Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143879.roa
File: AS143879.roa (raw, json)
Hash identifier: Gdw15bZuEqROwTnYfhaqZvowu2BlVn29d8GIw2m2cGI=
Subject key identifier: 6A:E2:B2:45:D5:02:F4:1E:E3:EB:9C:E8:0A:70:1D:F4:89:CD:06:26
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 738D5E546A3864897A337771CDD61165509B301F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143879.roa
Signing time: Tue 26 May 2026 06:30:33 +0000
ROA not before: Tue 26 May 2026 06:25:33 +0000
ROA not after: Tue 25 May 2027 06:30:33 +0000
asID: 143879
IP address blocks: 240a:a4cd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:8d:5e:54:6a:38:64:89:7a:33:77:71:cd:d6:11:65:50:9b:30:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:33 2026 GMT
Not After : May 25 06:30:33 2027 GMT
Subject: CN=6AE2B245D502F41EE3EB9CE80A701DF489CD0626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:32:80:ed:1c:f4:bd:9d:9f:72:f3:8e:94:
6f:3f:c1:61:55:ac:05:2c:e9:06:21:77:f9:91:06:
83:ae:a1:87:94:18:08:6b:84:83:c5:ef:51:b6:89:
45:d8:a8:aa:b2:67:08:a6:6a:ab:da:8b:ec:22:7c:
63:34:ce:85:cd:9a:2a:4a:ca:b7:a1:9d:57:ef:ca:
68:3e:69:d7:90:f1:4f:c8:2e:b9:f0:7e:83:41:49:
5c:40:a7:c2:bf:80:9f:95:d6:f8:44:06:00:c5:2d:
cb:42:e3:fd:87:06:3b:db:a3:cd:f6:f1:cb:d8:22:
f0:b1:bf:13:c1:b9:ac:3b:f0:04:13:3b:29:0f:c8:
d3:b1:dc:b5:d3:6d:70:28:dc:12:b9:10:61:68:17:
ef:8b:97:dd:52:09:d2:0f:82:20:2a:ac:41:f7:eb:
14:3f:0e:0c:dd:a5:31:9d:38:56:41:af:6b:f1:1f:
d0:f7:4d:60:82:29:41:6a:aa:cd:e8:cd:df:34:8c:
f3:a8:d9:86:29:3a:c5:28:4c:b7:44:bf:86:45:ea:
d7:dc:af:bf:21:4b:dd:88:09:82:8e:0a:50:1a:42:
9a:74:fb:ff:5d:35:d9:bb:93:ea:4a:ae:c1:ce:89:
84:0f:99:1b:39:00:49:8f:f9:6b:6d:2b:3b:86:ff:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E2:B2:45:D5:02:F4:1E:E3:EB:9C:E8:0A:70:1D:F4:89:CD:06:26
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143879.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4cd::/32
Signature Algorithm: sha256WithRSAEncryption
3f:0f:31:50:e7:cf:0a:5e:81:c3:0c:11:b7:80:0c:cf:99:08:
7c:0e:21:4e:db:91:d7:97:61:ad:2d:4e:0b:ee:57:96:ca:1a:
d4:8f:91:45:d5:83:af:3f:84:63:7c:8c:ad:f9:eb:9e:8a:15:
59:9c:d0:50:04:59:ed:47:88:6c:bf:64:30:bc:d0:bb:61:07:
68:6f:69:b5:86:4a:33:15:4f:ca:82:92:51:f5:b1:d7:5d:6c:
43:92:fa:52:b8:46:64:9b:5f:20:b0:5f:35:45:a9:9e:b4:7e:
ea:b4:7d:40:dc:bd:bc:ed:4d:1d:02:11:1a:da:79:ab:cd:a1:
09:67:67:f3:82:98:b7:bf:74:d9:ac:d6:d6:89:99:30:da:87:
6f:53:3d:60:eb:9e:f4:97:bf:f7:e3:4e:45:15:f6:dc:a5:94:
47:1c:93:b5:b0:5b:27:64:96:18:2a:9a:1b:8a:38:4d:e7:97:
19:67:07:e7:81:d9:f1:51:42:8b:ff:0a:d6:2e:b4:1e:6b:6f:
50:0e:7e:4b:5c:10:e9:8d:56:d1:53:80:41:b9:86:2d:cd:75:
ea:32:c7:88:2c:8e:fa:b3:bb:81:36:b3:6e:f0:a1:90:57:cb:
34:e5:5a:e6:1f:9e:18:92:23:b6:f2:b3:72:89:2f:50:21:62:
c3:af:17:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:20 2026 by rpki-client