Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143843.roa
File: AS143843.roa (raw, json)
Hash identifier: 5DfVRS38gpR39K0lJLlnpxaPnzJZobtOUipBilu/EwI=
Subject key identifier: CC:2B:61:EB:C8:AF:EC:F5:C4:5D:C7:C2:B9:7F:57:62:60:12:3B:A2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 64507A5BD3735A97DEA5392535B901084E4B2F7C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143843.roa
Signing time: Fri 22 May 2026 07:40:58 +0000
ROA not before: Fri 22 May 2026 07:35:58 +0000
ROA not after: Fri 21 May 2027 07:40:58 +0000
asID: 143843
IP address blocks: 240a:a4a9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:50:7a:5b:d3:73:5a:97:de:a5:39:25:35:b9:01:08:4e:4b:2f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:58 2026 GMT
Not After : May 21 07:40:58 2027 GMT
Subject: CN=CC2B61EBC8AFECF5C45DC7C2B97F576260123BA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:af:ce:da:d9:a4:b6:77:da:ea:0c:ba:25:
36:ca:e4:80:83:23:e6:c4:11:f7:58:2d:53:65:8d:
26:4e:5c:b7:62:74:3b:67:fd:e7:93:94:e0:4a:1c:
56:d2:00:0d:25:14:aa:c9:3c:31:e6:d8:7a:39:64:
a9:41:81:ad:dd:46:dd:f6:5e:52:45:a3:c7:86:2e:
0d:26:59:09:03:7e:20:54:37:6f:5c:60:8c:a8:e6:
8a:06:f1:ea:eb:01:8d:8e:92:e5:fe:86:db:87:24:
9b:6f:42:a5:5b:54:05:37:c2:98:71:bd:e1:e0:58:
04:78:b8:01:63:64:d1:5b:7a:cc:3c:86:48:48:88:
6c:89:a7:b4:e8:e4:92:32:95:60:62:d9:77:61:ca:
c0:c9:68:7d:d6:76:15:cf:66:0f:06:cd:3c:cc:51:
88:5a:dc:d8:b8:7d:94:05:bb:1a:bd:02:4a:9f:9f:
2d:50:a2:7e:29:9d:85:66:43:75:f8:94:53:76:bc:
76:17:ec:77:60:d7:ba:93:f9:c2:95:04:c5:81:bb:
c0:4c:09:18:f3:fe:50:d3:1b:29:d7:c2:fa:df:45:
47:65:a2:9f:55:a5:43:62:7d:dd:ce:14:25:05:60:
f6:c8:06:f6:be:63:a7:00:67:db:f4:12:13:73:ce:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2B:61:EB:C8:AF:EC:F5:C4:5D:C7:C2:B9:7F:57:62:60:12:3B:A2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143843.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4a9::/32
Signature Algorithm: sha256WithRSAEncryption
0e:ea:b5:42:25:eb:2d:20:d1:19:7c:74:77:22:2a:73:b2:45:
e3:76:9a:27:e5:34:7c:fd:74:c4:35:8b:90:5a:e8:1a:d6:92:
25:95:86:26:1d:a9:07:f2:66:d3:13:f4:75:b1:ad:62:35:3f:
5e:97:d9:58:80:cd:c5:e9:cf:4a:96:2c:14:b8:ab:8b:54:05:
5c:90:ed:55:c3:9c:17:a9:93:db:e0:c6:a9:85:2b:53:06:b9:
22:fb:ee:56:29:e5:e5:43:27:90:75:06:93:f2:d3:39:c6:92:
66:66:a2:a1:62:56:ce:48:69:9d:ec:d9:72:45:c8:0a:41:81:
66:4c:f0:16:51:a1:2f:7c:42:ff:13:e2:0a:4b:ff:e1:91:a3:
26:77:79:f1:39:e7:a5:4d:b8:ed:b6:a5:8c:d2:a6:ae:e7:0b:
9d:fc:cd:22:0d:5e:14:89:10:0f:bd:1d:68:7e:cf:56:0f:92:
2f:de:b6:bc:a8:1c:8d:93:6d:03:87:6a:b4:65:fd:1f:58:35:
b2:20:7e:93:21:04:86:da:64:ef:10:24:1f:d5:bc:55:7d:c0:
b1:f0:93:a1:81:7d:cf:58:c3:02:e4:c2:6c:ee:6a:b8:a8:5e:
91:6a:73:b3:e9:67:66:47:cb:fb:74:90:b2:d2:cc:2e:fb:eb:
2e:81:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:29 2026 by rpki-client