Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143852.roa
File: AS143852.roa (raw, json)
Hash identifier: r3n2dKgCpEclnaUWxdJLsK3KXqbCC3mwFhPQvwYy5YQ=
Subject key identifier: 6F:FB:5D:F3:24:EF:77:25:0C:D1:E5:C3:27:8D:CD:19:92:1E:5C:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1924CB5EC04D842BCA05FEE26CD422415CC9A3BF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143852.roa
Signing time: Fri 22 May 2026 04:26:55 +0000
ROA not before: Fri 22 May 2026 04:21:55 +0000
ROA not after: Fri 21 May 2027 04:26:55 +0000
asID: 143852
IP address blocks: 240a:a4b2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:24:cb:5e:c0:4d:84:2b:ca:05:fe:e2:6c:d4:22:41:5c:c9:a3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:55 2026 GMT
Not After : May 21 04:26:55 2027 GMT
Subject: CN=6FFB5DF324EF77250CD1E5C3278DCD19921E5C2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:a1:96:9a:44:01:9c:16:3d:7a:e2:63:2b:
e4:49:83:e3:4c:7d:08:49:eb:1c:4b:87:ad:ca:ff:
1e:a3:6e:a7:d7:5d:cb:48:f6:4c:4c:90:ec:c1:a1:
7c:63:08:76:8c:fa:29:d7:b2:c8:34:6f:0e:b4:b3:
30:b4:38:af:5f:59:57:7b:4d:f0:4e:9f:98:85:9b:
5e:de:7a:f7:ae:82:46:3b:af:7d:d5:97:24:86:20:
74:b4:4d:91:cc:96:65:f6:97:f0:f1:59:40:8b:f8:
32:aa:fe:27:da:1c:7e:da:fc:f1:24:60:22:91:bb:
c7:e4:7c:b7:5c:5b:bc:02:b0:ef:18:02:6c:79:12:
39:1e:b5:59:7d:60:d5:23:38:3f:b9:ab:d7:05:9f:
8e:65:f3:aa:92:c8:cc:30:b8:d9:00:83:d0:e6:79:
8b:27:26:4c:0d:36:43:1c:e6:f8:84:3d:ee:66:d4:
e7:9d:50:77:ea:ac:d1:18:b4:7e:79:c1:a7:d5:bc:
24:e9:07:6b:c6:cc:ff:5b:16:91:78:b9:c5:b2:2d:
86:d6:19:5e:41:eb:70:d3:de:26:c5:69:cf:ab:49:
73:33:ff:38:5e:fc:80:21:43:54:aa:c8:66:b5:0f:
b4:60:3c:c5:5f:44:c0:5b:37:24:e5:0c:95:04:61:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FB:5D:F3:24:EF:77:25:0C:D1:E5:C3:27:8D:CD:19:92:1E:5C:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4b2::/32
Signature Algorithm: sha256WithRSAEncryption
55:dc:91:13:3d:e2:b7:91:aa:91:fa:4d:f4:f1:8c:79:90:e6:
1f:ce:8a:53:09:71:51:19:7d:22:87:59:09:75:9c:65:9d:aa:
98:ba:04:5b:1b:f5:38:e7:f7:0a:ec:74:b7:73:3c:fa:8b:6b:
19:0d:7b:f1:42:4d:8b:a7:cc:dd:7d:43:00:68:94:69:01:7a:
af:56:9f:e5:5b:0b:f3:0e:9a:b9:c9:45:25:1a:4a:b7:68:a1:
e2:2a:26:78:1e:b0:2b:b5:e6:1b:fa:0c:65:a6:e2:ba:48:24:
e7:8f:48:d7:26:fb:d0:e7:22:f1:ac:92:dc:06:b4:c4:6b:85:
47:fe:37:2a:30:a4:4d:67:4d:86:0a:35:f3:d5:f2:c2:72:91:
53:f0:c3:57:21:06:43:c5:54:7c:bd:48:20:4e:70:1c:d7:20:
db:67:22:c8:76:7d:e9:00:fd:2c:92:e4:b7:98:dd:6a:84:e0:
54:b3:6e:b5:21:fa:b1:05:9a:09:70:49:13:df:99:94:13:51:
66:c1:bc:af:e8:87:a4:e2:98:65:04:70:4c:67:7a:d6:72:f2:
a3:69:4d:67:6d:99:de:7f:11:06:3b:d3:69:a8:1d:64:b3:e4:
52:41:6b:9c:13:14:d0:54:eb:a8:a5:83:5d:60:98:49:1c:30:
be:22:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:22 2026 by rpki-client