Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143880.roa
File: AS143880.roa (raw, json)
Hash identifier: iTL0kz+tmiosvRBDxTe+jcxXaZ3DKw5aE9huPTx2aQc=
Subject key identifier: 58:58:BA:E8:4A:2D:74:16:F1:B4:45:9B:D4:73:0A:01:EA:0D:CF:72
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 70B7B012271BAE63129C7DA13E17DC6F681D3D9F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143880.roa
Signing time: Mon 25 May 2026 06:49:08 +0000
ROA not before: Mon 25 May 2026 06:44:08 +0000
ROA not after: Mon 24 May 2027 06:49:08 +0000
asID: 143880
IP address blocks: 240a:a4ce::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:b7:b0:12:27:1b:ae:63:12:9c:7d:a1:3e:17:dc:6f:68:1d:3d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:08 2026 GMT
Not After : May 24 06:49:08 2027 GMT
Subject: CN=5858BAE84A2D7416F1B4459BD4730A01EA0DCF72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:6a:67:93:15:94:68:ec:57:a9:1c:73:00:
7c:f9:e8:0b:d3:c1:c2:bc:c2:7a:42:c2:9d:b0:3d:
57:63:13:d8:09:3d:7a:4f:af:31:bd:05:e2:bd:36:
20:83:83:fa:82:62:e3:86:38:1a:8a:d7:86:ea:f0:
eb:ee:fd:c3:1c:9b:c1:ec:d3:b1:d2:63:d9:43:79:
cd:5d:d7:8d:99:48:ec:bc:d1:08:04:45:70:d1:c8:
d3:7c:65:94:9b:cb:79:28:5d:af:a1:e5:bf:c3:e2:
8a:da:24:6d:58:43:ac:ef:a1:55:5a:3c:d8:72:4f:
3b:5e:6a:f1:30:76:e3:b3:ab:21:d6:4c:86:aa:03:
2f:df:ed:21:a0:9b:13:cb:fb:52:89:2a:a5:8a:0a:
c0:d6:e4:ee:64:47:5a:1e:ea:8c:f7:84:df:da:84:
35:e0:e2:66:af:21:d1:f8:98:34:62:3f:79:6a:1a:
bb:52:f0:bd:db:43:e6:2b:56:c0:ac:2a:24:97:b9:
12:32:6f:4e:3f:fd:e4:c7:ff:92:8e:65:e1:1a:b7:
ef:82:39:c0:03:9e:e9:b7:d7:59:6b:3b:c1:f4:f6:
5a:11:eb:f8:a8:d3:76:8f:64:8e:e6:d5:fd:61:0b:
0c:33:4d:39:f4:d6:7a:a9:3b:76:8e:f2:9e:59:a2:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:58:BA:E8:4A:2D:74:16:F1:B4:45:9B:D4:73:0A:01:EA:0D:CF:72
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143880.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4ce::/32
Signature Algorithm: sha256WithRSAEncryption
ae:9f:59:2a:3c:67:fa:5b:84:99:59:04:3f:0b:db:7c:02:1f:
ef:e7:95:b1:57:de:4b:fe:af:78:a8:df:56:85:8c:20:e8:58:
82:cf:eb:e6:ca:57:10:0f:ab:0b:5a:9c:eb:c2:0d:5a:4a:b2:
2a:49:a4:30:df:15:10:37:58:ef:60:82:7b:a0:57:26:ae:c8:
e3:23:7e:cc:17:98:62:2a:c9:5c:7d:a4:ed:67:2e:10:f6:64:
7a:6f:ce:fc:f3:26:8e:3d:4d:ba:fb:c2:98:8e:72:32:e5:2e:
fd:7d:55:4d:a4:72:4a:cc:6e:1c:21:cc:f7:fd:1d:93:b8:09:
d2:7a:f8:22:21:88:e6:fd:8c:eb:88:88:89:86:96:3c:06:38:
22:e7:f3:0b:b5:b8:76:4c:c4:bc:0f:98:0e:8e:de:ea:96:b3:
e6:a2:43:8c:47:af:b1:c8:9e:19:fe:b9:bf:c5:27:27:80:31:
cc:df:67:89:80:e3:b9:bf:cb:35:d5:a3:60:54:cc:6a:b8:08:
a9:1f:26:f3:bb:43:bd:21:d9:d8:7b:76:bf:d1:aa:3b:c7:95:
a7:73:28:e7:2d:14:fe:af:86:64:61:6b:ee:f8:7b:f1:0e:28:
1b:c4:79:36:20:69:a2:77:84:ab:59:e4:b1:c1:49:99:90:7b:
9b:e3:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:01 2026 by rpki-client