Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143841.roa
File: AS143841.roa (raw, json)
Hash identifier: O0qhJ1To383xWUaO/7uqcYdLaKzBA11m1Jv9MCrV7lM=
Subject key identifier: 1F:E9:B6:2A:E0:4D:AA:62:CB:18:AF:D3:82:84:72:6A:8E:61:F2:D7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 232FE082C8B5B7638C2FB8C1E701FC5168A79F3C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143841.roa
Signing time: Fri 22 May 2026 07:08:50 +0000
ROA not before: Fri 22 May 2026 07:03:50 +0000
ROA not after: Fri 21 May 2027 07:08:50 +0000
asID: 143841
IP address blocks: 240a:a4a7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:2f:e0:82:c8:b5:b7:63:8c:2f:b8:c1:e7:01:fc:51:68:a7:9f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:50 2026 GMT
Not After : May 21 07:08:50 2027 GMT
Subject: CN=1FE9B62AE04DAA62CB18AFD38284726A8E61F2D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:eb:cb:62:d4:57:10:90:e5:a4:65:a3:e9:
df:4d:aa:7e:21:f6:ed:8a:36:e5:d0:43:e8:15:e3:
cc:a2:cd:dd:87:95:b4:4a:37:d8:f0:4c:30:f6:44:
0c:35:81:91:35:0f:97:eb:ca:15:a4:31:fb:00:f1:
9c:f4:81:c9:fc:e6:a5:1e:60:54:b4:34:ef:5d:a1:
8a:50:3f:71:cc:4e:14:b0:71:49:72:81:24:c5:61:
4c:3b:38:0a:a2:0f:1e:70:a1:f1:40:83:d4:c3:81:
64:86:25:9e:da:df:70:e3:57:a9:1a:85:12:55:04:
e2:f9:60:05:0d:1a:dd:14:47:18:05:4e:64:9a:ce:
14:eb:53:47:8b:ba:5e:9b:10:7d:36:fc:75:86:d4:
3e:0e:b0:bc:e1:99:9d:b1:32:26:0e:ea:9f:ff:71:
7a:52:d2:9a:1b:1f:4f:77:f8:79:b7:0a:a1:f6:cf:
70:5a:3f:38:04:13:97:65:04:1c:b5:75:77:07:0d:
a9:58:1f:7d:76:f1:a6:9c:31:20:d7:6c:8d:42:53:
1d:8a:d0:9e:10:08:86:cd:84:5c:5c:34:20:71:d8:
f2:a1:bc:65:f0:93:3b:f1:eb:49:c7:ca:30:15:b1:
36:b3:dc:b8:4e:b8:38:8b:ed:43:ea:09:2e:1b:07:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E9:B6:2A:E0:4D:AA:62:CB:18:AF:D3:82:84:72:6A:8E:61:F2:D7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4a7::/32
Signature Algorithm: sha256WithRSAEncryption
2f:3b:68:fd:9f:22:2c:15:ac:45:9a:ef:19:ff:75:4b:6e:36:
92:b2:ab:b9:33:40:5b:dc:d5:bd:9b:d6:c1:42:d7:03:4c:b5:
37:48:7a:8c:64:fe:36:0e:5a:a5:c7:99:d3:6c:5b:cd:89:28:
82:12:d9:18:04:5e:4b:3f:05:b3:ab:af:58:3d:4d:7b:fd:5a:
3a:b8:a8:b6:44:d8:b2:0d:34:14:eb:91:43:6d:fd:f0:fa:6a:
8e:fa:1a:23:ea:c9:4e:a8:22:67:d9:5b:2a:76:2f:1b:7e:a4:
76:95:d2:a7:ef:e9:71:cc:00:8c:02:ef:d7:3f:b7:df:7e:5e:
5a:ee:f9:1e:57:dd:76:f8:eb:67:f7:44:73:81:6e:66:51:d5:
ef:35:4b:3f:01:3b:ed:3b:08:c9:5d:8d:db:88:3e:fb:30:e8:
e8:75:a5:a1:0d:25:b1:2f:e4:88:27:48:44:68:ca:1e:68:cd:
90:89:0d:de:ea:0d:c1:42:42:2c:e7:7e:a3:71:52:ba:29:9c:
96:46:90:1d:c1:35:ac:5b:24:bf:aa:07:59:a2:34:a4:c5:cd:
15:25:4c:e8:fc:d3:1b:fb:a4:9e:29:0e:a0:52:58:34:28:bb:
9d:90:a6:8f:24:55:c9:42:2b:a1:1c:6b:83:2e:c6:68:ba:13:
82:1f:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:26 2026 by rpki-client