Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143882.roa
File: AS143882.roa (raw, json)
Hash identifier: 18KijhcEtvhIy9m7R7BNS43Eys91rs4N8hEX++e4tfc=
Subject key identifier: F7:14:90:C3:76:D3:24:25:2B:67:E0:86:6E:88:8D:B3:C6:52:03:0C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 14A15966759C625D876B8C851C3CE65F1D53834B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143882.roa
Signing time: Fri 22 May 2026 06:05:33 +0000
ROA not before: Fri 22 May 2026 06:00:33 +0000
ROA not after: Fri 21 May 2027 06:05:33 +0000
asID: 143882
IP address blocks: 240a:a4d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a1:59:66:75:9c:62:5d:87:6b:8c:85:1c:3c:e6:5f:1d:53:83:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:33 2026 GMT
Not After : May 21 06:05:33 2027 GMT
Subject: CN=F71490C376D324252B67E0866E888DB3C652030C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:1b:53:52:de:ce:38:28:fb:c8:7a:09:9a:
bb:07:d4:6d:1f:b8:d2:ad:17:95:60:11:ac:b3:a0:
e1:67:7c:7b:fe:66:91:7b:25:e5:66:88:2e:25:34:
2c:ad:88:6b:a9:1d:b7:d8:e9:04:54:36:22:37:97:
d8:82:ce:da:82:59:44:69:62:8f:95:bb:7a:08:83:
9d:7b:74:35:3e:e1:0e:af:e3:ec:08:49:90:47:a5:
00:bb:e0:4d:4c:14:75:5d:a6:35:27:16:71:60:d2:
c2:ea:e0:24:32:8a:68:8a:24:80:12:79:4d:a1:cf:
01:19:2e:8c:f0:8d:c3:78:d2:63:8e:da:8a:7e:82:
c0:78:e7:97:74:a6:41:5f:4c:79:2b:54:96:45:4c:
0c:09:88:26:d8:f1:f7:ca:a5:10:55:a4:9f:6a:3d:
42:d9:e4:3d:08:20:18:2c:6b:b5:56:a1:6c:35:b2:
f0:c0:d7:1c:a0:d7:3d:b3:f2:3f:52:bb:aa:24:12:
2e:75:01:57:09:e4:33:49:f8:24:91:d1:f0:67:9c:
5f:48:3a:f9:70:bc:83:c4:55:1b:29:89:f6:3a:c0:
6b:23:51:e5:27:9f:df:6f:6f:e0:cb:be:65:9c:4b:
15:61:36:d3:55:c9:64:a1:df:ec:6d:cf:69:fb:93:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:14:90:C3:76:D3:24:25:2B:67:E0:86:6E:88:8D:B3:C6:52:03:0C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4d0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:9b:3c:e4:fb:06:c6:3c:e9:e1:9b:fe:42:75:d7:13:09:67:
8b:17:86:31:00:c6:c3:e2:1f:88:d4:9f:ec:49:72:88:36:1a:
ba:ac:c7:0e:38:ac:d9:db:a3:ba:65:e1:ae:82:80:c4:fc:3b:
bc:bb:57:2f:5b:ea:7d:7d:70:01:8f:01:e7:5c:97:5d:b0:3b:
3d:e3:4e:f8:eb:d2:84:3f:cf:54:f5:20:91:01:18:f1:e6:a2:
82:22:eb:33:b7:32:6b:4b:be:73:bd:cd:bc:a3:3b:e5:f0:0c:
ca:e7:07:4f:54:a0:a5:2b:48:8e:ca:e9:93:e6:bb:03:6e:62:
a5:05:ff:65:e7:18:85:c3:ef:ce:9f:6c:b3:70:a5:33:68:a1:
f3:3f:43:9e:bd:64:37:6a:d9:1c:84:7d:df:f8:5a:bd:96:51:
ec:db:52:5b:86:eb:53:72:0f:8e:97:bc:bb:24:4a:9c:28:00:
62:3f:f9:ac:57:68:fb:70:c6:45:f0:44:b9:33:5c:0f:40:f5:
54:b5:35:e8:c2:0f:c7:3a:53:5e:22:0a:54:33:a5:1f:5f:52:
6c:44:45:40:3e:1a:5b:b6:e9:d0:86:3b:d5:3a:79:5d:bc:10:
df:21:da:98:8d:e4:a8:30:24:99:fb:d4:c6:d4:b1:68:d2:75:
57:13:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:53 2026 by rpki-client