Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143860.roa
File: AS143860.roa (raw, json)
Hash identifier: F9MneVWK/McjpuyFefnAudSE74QRtF1gB5Ekc6ixC0g=
Subject key identifier: BA:D3:C5:A6:23:C9:0C:9B:D2:45:92:A2:60:58:96:6D:20:4D:CA:C9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0260D171E4379521FC7500C1FBFA581B03F1A164
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143860.roa
Signing time: Fri 22 May 2026 07:32:33 +0000
ROA not before: Fri 22 May 2026 07:27:33 +0000
ROA not after: Fri 21 May 2027 07:32:33 +0000
asID: 143860
IP address blocks: 240a:a4ba::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:60:d1:71:e4:37:95:21:fc:75:00:c1:fb:fa:58:1b:03:f1:a1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:33 2026 GMT
Not After : May 21 07:32:33 2027 GMT
Subject: CN=BAD3C5A623C90C9BD24592A26058966D204DCAC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:6e:a9:b0:a3:e0:00:77:5d:f8:11:e6:6a:
ac:ad:36:ba:5a:e6:c6:f6:06:ad:c3:c2:07:88:59:
05:da:ca:b1:c0:21:fc:27:19:3e:32:0e:fb:4f:40:
7e:76:6d:ab:72:28:ca:ef:9d:f3:0a:7f:2e:5c:b2:
c7:73:c6:89:0c:cf:90:08:34:f1:45:26:81:0f:34:
55:91:7f:eb:0f:4a:26:57:14:c8:a2:99:27:8d:4a:
d9:b1:94:8b:1b:51:61:fe:b6:be:97:af:75:bb:e8:
40:41:f9:dc:4c:22:70:40:bf:06:e0:8a:9e:56:e4:
12:ad:4e:ea:39:5f:22:bd:7d:01:fb:20:ef:75:ec:
c4:18:94:fa:2e:4a:89:99:ee:1b:2f:6e:75:74:8c:
cc:68:f0:13:d9:c9:8a:fd:dc:76:23:ae:c3:c6:59:
49:72:a3:47:8c:cf:80:40:28:3a:cc:75:27:d6:2c:
8e:18:58:b4:e2:92:28:9b:7a:83:a1:c1:f3:c2:5d:
59:fc:c0:50:fe:6e:e1:20:59:79:f4:aa:69:7d:b9:
7d:07:52:20:9d:b6:4a:51:c4:71:dd:8d:a3:65:a5:
13:96:dd:d5:58:a2:3f:06:61:7d:88:ba:42:0a:03:
33:f9:ce:98:cf:22:b4:81:ee:b9:62:fc:80:a1:f2:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D3:C5:A6:23:C9:0C:9B:D2:45:92:A2:60:58:96:6D:20:4D:CA:C9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143860.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4ba::/32
Signature Algorithm: sha256WithRSAEncryption
0c:46:70:c1:f9:b3:42:96:68:7f:15:0a:11:49:86:9d:e1:da:
83:30:78:7c:4d:e6:7b:49:06:67:51:70:12:dd:7d:0e:ae:d6:
a7:5c:67:f3:d2:42:d9:d5:18:d4:aa:4f:3f:f4:46:55:99:44:
44:d4:27:f8:6a:77:dd:e9:2a:01:b8:bf:77:16:91:27:fe:03:
53:81:9a:83:76:ac:e2:95:9b:fa:b1:1d:5a:74:80:51:d1:37:
7c:3a:e8:54:0b:69:7a:14:44:ea:4c:65:6f:fc:c5:bd:69:a8:
41:d1:33:ad:69:d5:98:e6:ed:80:83:a3:58:0e:81:84:6b:b4:
85:f7:9e:a3:17:9c:f8:03:e0:42:fa:b9:58:61:1d:32:b9:cb:
80:e7:c3:cd:57:8e:98:2e:7c:a9:7c:4b:7b:04:74:68:f0:da:
5a:57:58:ff:9c:1e:b3:97:11:85:44:c1:b1:70:f1:22:d0:60:
ed:17:bb:b2:2f:a8:e0:ce:3c:70:94:15:8f:64:49:c3:1f:98:
e2:16:fe:96:c7:f2:b6:c8:61:64:a3:45:ea:7b:4d:71:86:b5:
9b:9b:f0:3a:ee:4b:6b:d4:5c:a5:57:71:d3:f7:07:2a:9e:d6:
ca:0f:a4:ef:e1:08:be:a2:5f:06:2f:e1:e4:5b:31:a9:a9:d2:
d5:b8:98:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:39 2026 by rpki-client