Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143849.roa
File: AS143849.roa (raw, json)
Hash identifier: LsSRnYYCTEZLDwznnF3Dsw0yLX94+/r1aL2s7xeWrHk=
Subject key identifier: B0:B3:3C:D8:92:39:D3:F7:72:A6:F0:5A:D2:48:53:AF:31:99:AE:9B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6758A8FCEB6865ED2D800E77EF2EB87CB5D9727B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143849.roa
Signing time: Fri 22 May 2026 02:47:50 +0000
ROA not before: Fri 22 May 2026 02:42:50 +0000
ROA not after: Fri 21 May 2027 02:47:50 +0000
asID: 143849
IP address blocks: 240a:a4af::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:58:a8:fc:eb:68:65:ed:2d:80:0e:77:ef:2e:b8:7c:b5:d9:72:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:50 2026 GMT
Not After : May 21 02:47:50 2027 GMT
Subject: CN=B0B33CD89239D3F772A6F05AD24853AF3199AE9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:10:6d:5e:15:00:59:9f:e0:ca:d5:97:46:
da:ca:14:3e:d9:25:dc:dc:04:d0:7c:c6:ac:24:cc:
1f:91:49:67:a3:d0:3b:14:1d:ea:64:cc:46:02:ba:
0c:31:24:c6:ce:14:8d:bd:b6:23:d0:11:99:c2:5b:
f0:c4:21:59:61:38:50:9b:b6:e3:b5:79:58:fe:10:
fb:db:7d:b9:88:13:80:e9:91:a5:b4:22:f2:a2:b9:
cd:ed:36:05:e6:9e:47:ab:71:15:b2:8f:25:8b:6e:
d9:64:e4:93:45:7b:1e:0d:fa:b5:9a:c5:f3:30:01:
fe:58:71:a5:35:c4:39:57:14:98:13:2c:dc:98:2a:
e4:cf:0c:22:2f:4d:78:f0:c8:07:22:38:8b:74:ff:
ea:ac:da:a1:65:2d:8b:67:fc:d6:04:4c:78:c1:6d:
c4:d9:6f:44:d0:10:78:bb:29:a6:77:ef:49:dd:ab:
4b:26:e6:d0:35:00:c1:93:e5:b0:80:d7:e2:96:15:
da:bd:91:d0:7e:f5:c7:2f:dc:d2:2a:b2:26:42:26:
10:6b:91:7a:9f:8f:ea:87:f6:0a:a5:15:57:7e:38:
9b:ef:f8:71:28:d2:8a:bb:20:63:5d:21:69:93:53:
3a:d7:0c:1b:e9:7d:dc:44:35:6d:36:3e:65:a5:b6:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B3:3C:D8:92:39:D3:F7:72:A6:F0:5A:D2:48:53:AF:31:99:AE:9B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143849.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4af::/32
Signature Algorithm: sha256WithRSAEncryption
b4:a2:7d:bf:79:53:3c:3c:4e:66:21:c9:26:d1:e1:81:29:d6:
fb:8f:e9:63:4f:b0:cc:df:5e:f2:5d:8e:35:18:c4:14:49:14:
69:ce:ad:a1:48:95:f8:71:c3:ac:91:bd:45:9a:86:08:9a:61:
4b:5a:53:9c:18:9d:0f:68:43:d3:c8:23:f9:7a:1b:45:e6:a4:
75:c6:27:92:4f:c6:26:de:ff:61:46:7b:27:d5:b3:79:9d:f8:
20:a8:3b:a7:3b:8e:51:4a:7e:53:a2:c4:5b:75:25:4e:3f:46:
05:0d:0d:bf:72:4f:6f:e5:09:46:06:32:12:76:f0:45:b4:17:
4c:0e:bd:ce:c6:4d:b8:fc:fa:4f:e2:13:75:2e:8f:db:bc:34:
84:41:ea:af:63:c8:92:3a:1a:bd:93:06:e1:97:12:01:cf:a4:
2c:af:e7:e9:d6:65:0d:a2:56:d6:2b:cf:70:e1:e7:5c:6d:ef:
45:4a:fc:91:47:1d:bf:9f:61:75:0e:b1:3e:8c:76:ba:03:0c:
72:4a:7d:13:2d:d0:95:c6:e9:fb:30:30:cc:f0:75:72:08:94:
6b:fb:c4:7f:60:dd:45:b8:0b:05:d9:2c:d3:aa:09:eb:fc:d4:
00:90:a5:d2:1c:70:b3:8c:35:8a:d7:48:d7:fc:55:52:fc:bc:
24:b2:a2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:47 2026 by rpki-client