Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143831.roa
File: AS143831.roa (raw, json)
Hash identifier: 4zb0b5fIhFawLD/mSQCoore+Ib+dvb7E8fSgGcxoW+I=
Subject key identifier: 7B:27:4E:84:FE:FB:07:73:AB:32:EB:93:F4:22:87:40:A5:B5:E2:1A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6B1A13124281449E90B2947DED643C8447C551E1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143831.roa
Signing time: Mon 25 May 2026 01:38:18 +0000
ROA not before: Mon 25 May 2026 01:33:18 +0000
ROA not after: Mon 24 May 2027 01:38:18 +0000
asID: 143831
IP address blocks: 240a:a49d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:1a:13:12:42:81:44:9e:90:b2:94:7d:ed:64:3c:84:47:c5:51:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:18 2026 GMT
Not After : May 24 01:38:18 2027 GMT
Subject: CN=7B274E84FEFB0773AB32EB93F4228740A5B5E21A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:a3:f4:44:95:93:03:6a:f1:68:7b:f4:30:
4a:71:27:e6:24:45:80:e2:f4:e5:f4:3a:40:33:e5:
9e:4d:a0:47:e7:c2:5f:b7:75:96:89:66:eb:87:f1:
d4:80:34:bb:7e:e8:a5:bd:fa:60:39:30:72:e7:02:
3e:c8:36:71:8e:c8:a2:9f:41:8a:f7:af:11:cc:3b:
7c:f7:b5:06:66:96:ac:5b:fd:14:37:d3:d0:3b:0c:
05:0d:0d:f1:cf:dd:b0:b5:81:b9:3c:3c:82:61:42:
74:26:2a:65:d9:08:5b:2b:9f:90:18:79:b6:42:6c:
08:75:10:57:de:5f:34:8e:71:1a:cb:b5:34:cd:63:
7e:2e:f0:c6:22:1d:0a:da:7c:0a:d7:29:55:cb:96:
60:30:89:8b:51:78:56:25:1e:77:26:c2:54:d7:81:
1d:cf:14:ee:88:e1:5f:41:0d:ac:ef:b1:43:60:20:
56:bd:2b:81:fd:74:ae:e1:31:f5:e8:6e:a8:3b:f4:
d1:a7:1a:b9:dd:8a:27:f2:c6:75:7a:57:48:8a:79:
82:9e:4f:32:35:2f:de:54:48:42:83:ba:27:80:15:
b4:3e:ea:25:96:f6:e3:97:c9:2e:09:84:45:78:8f:
d7:27:a9:e9:e1:91:a4:52:83:f8:2d:e5:d8:83:d4:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:27:4E:84:FE:FB:07:73:AB:32:EB:93:F4:22:87:40:A5:B5:E2:1A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a49d::/32
Signature Algorithm: sha256WithRSAEncryption
5c:88:01:97:27:0a:7c:5d:6c:c0:3d:73:b3:14:57:f2:fc:97:
4e:6c:f0:ce:50:f8:f6:bd:07:a8:80:21:60:df:df:77:ca:73:
e6:b6:c8:2c:2b:ed:b5:01:9e:dc:e0:88:42:04:71:8f:95:02:
21:00:31:13:0e:7d:c1:63:98:e2:4e:35:67:dd:86:16:0e:76:
e9:be:8c:08:dd:06:f5:9c:0e:26:cf:14:f3:8c:7c:62:de:ab:
97:f2:69:70:cd:32:4c:07:b0:38:cf:42:a2:18:f9:82:13:a8:
16:51:98:68:73:76:bc:ca:e2:4c:9f:b0:6f:47:b8:24:bc:52:
77:14:65:ae:6d:89:4f:9f:d0:8b:54:c5:ea:e6:0c:d8:60:63:
11:cf:af:9d:af:d9:0c:fb:d6:49:73:c9:38:f3:42:79:61:f5:
03:70:9e:be:ea:55:c9:54:1c:88:9f:49:48:54:19:21:df:90:
64:b9:16:6c:f1:ae:a8:0f:58:a6:5a:51:3f:d3:f7:be:e2:97:
19:1f:b8:e1:d6:e5:b5:80:21:b2:4a:7f:c3:24:2f:5d:7c:e5:
dc:77:b9:9b:a8:5b:0c:96:1f:20:82:a6:eb:f7:fd:bb:a7:61:
f9:5f:62:6e:07:3b:9e:6c:d7:be:93:07:07:40:a5:ae:30:f8:
51:bd:3d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:14 2026 by rpki-client