Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143851.roa
File: AS143851.roa (raw, json)
Hash identifier: bPECjIaXnK6aGgi36yDS6IuQ5ewhNvEJ4wLaV1iQBMQ=
Subject key identifier: DA:F7:67:30:B3:BC:DD:D8:A9:C9:08:8A:26:44:49:86:D2:99:E8:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3EA5FC5510EBB5A0EA03B0A0256F2CF88AC78EB9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143851.roa
Signing time: Mon 25 May 2026 03:19:29 +0000
ROA not before: Mon 25 May 2026 03:14:29 +0000
ROA not after: Mon 24 May 2027 03:19:29 +0000
asID: 143851
IP address blocks: 240a:a4b1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a5:fc:55:10:eb:b5:a0:ea:03:b0:a0:25:6f:2c:f8:8a:c7:8e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:29 2026 GMT
Not After : May 24 03:19:29 2027 GMT
Subject: CN=DAF76730B3BCDDD8A9C9088A26444986D299E802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:30:0c:c5:4c:b7:95:bd:8e:b3:a2:e1:cf:
d0:7c:ab:2d:4f:07:09:b8:1e:76:0b:a3:ec:e7:93:
1f:32:bc:c5:7e:77:aa:0b:8b:35:9f:33:98:8c:28:
6c:c1:40:cb:16:8e:6e:6d:95:a9:df:05:dc:91:1b:
6e:e0:3f:e6:e6:d4:f3:a3:e7:90:ea:ad:ab:f0:87:
b0:4a:32:34:c1:e3:3f:bd:fc:08:78:59:21:16:e7:
fe:82:44:6a:72:34:e7:5f:2c:36:1a:56:30:aa:0f:
91:04:f4:6e:5b:41:ec:7d:38:f1:3b:e9:77:ed:79:
a1:32:e9:3b:80:91:66:2b:57:98:d2:6e:97:bf:d4:
65:d1:a8:ff:10:81:ed:c5:84:df:a8:0a:23:7d:be:
41:2d:52:65:00:9b:22:bf:dc:bc:4c:86:07:6a:ea:
b0:49:3d:70:08:7a:b8:aa:21:00:05:47:8e:27:da:
32:f1:f0:1e:37:ec:5c:a1:01:de:38:c6:9f:85:b4:
6a:71:f3:db:e0:cb:61:b3:78:0e:36:a5:c5:48:83:
4f:b0:52:7e:5c:57:7b:58:31:0a:3a:78:f7:1b:d6:
bd:6f:e2:17:f5:f6:5a:cc:a6:56:a7:0a:7a:c8:25:
19:fb:33:23:99:9d:7d:bf:64:6b:b8:db:9d:e8:75:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F7:67:30:B3:BC:DD:D8:A9:C9:08:8A:26:44:49:86:D2:99:E8:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143851.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4b1::/32
Signature Algorithm: sha256WithRSAEncryption
2e:49:36:90:b1:dd:e3:4d:71:ed:3a:2f:4e:de:5b:8a:46:4a:
bf:d7:2f:af:a6:96:3e:fa:63:92:f5:11:c6:68:a0:74:a3:af:
e8:3e:0d:21:d9:d1:33:a1:ec:10:d3:db:81:f0:45:ee:87:8d:
85:23:d2:76:a0:31:23:aa:9c:3f:3a:63:e9:0e:c5:c2:ef:8b:
39:e8:c3:db:ff:62:b0:27:51:e8:5f:9f:2f:88:57:d7:ef:14:
2f:9f:ae:50:94:f1:fb:a9:95:56:b3:7e:fb:67:0f:62:15:05:
ce:a2:a7:c0:c6:1c:37:ba:cf:00:ba:11:ea:1d:51:e8:37:05:
fb:08:9e:7a:56:9d:ed:2c:81:c8:c3:6d:2d:59:96:98:27:1c:
d3:ca:16:df:36:ff:ca:57:09:c7:0c:e4:dd:8f:93:cd:b0:ba:
53:d2:18:4f:b1:10:58:3c:2f:ab:60:00:d8:37:7c:3b:17:b2:
74:4b:55:af:1b:97:0c:93:8c:e9:35:dd:da:38:27:4d:61:7c:
e4:16:5d:88:a9:52:9d:30:da:20:9a:a6:2a:e1:35:2c:c5:1e:
32:19:3f:9b:c9:46:88:76:60:07:78:5e:a1:a8:60:27:54:27:
4a:34:13:b0:81:dd:96:d3:93:a3:fc:b7:50:69:07:30:a9:96:
78:13:b2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:00 2026 by rpki-client