Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143867.roa
File: AS143867.roa (raw, json)
Hash identifier: 0V2g2rxCNZAuHA5B0rXhcUagRc3B6IKrPn3Q6YzxuRY=
Subject key identifier: FE:9A:06:91:42:BF:2D:C1:F3:54:01:DC:DE:18:CB:5B:EE:18:53:C3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 358B357FB2EA875BF12F926CAB746102C5A88C0C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143867.roa
Signing time: Fri 22 May 2026 07:09:07 +0000
ROA not before: Fri 22 May 2026 07:04:07 +0000
ROA not after: Fri 21 May 2027 07:09:07 +0000
asID: 143867
IP address blocks: 240a:a4c1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8b:35:7f:b2:ea:87:5b:f1:2f:92:6c:ab:74:61:02:c5:a8:8c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:07 2026 GMT
Not After : May 21 07:09:07 2027 GMT
Subject: CN=FE9A069142BF2DC1F35401DCDE18CB5BEE1853C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:ee:5e:c5:67:be:3f:b1:7a:86:46:22:e1:
5d:24:5d:8f:b0:75:42:b3:91:10:35:af:41:2b:56:
d7:2c:18:66:a8:f7:bb:02:d8:06:8f:c6:5d:b0:5f:
aa:fc:8e:40:65:11:65:9a:79:0d:d0:09:75:22:9f:
ea:5e:2b:f8:7b:87:73:ea:8a:4d:d0:d2:93:ed:f8:
c5:9e:e7:b9:8a:b4:ad:48:59:fd:80:70:85:00:f4:
5c:6e:76:07:53:66:79:ae:bc:6a:ce:db:9c:f1:59:
17:ca:c8:d4:29:22:12:69:e2:f7:8d:72:c7:a1:ba:
95:88:95:4f:2c:77:f9:9c:83:20:f4:cd:c0:e1:28:
40:87:d6:bc:2c:ce:6f:ad:9b:ab:87:3e:c3:5b:b5:
4f:68:b1:49:bf:c4:39:f7:d3:f5:04:59:76:ec:be:
ac:9e:2f:5e:48:25:e0:f7:d8:ab:87:a7:dc:33:55:
1a:1a:79:59:1c:70:a0:59:a4:f1:cf:d0:6f:e6:b1:
52:88:04:ce:02:99:2a:da:65:23:05:63:ff:48:54:
87:e0:84:70:9a:8c:56:9d:63:c6:ba:30:a6:2f:da:
45:bd:45:a5:6c:3d:54:53:35:35:60:7c:ca:37:0f:
1d:08:72:5c:50:cf:1f:cd:ba:66:61:2b:20:d1:b0:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9A:06:91:42:BF:2D:C1:F3:54:01:DC:DE:18:CB:5B:EE:18:53:C3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143867.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4c1::/32
Signature Algorithm: sha256WithRSAEncryption
a5:bf:ce:92:73:16:82:7e:ec:f4:e7:96:09:45:7f:03:a9:4f:
1b:46:44:57:cb:34:14:d8:52:5a:c7:59:66:22:fe:90:b4:39:
69:82:7e:a7:d4:d1:76:d2:5a:3d:c3:bc:3f:77:2d:d1:28:d9:
dc:a5:20:2f:48:66:50:0c:f4:6c:e7:72:e0:14:d6:f7:33:5b:
72:9b:12:af:20:a6:39:86:49:1e:b5:1c:e1:0e:70:e1:dd:5b:
48:ff:f5:0c:60:f9:e1:b6:f7:ed:1a:d9:38:04:5e:59:2a:08:
16:de:e2:d8:aa:b3:4c:92:b8:fc:af:b8:40:aa:fd:a1:ce:0b:
83:8e:b2:60:8f:d8:25:8a:31:a1:1e:28:66:73:61:e6:12:fb:
8f:f4:81:8c:c0:d2:31:44:4e:39:9e:7c:1e:31:33:10:2e:27:
52:ea:ab:e1:dd:2d:cc:63:46:fd:4b:e8:67:8a:df:9e:7e:14:
35:5f:29:b5:10:ce:bc:3a:00:4c:7e:2e:ab:6d:98:b5:23:a1:
0d:3a:9c:54:7b:dd:03:bf:a0:e6:0c:0b:f4:ef:26:1c:4b:a0:
05:3f:72:e4:4e:f2:84:18:d5:ae:d9:9b:f8:d5:aa:74:d9:bb:
b5:fa:28:ec:fb:b0:90:7f:9e:2d:ed:ec:57:22:52:53:fd:30:
6a:74:1f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:50 2026 by rpki-client