Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143840.roa
File: AS143840.roa (raw, json)
Hash identifier: XKDeumghsccL5YvKS9Fij5uKWPFmr+EZ39vkHuMvIM4=
Subject key identifier: A0:CB:2C:25:15:A3:FC:B9:60:85:A3:28:9D:5B:32:55:B9:9E:31:B7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52F6D54AF91737EC984BE8A06277CBE6E1F30D3C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143840.roa
Signing time: Fri 22 May 2026 02:47:34 +0000
ROA not before: Fri 22 May 2026 02:42:34 +0000
ROA not after: Fri 21 May 2027 02:47:34 +0000
asID: 143840
IP address blocks: 240a:a4a6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f6:d5:4a:f9:17:37:ec:98:4b:e8:a0:62:77:cb:e6:e1:f3:0d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:34 2026 GMT
Not After : May 21 02:47:34 2027 GMT
Subject: CN=A0CB2C2515A3FCB96085A3289D5B3255B99E31B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:57:55:ce:c3:54:eb:35:58:d8:75:ca:ed:1b:
80:88:cf:2e:aa:bc:28:2c:f3:d0:d1:56:05:de:4f:
3a:ee:79:99:8f:c7:1c:a1:78:d5:3c:62:42:c4:4a:
8f:80:2d:05:58:d2:fe:69:b1:91:96:3b:b0:49:7d:
84:fe:e8:e4:60:2f:dc:40:37:ba:5c:b7:e2:f2:b8:
2d:42:e4:03:be:61:9d:15:03:bc:1d:f7:9b:ae:b7:
de:36:67:79:29:66:99:4b:9e:0d:57:00:2b:00:3b:
f8:e9:56:cc:74:0a:ac:79:85:d3:48:b0:1a:5e:da:
7d:e1:d5:c4:82:43:c0:42:e1:38:b8:f3:ec:40:bb:
8c:b2:c9:ba:1c:67:1b:f1:5b:75:be:12:b4:01:8a:
c0:51:ae:8b:ef:39:78:fe:57:04:b7:3c:6e:84:17:
a1:9e:9d:04:0c:09:71:6e:48:06:f4:ef:03:36:92:
b5:ee:7f:89:7e:0a:c1:74:f2:53:29:55:30:0c:93:
1b:36:9d:87:d2:f2:68:67:5e:1f:23:1d:6c:09:c7:
c3:c8:d9:f8:9c:73:b2:b6:54:ea:f4:26:9a:8a:98:
ef:3e:74:61:ba:fb:9a:66:e2:54:a7:fa:d2:aa:50:
07:22:a5:a1:df:c6:84:59:b5:6e:cf:50:79:67:98:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CB:2C:25:15:A3:FC:B9:60:85:A3:28:9D:5B:32:55:B9:9E:31:B7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4a6::/32
Signature Algorithm: sha256WithRSAEncryption
14:cd:8a:b2:2e:1b:92:4d:3e:9f:99:49:88:5c:f2:1d:73:c9:
fe:c3:b0:cb:47:e8:10:61:d2:da:7e:1b:7f:57:df:11:9b:c7:
d3:f9:32:19:0f:ef:8d:9a:d2:4a:df:0b:11:52:53:50:5c:81:
68:fe:85:c0:f7:42:34:58:a5:6a:48:2b:7e:db:a9:bd:80:d3:
c8:65:20:92:73:e5:1a:4d:f9:b1:13:bb:66:f0:40:5a:19:d6:
fe:0d:60:8d:3a:6f:72:bc:25:cc:49:1f:dc:19:59:d5:b4:92:
f0:77:5e:16:41:9a:7e:4b:92:3b:bb:3b:1f:ee:5a:0d:ba:ea:
84:b5:e1:30:37:5e:40:b4:4d:78:38:a9:3c:ee:99:7c:a1:ce:
82:c5:f9:9c:58:5f:1c:6a:12:c1:49:5c:07:14:0a:8f:c5:cb:
b2:9b:0f:b3:da:6a:84:06:6f:d1:62:72:d8:fc:d4:ef:6d:a9:
e1:d9:fc:4e:43:7b:4c:f9:bb:38:fc:f9:a2:11:a8:4e:0d:4d:
e2:8c:fa:ad:a1:c8:fe:fc:93:bd:00:09:5e:1d:99:88:84:ec:
e2:48:21:46:1b:2a:6f:2d:0b:d1:69:22:e9:be:6e:0f:43:47:
ac:e5:cc:9a:7f:c4:2c:d6:3c:3b:bb:1a:e5:5b:50:e2:4e:7e:
49:64:98:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:25 2026 by rpki-client