Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143873.roa
File: AS143873.roa (raw, json)
Hash identifier: Iw5xy8OOSbHlCqhGWhli9Wdwe4q7s5MNHzj3oI66M6k=
Subject key identifier: 55:33:75:AA:33:B6:07:4D:D0:63:33:54:87:E1:98:70:85:12:69:F0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32782A7C419F7F37012F5A844381D20611959D4A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143873.roa
Signing time: Fri 22 May 2026 06:05:37 +0000
ROA not before: Fri 22 May 2026 06:00:37 +0000
ROA not after: Fri 21 May 2027 06:05:37 +0000
asID: 143873
IP address blocks: 240a:a4c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:78:2a:7c:41:9f:7f:37:01:2f:5a:84:43:81:d2:06:11:95:9d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:37 2026 GMT
Not After : May 21 06:05:37 2027 GMT
Subject: CN=553375AA33B6074DD063335487E19870851269F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:ff:82:73:f6:48:51:5f:3c:c2:42:21:14:
17:79:af:4b:b8:6a:de:62:7f:50:26:78:6c:7c:8c:
0e:c1:63:a6:71:de:7f:2d:22:89:06:7c:3c:86:fd:
84:98:b2:d6:25:f1:b3:d3:d9:49:93:35:ac:eb:ee:
4e:02:4d:66:b1:b6:0c:d4:59:65:81:8f:b3:f1:c3:
f2:08:10:cb:dd:cd:77:8c:7e:a7:df:ef:b7:60:f4:
7c:7e:85:f3:05:51:30:ab:f6:2a:66:8f:ac:6b:6b:
39:f9:de:60:5e:60:40:c6:b3:41:f6:eb:25:d3:0d:
e2:ba:e1:8e:80:b2:94:9c:f4:d6:e8:cf:b4:70:9f:
1d:08:55:50:db:03:ce:a8:71:28:5f:0f:ba:fa:77:
5c:9f:10:89:cb:af:19:c9:a0:77:8b:61:76:32:61:
ce:7a:75:f1:1c:06:83:20:52:06:e5:50:2e:d2:2c:
b0:85:b6:11:91:be:01:05:49:4d:e3:2b:49:0f:c8:
18:2a:08:c5:53:e5:fc:94:b8:20:03:05:51:32:b3:
c0:f3:19:c3:e9:77:05:13:53:b0:dd:02:67:4d:ab:
3b:05:7a:83:65:f2:e3:c8:22:1e:07:ca:84:78:20:
d3:6d:4a:81:9e:b7:10:93:11:65:75:05:08:76:73:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:33:75:AA:33:B6:07:4D:D0:63:33:54:87:E1:98:70:85:12:69:F0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143873.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4c7::/32
Signature Algorithm: sha256WithRSAEncryption
9a:6a:63:33:5e:36:d0:15:ef:69:92:7b:6f:32:d3:44:86:23:
5f:cc:95:f6:c3:23:23:5c:56:da:d4:21:8b:0c:c2:a6:d0:4b:
09:57:0b:62:7b:0d:61:78:c1:f2:7e:ea:61:2c:04:8e:ec:c1:
8c:9f:84:6a:8c:21:75:05:c5:5d:db:3a:ae:76:0c:f0:bf:27:
72:2e:e9:58:70:e7:d6:0a:3c:c0:e6:a7:6d:19:80:0b:d7:2c:
45:4e:ff:31:36:49:53:5c:fe:2a:2a:d4:e2:22:38:48:73:b2:
43:be:c8:12:96:be:bb:88:1d:5c:aa:40:b5:37:a5:f8:6f:3c:
5b:77:28:0d:78:6d:8e:ae:53:57:cd:ef:85:4d:73:58:35:53:
e4:d2:cf:97:50:86:76:66:ef:34:44:05:17:76:f8:22:e1:47:
f0:71:81:f5:85:0b:bf:01:d8:ca:62:de:9a:07:28:37:12:96:
8f:09:ed:43:8e:3e:02:5b:2c:b6:79:41:20:99:9e:9b:49:78:
6e:78:6a:88:fd:b7:d7:ee:0e:d6:0b:3b:b8:a9:33:63:57:ae:
43:e7:50:e2:fc:a6:74:2d:d1:08:81:93:a9:33:f2:a1:6a:00:
d3:8c:e2:a4:cc:ce:39:01:8d:1a:91:bb:29:d8:ad:48:10:c2:
c8:8e:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:53 2026 by rpki-client