Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143859.roa
File: AS143859.roa (raw, json)
Hash identifier: 55rQlDOhzrOLof0ek3JHkXihES9prJV9e3V3hToKPcM=
Subject key identifier: 5A:4D:F7:D2:97:89:F0:27:C7:F6:F8:56:2B:74:1E:24:79:78:82:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5118B0CBF537B159F4A022B75C3A29BF1B552485
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143859.roa
Signing time: Mon 25 May 2026 06:28:52 +0000
ROA not before: Mon 25 May 2026 06:23:52 +0000
ROA not after: Mon 24 May 2027 06:28:52 +0000
asID: 143859
IP address blocks: 240a:a4b9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:18:b0:cb:f5:37:b1:59:f4:a0:22:b7:5c:3a:29:bf:1b:55:24:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:52 2026 GMT
Not After : May 24 06:28:52 2027 GMT
Subject: CN=5A4DF7D29789F027C7F6F8562B741E24797882D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:b0:63:f0:47:02:12:ad:0e:89:a7:d7:a8:
b6:7a:ad:b8:2b:9b:0e:b3:44:f4:d5:c7:6b:cb:49:
4f:0d:a8:f7:87:03:79:a4:d5:4e:64:64:e6:d2:5e:
90:1d:fc:95:bf:1e:5d:eb:71:f8:93:22:ee:ec:03:
06:43:49:a8:f3:0c:96:81:cf:8c:98:a4:5f:66:33:
b0:14:11:3f:7e:82:fe:50:4e:5f:fc:2a:d7:1e:7a:
eb:0c:e4:d6:7d:d9:d8:8d:75:bc:e7:8c:4c:5d:37:
c9:cb:88:bc:71:9c:f8:dc:e1:d8:75:83:88:ca:7a:
d9:a6:b7:03:d3:9c:4a:03:63:af:8c:38:5a:2f:8e:
97:ae:f5:e4:94:b4:76:71:fb:ab:06:5c:92:92:91:
9f:27:7d:74:f4:e3:3a:9c:16:4c:8a:6f:26:a1:dc:
3f:fb:a0:58:a8:c6:ee:6f:a8:9e:0a:84:81:ac:d0:
05:8c:82:98:69:02:61:4e:69:69:d3:8b:3b:95:79:
b8:54:1f:18:8a:ed:f7:c4:28:f8:11:0a:ba:3c:03:
b1:59:05:a7:71:77:6c:e5:17:94:cc:08:31:bf:41:
66:4e:cf:47:d4:89:d7:5f:72:b5:d6:61:d7:41:53:
d7:9f:33:1d:6a:33:7d:8d:89:a2:eb:f8:43:59:94:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4D:F7:D2:97:89:F0:27:C7:F6:F8:56:2B:74:1E:24:79:78:82:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4b9::/32
Signature Algorithm: sha256WithRSAEncryption
15:8c:88:e3:34:81:93:54:e5:af:55:f9:bc:c0:5c:b8:42:09:
62:df:c8:7d:85:fb:f8:2d:a6:63:8f:f9:c8:22:a5:0c:4f:62:
fd:1c:11:3a:7d:e6:a9:75:d4:32:30:f2:62:fd:8a:fa:41:e9:
b3:94:d4:41:9d:d6:9e:94:20:06:79:7a:f3:4a:f8:18:69:db:
64:77:65:ce:05:78:53:98:81:64:10:ac:8b:d8:b7:cd:56:d2:
2b:93:70:5f:18:0f:45:3b:0f:65:fc:85:3c:2f:d8:5d:11:6e:
18:6d:70:f8:7b:11:84:1c:09:e0:9b:dc:b3:96:d2:57:05:55:
e2:34:68:a8:64:91:47:e8:fe:21:2a:cb:a2:30:c1:dc:d2:ea:
eb:b3:b0:18:f5:1d:cd:66:46:39:d4:69:b7:d0:15:8c:6d:8f:
3c:48:a8:41:6a:44:1f:82:11:af:c6:8d:76:f2:2c:0e:64:19:
96:97:3d:48:13:83:84:af:e6:ef:a5:86:9e:8b:7c:c8:2b:41:
d9:71:6e:eb:cd:0d:fd:c4:02:32:9c:f6:18:67:19:cb:79:04:
bf:99:7d:12:ab:c8:2b:f9:02:f5:da:32:ce:b4:5b:1e:2d:78:
1f:7f:77:0d:6c:28:8f:1e:a8:4a:88:40:fa:01:b6:d4:9b:25:
9c:e8:be:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:19 2026 by rpki-client