Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143876.roa
File: AS143876.roa (raw, json)
Hash identifier: V3v8zA0EDtbEH4Wn1NnI9kLIyK8wyOwJe2F354LOph8=
Subject key identifier: 4B:C8:B3:54:C6:DE:A2:EC:48:25:9F:BD:9C:25:67:5C:95:AE:CF:45
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1F5A090F011E9B9698FD38576FCC05A916EA1CBC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143876.roa
Signing time: Fri 22 May 2026 07:08:41 +0000
ROA not before: Fri 22 May 2026 07:03:41 +0000
ROA not after: Fri 21 May 2027 07:08:41 +0000
asID: 143876
IP address blocks: 240a:a4ca::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:5a:09:0f:01:1e:9b:96:98:fd:38:57:6f:cc:05:a9:16:ea:1c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:41 2026 GMT
Not After : May 21 07:08:41 2027 GMT
Subject: CN=4BC8B354C6DEA2EC48259FBD9C25675C95AECF45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:15:ed:1a:a1:9f:a2:96:ff:ec:cb:19:c4:
b0:06:cf:ed:5e:71:62:f3:6b:c9:cb:ef:d8:7f:ed:
33:5c:34:eb:b2:8d:52:34:c4:d5:4b:d7:24:18:09:
90:08:f2:3c:ca:b7:f1:1b:46:05:93:2e:8b:27:68:
35:95:b2:df:d3:91:ac:d8:1f:76:6d:18:79:9b:3c:
9b:5d:f9:70:9b:ac:52:95:40:2e:75:3d:cf:15:ac:
0d:22:c5:7c:22:41:23:24:80:01:29:b8:fa:35:cb:
1e:a9:a7:31:ff:7b:0c:ff:9d:2e:b1:eb:f9:1e:7e:
80:75:64:bf:af:b7:d3:49:70:b2:4b:60:79:89:f6:
34:78:ee:e4:c8:8d:68:33:b1:a5:bd:77:6b:60:ce:
af:ce:bd:c2:39:1e:fc:f2:b0:5c:71:cd:fb:e7:68:
61:da:6d:98:47:45:04:f8:fd:fc:c4:f3:98:6f:be:
a4:68:3f:05:af:71:10:ab:72:6c:b7:cf:fb:73:1a:
c5:d0:41:1a:49:1a:af:65:c1:10:3e:6f:d4:0e:cb:
35:7d:8d:f0:7f:c2:9a:96:01:2c:3f:44:49:15:76:
f6:ef:8b:1c:bc:81:31:59:2c:36:30:5e:47:4e:e8:
a8:b8:a0:cf:8d:97:bb:79:8b:db:8a:56:f8:ad:32:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C8:B3:54:C6:DE:A2:EC:48:25:9F:BD:9C:25:67:5C:95:AE:CF:45
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143876.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4ca::/32
Signature Algorithm: sha256WithRSAEncryption
2d:83:fa:43:61:58:c9:01:37:70:e6:36:a2:7c:b6:9b:56:ef:
6c:5e:8b:f8:cc:b8:71:c8:9c:e1:b6:97:44:81:34:a6:d5:e7:
6c:9c:d3:77:71:6b:c4:74:8d:da:f0:75:86:51:62:cb:f7:8c:
ed:ab:4e:fa:57:a5:b3:9c:cb:b7:cb:df:7c:eb:ea:64:ae:9f:
cd:b3:4b:46:38:47:79:32:db:64:27:3f:9a:f5:83:0b:9a:d6:
83:c1:6b:c3:ea:cf:7c:30:a7:fe:4a:e8:f2:a8:30:54:c3:86:
95:1f:b1:b2:e9:b8:6e:32:90:23:b8:bc:50:bf:8d:64:c8:ed:
2d:cf:b5:84:08:ca:7e:31:8c:1b:00:14:ed:d3:74:29:27:19:
4a:7b:97:99:57:84:6c:73:41:b3:d1:69:90:9d:97:30:0f:df:
40:b6:93:8b:e3:0d:c0:25:71:5d:43:87:a8:ae:9b:a7:75:90:
71:e2:df:4f:1c:a3:9f:0d:6e:23:14:73:fb:7b:3b:9f:47:9d:
01:0a:8f:e9:88:f6:8a:67:ad:be:13:30:49:b4:fe:7c:d0:ff:
51:ab:e0:81:3e:41:31:23:23:e3:40:71:c5:d2:d4:73:7d:9e:
b7:e1:70:7f:db:19:9b:46:5c:8c:89:b9:af:49:62:7f:7d:74:
d7:0f:84:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:53 2026 by rpki-client