Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143847.roa
File: AS143847.roa (raw, json)
Hash identifier: zf2XsJ5b4XCMPB3QWFtNWy59s6Sd3wDDGy9c+iKxPlA=
Subject key identifier: 4F:31:AD:0A:A5:DB:6A:8D:84:36:DF:82:7E:88:BD:3A:E0:B9:D5:63
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3E1E6A6C8D08F8A61E2F7C281F512370B4FED2C2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143847.roa
Signing time: Tue 26 May 2026 08:52:46 +0000
ROA not before: Tue 26 May 2026 08:47:46 +0000
ROA not after: Tue 25 May 2027 08:52:46 +0000
asID: 143847
IP address blocks: 240a:a4ad::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:1e:6a:6c:8d:08:f8:a6:1e:2f:7c:28:1f:51:23:70:b4:fe:d2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:46 2026 GMT
Not After : May 25 08:52:46 2027 GMT
Subject: CN=4F31AD0AA5DB6A8D8436DF827E88BD3AE0B9D563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:31:98:af:8b:cf:34:62:f1:ba:eb:d9:9c:
09:14:fb:85:a4:a1:59:a3:bf:5d:70:5f:a1:aa:43:
56:c4:b9:8c:fa:b7:51:92:a7:a5:16:26:52:56:9f:
1d:6c:38:e3:2f:0b:d6:ed:3a:62:0d:bf:57:cc:50:
7f:d6:df:dd:d1:7e:ac:c1:bd:37:d6:74:af:57:50:
20:23:53:0d:28:f6:57:4f:e7:f6:3a:8f:c9:d2:44:
f5:84:70:a9:aa:cf:35:ec:a6:43:4a:27:93:9c:cb:
19:85:d5:21:f8:45:c1:e7:bc:92:69:bd:e6:43:89:
09:90:4c:73:7a:ca:12:a7:11:1c:cc:11:e3:6d:3f:
97:11:8e:15:09:da:0b:44:7a:69:20:6c:ec:5a:0a:
15:32:da:49:a1:7b:4f:e9:5c:aa:40:d7:30:e9:3a:
0f:d2:94:ee:49:37:4d:e0:04:f4:52:b1:b5:1b:60:
07:e5:89:50:6a:65:81:a4:d8:5a:5c:de:29:7d:2a:
10:f3:ec:87:14:bd:99:a7:26:75:8f:70:b6:d0:2e:
04:2f:b4:58:84:4c:56:40:58:32:eb:7f:59:65:f0:
02:7f:18:c1:da:3f:fd:db:e3:26:40:cc:b9:d0:66:
2b:79:b3:79:b6:37:aa:91:8f:a2:af:67:0f:c2:60:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:31:AD:0A:A5:DB:6A:8D:84:36:DF:82:7E:88:BD:3A:E0:B9:D5:63
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4ad::/32
Signature Algorithm: sha256WithRSAEncryption
20:d9:be:cf:fd:ea:58:c8:e4:5d:83:f0:85:33:bc:92:6a:4f:
bc:f6:7d:c8:f4:49:41:ab:21:c9:78:30:9b:d6:54:ed:ef:f0:
9c:e1:2b:64:58:40:56:2d:23:04:16:8a:8f:7e:14:60:3e:6f:
8d:77:e4:b0:df:48:fb:18:6f:31:1d:38:9c:ae:61:86:28:7c:
ee:92:bf:46:10:f4:7a:50:e4:47:e2:7f:ed:c8:0c:d9:0a:cd:
10:fe:27:16:26:3d:46:af:b0:74:e8:e1:0b:55:46:94:db:77:
dd:c8:2a:6e:77:54:f8:2d:03:48:f0:7b:75:d5:93:97:85:da:
d6:61:b5:1e:33:5b:ae:91:ae:b2:a9:9b:44:f7:ff:43:f9:96:
67:b2:94:42:f1:ca:95:41:8e:a6:98:d1:9f:b4:8e:66:b4:b2:
ad:8e:75:51:ec:f5:15:ff:bf:fc:a7:8c:ef:36:16:1e:81:46:
de:3f:f4:47:3c:62:32:23:3f:e1:9a:e6:01:1b:b4:52:d3:3d:
56:2e:2c:d6:40:96:b0:72:91:3d:70:73:34:ca:f3:3e:6f:59:
c7:79:31:ca:82:b8:8c:f8:66:64:fc:10:c9:b7:01:d8:79:7e:
35:9b:9c:f6:c1:01:59:8c:d1:44:97:3c:c1:90:71:eb:30:c1:
a6:1b:8b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:19 2026 by rpki-client