Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143858.roa
File: AS143858.roa (raw, json)
Hash identifier: RgVhYQZKvbo3K/DksJe7DSOxIgL4Op5rk9LxXUKE2FE=
Subject key identifier: F9:2C:16:EE:9A:F0:9B:B9:E1:00:AE:A3:51:65:E5:78:70:C4:69:B3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4ED0A1683A654AD14278FD3422E417CF453EA811
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143858.roa
Signing time: Mon 25 May 2026 06:28:41 +0000
ROA not before: Mon 25 May 2026 06:23:41 +0000
ROA not after: Mon 24 May 2027 06:28:41 +0000
asID: 143858
IP address blocks: 240a:a4b8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d0:a1:68:3a:65:4a:d1:42:78:fd:34:22:e4:17:cf:45:3e:a8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:41 2026 GMT
Not After : May 24 06:28:41 2027 GMT
Subject: CN=F92C16EE9AF09BB9E100AEA35165E57870C469B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:c3:77:cd:66:c6:7d:b3:ba:8f:af:73:3a:
1b:8e:77:a6:11:cd:92:4f:e1:50:a3:57:92:7d:0d:
de:c3:f3:45:19:71:6c:05:fe:85:19:34:2b:88:5a:
11:d8:84:73:b4:ef:ec:2b:9a:f4:e0:03:d5:77:8c:
46:78:50:53:53:27:22:64:7d:8a:36:08:67:ab:59:
25:d2:32:5c:5e:91:7f:4d:ea:c6:b8:03:3b:96:e1:
cf:e5:1c:8f:bc:41:c5:28:50:c4:14:49:13:f3:77:
d6:80:78:64:13:4e:83:a8:ba:99:e7:7a:20:aa:e1:
37:76:41:a3:89:3c:cb:16:06:97:83:ef:9f:cb:74:
fd:fb:f6:1b:2b:30:be:9a:5f:dd:76:49:25:0a:db:
c1:7d:fa:a0:55:b9:e7:15:d7:9a:64:20:5a:8a:76:
1d:2a:16:ca:e3:1e:da:d3:b8:03:e6:96:ad:f0:3d:
4d:54:5f:85:e5:9c:8e:cd:ee:39:21:4e:d8:5a:63:
cc:a2:a9:5a:d7:13:db:ca:5d:67:14:b4:6a:f1:e2:
a3:07:8d:0d:cb:36:35:f4:7a:a2:5a:f7:5f:fe:26:
1d:58:d3:27:ac:22:c7:93:56:25:ee:53:3f:9c:2f:
36:14:3a:a0:be:08:a9:44:00:2c:ab:7f:a3:3f:93:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2C:16:EE:9A:F0:9B:B9:E1:00:AE:A3:51:65:E5:78:70:C4:69:B3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143858.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4b8::/32
Signature Algorithm: sha256WithRSAEncryption
5c:50:66:0b:b0:eb:d4:67:eb:af:81:4f:55:8b:ea:25:3c:50:
4a:69:70:db:f7:e0:21:16:5b:c8:d8:31:61:11:c3:24:cd:ed:
e0:28:7a:ad:aa:c2:5f:9f:6a:b6:b6:69:cf:84:e4:0c:8d:4e:
44:9d:ad:95:c3:b2:f7:bd:eb:3c:9a:7e:0c:f4:6a:0b:5e:04:
15:e3:0f:b1:cb:3f:bf:33:ad:34:c4:ae:ee:a1:b2:d9:18:a7:
76:b4:1d:04:31:6c:6e:cb:de:bc:28:fe:c3:0a:1a:60:5e:ad:
1c:88:0c:f3:52:f9:22:32:97:33:01:ac:38:90:38:41:ce:4a:
eb:1b:d3:bd:bc:64:f1:71:f9:65:0d:10:9e:7f:3f:e6:1e:1a:
cb:d0:67:8f:3c:a7:77:3a:29:66:1b:cc:fa:0f:24:55:5e:aa:
5a:73:2a:3a:3d:99:14:13:78:3e:56:3a:c6:2f:27:6b:ca:02:
f4:6f:ee:ee:5a:e8:fb:65:f4:f5:2d:97:43:5b:16:01:57:d7:
f8:66:25:14:57:cc:c1:11:c4:ab:e0:46:83:4b:5b:ef:72:ed:
41:d4:db:4b:68:31:91:a3:58:ef:fc:3d:31:15:d8:94:f3:2d:
f1:df:c5:67:84:c2:2e:39:77:34:ce:b0:2c:00:1b:06:0c:68:
8e:23:f7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:04 2026 by rpki-client