Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143855.roa
File: AS143855.roa (raw, json)
Hash identifier: SovPuots43V02e+7xbdgz8Oa6HKZ+Bf5gLWkqWqaMK4=
Subject key identifier: E4:35:B9:82:6B:0E:BB:19:CB:41:41:07:26:94:33:FC:CE:E6:8E:14
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 56E8C7014A66857CCCDBA33B0BE1669849178E43
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143855.roa
Signing time: Tue 26 May 2026 06:30:41 +0000
ROA not before: Tue 26 May 2026 06:25:41 +0000
ROA not after: Tue 25 May 2027 06:30:41 +0000
asID: 143855
IP address blocks: 240a:a4b5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:e8:c7:01:4a:66:85:7c:cc:db:a3:3b:0b:e1:66:98:49:17:8e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:41 2026 GMT
Not After : May 25 06:30:41 2027 GMT
Subject: CN=E435B9826B0EBB19CB414107269433FCCEE68E14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:70:fd:37:13:ef:dc:b9:7d:c9:49:d0:7a:
91:42:07:2d:85:e5:a7:79:3c:dd:fb:22:3e:be:76:
24:ff:48:b4:e9:92:47:06:19:4c:6c:b8:df:d6:8b:
0f:7f:58:5a:2a:18:cc:88:ea:49:98:7d:ab:81:be:
97:83:ec:d4:de:9c:d6:18:70:11:cb:b3:4b:8d:c2:
7f:62:bf:c7:2f:e2:1a:5e:69:b2:2a:ee:51:3d:dc:
e4:07:d3:91:fa:6d:f4:ad:36:cc:37:78:48:78:30:
b9:78:f8:c3:51:b1:8c:6a:60:1e:20:56:e7:48:1d:
71:19:45:bf:11:32:b8:60:a4:71:f5:6d:43:cf:b4:
49:05:9e:9c:be:f4:15:9b:0d:72:fd:01:19:6d:e8:
23:32:10:0f:81:b1:a7:dc:d1:46:d0:a9:88:6b:6b:
f5:5d:c8:6a:83:57:10:8b:5e:03:d2:ce:ad:bd:08:
bb:ab:05:15:ca:0b:0d:d3:dc:59:8e:4e:26:4e:3c:
6c:30:6c:48:06:3b:f9:6d:9d:01:18:4f:23:d7:c3:
69:d8:5a:0b:e2:17:2c:4f:ae:51:b4:e5:16:fb:20:
90:da:4b:7b:e0:de:31:15:53:3c:d7:85:57:8d:d4:
97:ac:8c:a3:bc:c0:3f:6c:c7:20:9a:9f:27:b4:52:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:35:B9:82:6B:0E:BB:19:CB:41:41:07:26:94:33:FC:CE:E6:8E:14
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143855.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4b5::/32
Signature Algorithm: sha256WithRSAEncryption
09:d7:42:37:67:f5:48:01:30:96:4e:eb:26:26:75:9b:b5:0c:
e4:41:b8:b4:51:c4:7b:4f:50:16:ac:84:5d:53:a8:59:ef:a1:
fb:71:9c:20:c7:e5:05:9f:21:50:64:6f:24:c2:ba:76:ca:1a:
ce:b6:73:4b:21:83:30:59:ed:3a:00:91:b4:be:cb:0c:ac:c1:
07:5e:8d:71:52:45:96:10:d0:68:e3:b4:f7:07:21:36:a5:ad:
70:f0:dc:fd:1c:eb:0f:e5:ad:f4:58:71:f2:f8:78:2b:93:5f:
c3:cb:b5:86:27:78:41:23:3b:97:90:cb:7f:4b:81:4a:e3:c8:
c8:cf:fd:65:55:ce:3c:a1:19:d0:39:0e:a1:d8:eb:b5:97:d3:
50:39:5f:06:3b:1c:4a:7c:65:1f:f7:6c:ae:b2:ac:5b:da:61:
06:10:81:cc:70:34:e4:a3:98:e8:45:c2:24:f6:c9:1b:b8:d3:
d3:25:7d:43:74:41:5f:9e:fc:c2:2a:d8:65:b3:54:3d:b5:cf:
65:e3:1e:83:77:6c:27:d4:86:0a:4a:f3:41:f0:49:fa:7a:ba:
a6:e9:7b:2a:a0:00:4d:0d:ec:88:11:bf:12:69:9f:fe:fc:78:
4d:f7:55:4e:69:9a:d3:0e:73:61:82:02:a4:34:4e:09:c0:25:
b3:d0:ed:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:08 2026 by rpki-client