46:af:97:e8:c5:ac:f4:e1:
ce:62:f3:56:31:61:7c:c7:de:d4:32:ad:50:54:9b:
4a:df:ed:50:75:7b:f8:8f:87:0c:91:84:e9:b1:00:
37:8d:28:aa:33:ea:3d:88:25:29:25:ed:57:f7:f7:
63:02:8d:9d:85:2b:60:14:61:e3:5f:a1:56:82:71:
a0:56:25:ac:e0:f5:26:c6:75:36:51:55:0e:4e:6e:
50:41:34:c3:5b:42:54:03:99:92:be:9b:68:e1:a4:
ff:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:48:C9:E2:86:55:29:90:F1:8A:17:6D:06:E2:64:3B:6C:87:74:16
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143824.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a496::/32
Signature Algorithm: sha256WithRSAEncryption
ac:50:17:17:37:be:e6:18:89:83:57:f4:33:e7:77:90:9a:c1:
4e:17:82:76:75:15:27:7c:3f:d9:44:33:02:7f:9b:a7:53:0c:
9a:72:78:90:7d:4a:b1:0f:78:e6:3f:6f:b0:a5:66:3f:43:88:
35:1a:e5:09:4f:3f:91:d2:37:18:a0:1e:1d:14:2c:f8:d3:49:
af:04:61:e5:16:70:9d:dc:08:7a:74:10:03:6d:85:d4:39:e8:
96:10:37:a7:35:83:42:c7:cc:87:8d:71:f4:f9:92:f3:d5:f3:
08:ea:a3:29:9c:55:ba:20:7d:de:2d:31:5c:9e:32:4f:fe:2d:
3b:77:9e:35:a2:89:44:50:21:3d:8c:a9:85:05:c3:8f:49:94:
87:7b:54:7d:3b:1a:a2:e0:54:20:22:71:d0:9a:5f:74:1a:c3:
55:a6:be:12:73:18:bf:73:36:f9:2d:a9:85:ab:cc:9e:32:91:
a3:72:2d:a0:09:35:5c:59:9d:e0:46:7a:a8:80:e9:90:a9:74:
1b:46:af:57:86:40:05:bd:ad:33:35:8f:27:7c:b8:7d:ed:0b:
25:3e:72:44:97:a5:e6:8b:c6:57:18:cf:a3:6e:5f:1a:29:e9:
36:17:9d:09:31:8e:ae:08:77:cf:35:61:0c:b5:b9:28:65:35:
0d:7e:4a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:23 2026 by rpki-client