Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143856.roa
File: AS143856.roa (raw, json)
Hash identifier: 3lC40Z1dnlsCCEzKGdUk1so99nwpmub1Ix2VhKZD6ks=
Subject key identifier: FB:6E:8F:2D:50:B4:60:26:8D:A2:4D:A0:21:4B:D2:CF:A3:4A:CD:7D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 707A50213CE79705E6C7A04920369F8FB33B579C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143856.roa
Signing time: Mon 25 May 2026 06:28:43 +0000
ROA not before: Mon 25 May 2026 06:23:43 +0000
ROA not after: Mon 24 May 2027 06:28:43 +0000
asID: 143856
IP address blocks: 240a:a4b6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:7a:50:21:3c:e7:97:05:e6:c7:a0:49:20:36:9f:8f:b3:3b:57:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:43 2026 GMT
Not After : May 24 06:28:43 2027 GMT
Subject: CN=FB6E8F2D50B460268DA24DA0214BD2CFA34ACD7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:99:d2:e8:8a:2b:0e:98:85:4c:09:28:26:
6b:33:e2:b9:ab:e5:59:fe:eb:a1:eb:fe:8e:0c:f2:
81:9f:3a:bc:88:fa:ca:c4:6a:0f:a5:e0:7d:7d:14:
2e:10:e2:6a:66:a8:3d:e6:68:87:ab:57:2a:4a:30:
40:4c:11:7b:61:09:d5:71:7f:66:b2:06:87:f6:7a:
19:6c:52:85:4e:95:c9:85:29:a1:8f:6a:48:2e:ff:
6c:27:23:a4:06:53:15:3c:be:db:a8:07:f6:9c:3b:
01:54:ea:6c:b9:16:c1:48:bc:f8:09:5c:fa:fb:20:
b0:90:bb:86:a3:43:b1:b9:dc:36:28:6d:e4:f5:d3:
42:a1:0e:30:8f:5b:1c:e9:7f:90:00:25:87:59:1d:
ce:9e:bd:ca:5e:5a:11:81:16:02:ee:ad:08:96:95:
f2:74:e8:57:c6:15:b4:5e:a3:75:89:84:47:08:5b:
f4:b5:db:aa:c6:2d:45:ef:12:68:8c:4d:00:d2:8e:
11:b1:01:75:eb:89:8a:95:2c:31:37:d0:9c:55:13:
88:63:ba:dd:4b:2a:6c:38:0b:eb:90:ce:02:72:b7:
8a:a4:2e:d8:57:84:ae:b4:64:cf:dc:5a:8b:2e:11:
3f:a4:e4:d0:18:55:eb:a0:c7:44:93:d2:27:a4:2a:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6E:8F:2D:50:B4:60:26:8D:A2:4D:A0:21:4B:D2:CF:A3:4A:CD:7D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4b6::/32
Signature Algorithm: sha256WithRSAEncryption
8d:91:52:37:b7:00:01:bc:35:2c:bf:17:b0:c6:0b:b5:3c:a0:
7f:8d:de:44:b8:5d:6d:e5:14:ce:54:bf:94:66:20:22:4c:83:
b8:2d:bc:3e:a3:6a:61:63:40:03:a2:78:a5:a7:5c:e0:15:84:
aa:e2:29:29:af:ab:c1:6f:b3:a1:17:7e:4f:8c:c8:8e:ad:06:
00:0a:cf:b7:68:79:30:21:bf:e5:23:b7:3f:75:b8:5a:6b:1c:
6f:c4:13:8e:51:2f:e9:54:29:ee:17:d7:b4:81:b2:db:28:12:
9d:25:f5:23:07:81:2c:b4:61:cb:ce:88:ad:f4:e3:51:d7:ab:
43:2d:72:6e:8d:26:56:34:a7:7e:c8:66:37:9e:fa:29:3d:2a:
96:b3:31:ef:b3:0c:93:bc:26:18:80:80:36:c5:e5:04:21:35:
72:4a:60:65:fb:31:6d:52:46:1d:35:58:9e:20:63:47:00:d5:
63:5b:46:47:84:41:b5:22:82:9d:78:42:d1:4d:d3:bf:65:55:
0b:3d:86:b8:8a:94:40:8c:e5:37:ed:c4:66:46:09:a9:4f:0e:
34:3b:a9:04:d6:45:c7:03:5a:2f:2c:b0:0a:60:50:e3:15:45:
8e:3c:2f:9b:fa:89:d3:d4:28:f6:f2:e1:40:52:f0:59:58:a9:
65:05:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:23 2026 by rpki-client