Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143833.roa
File: AS143833.roa (raw, json)
Hash identifier: faASqRCBiGjLLKkoqTRN/xv998UUpIiCbzpWFLVCb3I=
Subject key identifier: AC:F1:23:8D:ED:2A:A0:FA:E6:FF:2B:6D:6E:5C:EC:3F:56:7B:A6:E6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5A783FE9E0240268D8C22EF2D39BF86723D730D6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143833.roa
Signing time: Mon 25 May 2026 06:48:47 +0000
ROA not before: Mon 25 May 2026 06:43:47 +0000
ROA not after: Mon 24 May 2027 06:48:47 +0000
asID: 143833
IP address blocks: 240a:a49f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:78:3f:e9:e0:24:02:68:d8:c2:2e:f2:d3:9b:f8:67:23:d7:30:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:47 2026 GMT
Not After : May 24 06:48:47 2027 GMT
Subject: CN=ACF1238DED2AA0FAE6FF2B6D6E5CEC3F567BA6E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:90:a1:dd:dd:02:fe:4a:86:3a:1c:c6:b3:
3e:71:ad:fa:16:32:5d:d5:72:1b:98:70:66:5d:27:
27:26:52:2a:3b:de:c4:cc:06:6f:89:a7:19:64:c4:
24:a7:12:96:d9:fa:a1:f6:30:b4:69:0e:53:f7:be:
1f:7f:f8:4a:f6:66:36:a7:b3:9e:b3:7b:0a:d3:4c:
c5:9d:2a:e9:90:0d:ca:7e:b9:8a:b5:59:3e:b2:18:
64:53:c6:9f:5c:80:d4:8f:de:02:59:c3:1a:cd:ac:
8c:e6:24:a9:65:9d:a4:21:a6:62:8d:94:87:65:85:
c5:72:d5:70:77:4c:b4:b8:f5:88:9d:cf:97:f5:c0:
77:05:d6:17:bd:c6:13:21:fd:88:fb:50:ff:9f:1d:
07:30:95:da:ac:7f:7e:01:f1:58:9b:56:ca:0a:18:
ff:1e:42:40:26:c7:f7:5a:3c:9e:e2:f5:d1:fe:c3:
ec:c0:1d:54:c4:92:a5:21:53:a3:30:d0:13:76:94:
d1:c9:a7:bf:4e:63:de:d0:c1:f3:44:b0:be:54:af:
5e:d1:71:ec:4f:5b:0f:dc:36:dd:ce:01:42:4a:a0:
99:4e:dd:31:23:ac:71:a1:f3:24:2b:3d:b5:4f:fb:
e8:e2:6a:e1:1e:9a:7b:5a:3d:d5:67:5e:1c:da:57:
0c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F1:23:8D:ED:2A:A0:FA:E6:FF:2B:6D:6E:5C:EC:3F:56:7B:A6:E6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a49f::/32
Signature Algorithm: sha256WithRSAEncryption
b0:0e:7c:67:8a:f5:af:e7:47:c6:49:34:60:a0:a5:1d:08:be:
dc:dc:0c:3f:04:3e:05:63:26:b8:c2:17:c6:27:73:1b:3f:0b:
88:b3:70:89:b0:3f:59:5d:14:52:2d:96:37:70:ad:70:3a:c3:
b2:5f:ed:2d:4e:da:d1:ec:22:de:b7:be:27:0c:00:0f:bc:7e:
0b:a6:c1:c3:fc:69:a5:a2:c6:b3:ee:94:db:fc:75:9a:ca:c9:
9f:d0:53:57:7c:51:e2:e6:e1:3a:d2:bb:e8:48:02:9f:83:45:
d2:78:eb:4f:21:c8:f6:e6:bf:7e:85:8d:9b:9d:bf:e1:d8:48:
fe:63:2d:fe:66:33:4d:34:b8:50:48:87:87:38:c8:e3:2f:2f:
4a:1c:db:88:6e:d7:93:8b:5c:e6:57:ec:c8:b9:d6:26:92:38:
e3:92:bd:60:1a:80:42:50:6d:2e:5d:7b:0d:81:5c:8e:9e:20:
14:c9:30:86:5e:34:10:6c:1a:92:d7:bc:d5:97:7b:f5:b6:b7:
f9:3e:58:30:c5:75:93:02:41:5c:b7:10:74:c2:0a:d7:a6:1a:
d7:31:40:c5:e2:81:34:b4:04:5e:2f:9c:01:9a:2c:4e:40:f5:
8d:d0:2c:5e:8a:55:12:9b:ca:5b:aa:31:d3:5c:8b:98:4c:24:
5f:7e:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:09 2026 by rpki-client