Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143845.roa
File: AS143845.roa (raw, json)
Hash identifier: XT1kVFgrDxRRzWKF5uTnwbEDqocKNievkd/jnQEQMCI=
Subject key identifier: 28:74:BA:CB:24:CF:75:13:C1:4A:9E:48:08:6F:14:84:45:74:81:9B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A6228F504BCBDE9413A9AC6A96AE48E3FBAE96A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143845.roa
Signing time: Tue 26 May 2026 06:12:24 +0000
ROA not before: Tue 26 May 2026 06:07:24 +0000
ROA not after: Tue 25 May 2027 06:12:24 +0000
asID: 143845
IP address blocks: 240a:a4ab::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:62:28:f5:04:bc:bd:e9:41:3a:9a:c6:a9:6a:e4:8e:3f:ba:e9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:24 2026 GMT
Not After : May 25 06:12:24 2027 GMT
Subject: CN=2874BACB24CF7513C14A9E48086F14844574819B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:31:ce:56:7c:60:cb:69:f1:b0:b1:43:2f:
03:f1:86:6e:b5:a3:4d:b9:0c:f4:6a:8c:a0:3c:fa:
9a:90:71:e9:29:1f:84:da:62:38:a9:21:a0:7e:cd:
28:6a:e4:c1:cd:38:9d:9c:05:9c:bd:5e:d2:f7:2b:
95:e2:5d:d4:7d:04:35:0c:ec:3f:06:2c:84:09:77:
fa:ff:2a:08:65:6d:1d:1b:f7:64:63:be:87:e2:6c:
42:c6:f8:9f:c6:58:a1:af:5a:2d:da:e2:ae:3e:ec:
d6:7a:0c:33:7a:1f:41:4c:f3:eb:e8:db:74:1d:09:
c7:a6:3c:d8:a5:37:72:7b:1a:03:37:a7:a7:04:d8:
55:68:7b:79:e6:1d:e7:7a:ba:ec:cf:da:2c:40:55:
23:35:f4:36:40:5b:0e:e7:c7:36:a4:76:a4:95:05:
e7:b2:b0:55:d8:68:4d:f6:bb:be:c3:7d:f7:d9:45:
79:22:da:bb:31:f1:82:25:95:2c:53:9d:0b:67:76:
84:03:fd:1f:a9:e2:11:98:65:cf:9a:fa:9f:77:48:
ed:b5:0f:d5:b3:e4:ab:f7:48:e6:13:89:3b:e0:d7:
6b:56:73:d5:e5:03:66:19:4e:4f:25:37:f1:5d:61:
44:92:f6:3e:7c:e7:f6:65:88:7e:4a:0e:66:a2:09:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:74:BA:CB:24:CF:75:13:C1:4A:9E:48:08:6F:14:84:45:74:81:9B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143845.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4ab::/32
Signature Algorithm: sha256WithRSAEncryption
9e:37:a6:f5:1a:27:59:b1:ae:a8:a3:aa:f4:71:be:5b:1f:0e:
d0:75:d1:2f:d6:7e:79:a0:ad:4e:c1:b9:32:e0:89:0d:85:71:
ff:80:3e:ea:05:15:66:2a:74:15:5b:c9:ae:ba:aa:3e:aa:7c:
f7:44:0f:73:5e:5f:6b:0c:07:ea:b0:ef:7b:a7:86:52:30:33:
74:eb:9f:97:a9:7a:e7:01:e7:61:11:81:0b:10:9b:55:58:93:
f3:19:a7:fb:61:0d:9c:f4:64:48:ae:d1:14:59:7e:cf:55:61:
73:c4:72:7e:f7:25:26:9d:81:13:61:4e:f8:0a:8d:14:df:c6:
1e:fe:47:e0:c1:40:77:30:5c:04:24:6b:8f:8d:66:8e:9a:ab:
81:6f:d2:d3:62:0a:95:18:8a:39:cf:92:af:20:55:43:90:ba:
5b:56:8a:80:b7:b5:64:ed:27:f6:8f:bb:00:87:f6:c4:20:32:
9a:ea:12:6c:60:ba:a0:e5:9e:9e:60:89:cc:f8:c6:26:a7:b0:
7f:b6:1c:e7:75:f4:47:bc:61:1d:d8:e4:1e:38:4f:36:d9:17:
f5:ab:9e:f2:5d:7b:0f:78:5f:00:dd:ca:8e:14:54:85:98:ac:
fb:a4:1a:80:1b:e6:ff:bc:09:e7:0c:0b:89:5c:8f:ac:6a:34:
37:5a:a5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:25 2026 by rpki-client