Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143828.roa
File: AS143828.roa (raw, json)
Hash identifier: tVPfVP1bF+J5ejp95PPCx/iUKVlS5msb+hHb4SDJwxc=
Subject key identifier: 4A:6E:A0:E9:E3:BA:BE:E5:9E:5F:70:73:5F:36:99:D5:00:0D:83:92
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B57BE05FABA125B8194D9711AC566D3F5808068
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143828.roa
Signing time: Fri 22 May 2026 06:45:59 +0000
ROA not before: Fri 22 May 2026 06:40:59 +0000
ROA not after: Fri 21 May 2027 06:45:59 +0000
asID: 143828
IP address blocks: 240a:a49a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:57:be:05:fa:ba:12:5b:81:94:d9:71:1a:c5:66:d3:f5:80:80:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:40:59 2026 GMT
Not After : May 21 06:45:59 2027 GMT
Subject: CN=4A6EA0E9E3BABEE59E5F70735F3699D5000D8392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:58:cd:fc:da:71:07:ae:8a:66:27:a7:6f:
cc:2c:3a:e9:fd:43:6f:53:82:21:21:2c:f3:8c:89:
04:44:e7:14:2c:ae:75:73:fe:0a:44:7d:bc:ea:4e:
63:9b:e7:9d:9a:7c:1f:e6:43:e5:37:62:c4:c1:f4:
b4:e2:d7:36:21:56:67:63:34:3a:79:68:44:7d:d9:
70:d9:f5:5d:91:9d:1d:12:b4:7a:d9:03:01:c4:d2:
e5:7e:b3:24:1a:b8:f4:6e:3c:c2:fe:3b:a5:f0:ca:
de:55:85:13:be:da:b8:0e:c1:c4:db:d0:c2:db:8a:
45:4d:80:aa:2b:dc:51:e3:8b:7d:00:54:04:87:d3:
17:01:93:36:6a:b3:90:dd:9e:0f:34:c1:03:80:8e:
c0:97:ab:bd:6c:5a:46:80:96:a5:ab:bf:65:53:01:
38:db:5a:70:13:96:18:54:72:97:c6:03:2c:78:eb:
5d:73:b6:78:5a:3c:d7:18:9b:70:0a:c5:f0:fc:49:
5a:7e:b6:14:ba:ef:6a:d8:23:7c:66:28:9c:8c:4c:
bd:a8:39:d2:48:c9:1c:4c:b3:ad:28:4c:30:7b:51:
12:88:15:de:9b:10:8c:29:33:4e:47:46:d8:ba:1d:
a7:58:eb:1f:fc:81:77:d6:22:52:5d:e2:7f:d0:86:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6E:A0:E9:E3:BA:BE:E5:9E:5F:70:73:5F:36:99:D5:00:0D:83:92
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143828.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a49a::/32
Signature Algorithm: sha256WithRSAEncryption
0c:18:fd:da:89:eb:39:7e:fa:8c:ed:7f:29:43:c9:2d:a3:95:
45:08:6b:97:35:c5:d2:98:43:6f:d3:2a:6d:00:ab:80:80:a1:
8d:6d:22:3c:91:d6:90:49:10:c7:23:f2:b7:22:00:5b:27:09:
04:10:fa:8a:c9:44:d9:1d:d4:0c:cd:aa:05:b9:2f:33:03:11:
7a:89:26:3a:92:3c:4b:62:d1:fa:0b:0d:73:a5:54:f5:ff:bd:
b5:57:54:61:f4:c3:c6:e4:9c:2d:a8:fb:9e:f0:50:2a:24:dd:
38:6e:b9:1a:0a:58:2b:33:25:10:7d:7e:7b:e7:6b:5c:57:9f:
b8:48:fb:95:cc:8f:f5:4e:f7:04:14:5f:a5:6f:09:49:06:af:
40:79:0b:f6:d1:0c:3b:00:87:ca:7e:f8:ee:2b:8f:d0:ca:ec:
08:f4:dd:a1:d0:5e:76:ad:a4:d6:92:f3:66:b1:61:18:2d:7b:
12:32:99:4d:76:de:f9:85:0e:6f:e0:46:93:15:b7:c8:69:0b:
5a:cf:13:43:76:cd:f9:21:9f:4d:55:41:b7:5a:a3:cc:f6:78:
85:2b:1d:75:59:bf:ef:4a:cb:b8:ed:05:17:b0:8f:4b:87:06:
78:eb:8c:9c:ca:b8:1a:3a:ff:f8:0f:45:53:2c:58:d6:df:d0:
85:fe:4e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:54 2026 by rpki-client