Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143827.roa
File: AS143827.roa (raw, json)
Hash identifier: 8BSQxML6lBXaV2pYfysP8JwgssX50FnrpxsfWMu4/xc=
Subject key identifier: 4E:84:3E:1C:7E:4B:56:F8:EF:F8:4F:AF:18:A4:3D:78:07:22:04:53
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F206BDF927CF946888C950DAC655B5BF02A6754
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143827.roa
Signing time: Fri 22 May 2026 06:27:50 +0000
ROA not before: Fri 22 May 2026 06:22:50 +0000
ROA not after: Fri 21 May 2027 06:27:50 +0000
asID: 143827
IP address blocks: 240a:a499::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:20:6b:df:92:7c:f9:46:88:8c:95:0d:ac:65:5b:5b:f0:2a:67:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:50 2026 GMT
Not After : May 21 06:27:50 2027 GMT
Subject: CN=4E843E1C7E4B56F8EFF84FAF18A43D7807220453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ef:61:53:a2:b4:ee:36:74:6e:52:1c:01:55:
4f:8e:e5:0d:1b:02:a2:00:81:58:bb:ad:f8:5e:d4:
78:f0:8f:bb:67:7b:67:24:29:f8:70:09:87:cf:0c:
5e:4f:d6:6d:37:16:d7:92:ce:27:ec:f6:e6:c0:65:
0d:31:62:e8:e6:6f:90:da:5d:0f:3b:50:7f:af:ce:
70:eb:31:8a:64:b7:57:46:46:74:77:63:80:dd:05:
81:38:b6:e5:6e:3d:ff:0c:07:63:8f:65:7b:fa:02:
47:ed:a2:92:c4:a1:38:d7:74:0b:3d:13:0f:e0:bd:
7a:13:fc:69:63:28:13:1d:40:69:19:41:49:39:b3:
e5:5d:d6:da:a2:db:c3:d2:8e:a4:13:9c:74:5e:4f:
0b:be:e3:be:52:d6:5e:45:06:a9:76:7d:f8:fb:25:
1b:92:f5:27:26:a3:c8:7b:b0:de:a1:51:0b:e2:1a:
f8:6b:b2:2b:c1:3e:37:01:2a:50:f7:3e:38:dc:82:
1f:7e:80:bf:8f:b2:54:7e:e6:70:83:77:ba:73:16:
2f:25:2c:5d:72:eb:6f:41:07:c7:65:f8:d7:fe:60:
27:4e:07:f5:d7:f0:f9:20:91:bf:f7:16:a9:b1:e0:
db:52:ba:46:87:c6:26:c2:1e:73:99:39:3a:59:31:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:84:3E:1C:7E:4B:56:F8:EF:F8:4F:AF:18:A4:3D:78:07:22:04:53
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143827.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a499::/32
Signature Algorithm: sha256WithRSAEncryption
4a:38:1c:0c:20:fe:37:81:81:39:f9:a3:28:45:6f:d3:83:12:
46:00:73:ef:51:3d:cf:a5:54:a5:75:8a:2a:68:a7:e4:33:7b:
a8:7e:3f:ec:0a:c8:5b:a1:55:b4:8a:cb:c6:9e:29:a0:8d:7d:
11:3b:de:ca:2d:ff:16:b3:21:cb:c8:44:2c:26:d1:47:bc:2b:
ba:6e:18:e6:fa:96:47:e3:3d:e5:6c:4f:89:0e:99:d1:97:f3:
96:9f:2c:01:18:fc:96:e1:81:54:24:62:17:b4:c4:97:34:b8:
62:61:87:1c:ee:2a:f4:9f:b8:a8:7d:bf:f5:36:08:5d:31:fa:
54:07:b5:71:e5:fa:4e:7b:dc:b5:66:19:d0:29:36:67:be:9c:
5a:25:ca:d8:49:7d:e6:48:4d:29:2c:98:e4:97:c7:ff:89:44:
d6:8e:0b:20:19:8c:ea:45:43:3c:67:e1:58:7b:96:47:0b:38:
f6:a7:fd:58:75:44:c6:db:0e:74:90:d5:90:8e:18:da:65:26:
cf:d8:47:e6:0e:af:25:55:94:b2:b0:e7:b4:93:a4:07:f6:f2:
04:6c:77:a6:c0:79:d8:de:2a:f2:08:d0:41:9c:ce:7a:a0:05:
45:90:25:84:86:42:e1:7d:c9:ff:07:c7:ff:eb:36:68:1b:45:
b3:d2:8f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:08 2026 by rpki-client