Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143884.roa
File: AS143884.roa (raw, json)
Hash identifier: o/HhK8MqxSWqNBVNh37auFKWcuaxlsYXAf+2p34C0cc=
Subject key identifier: 55:14:FE:75:49:30:D2:36:6C:E4:C6:F0:36:AA:37:3D:BC:FD:42:3D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 070D2446D46A378508F3773B03348D485E75A726
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143884.roa
Signing time: Tue 26 May 2026 06:13:01 +0000
ROA not before: Tue 26 May 2026 06:08:01 +0000
ROA not after: Tue 25 May 2027 06:13:01 +0000
asID: 143884
IP address blocks: 240a:a4d2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0d:24:46:d4:6a:37:85:08:f3:77:3b:03:34:8d:48:5e:75:a7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:08:01 2026 GMT
Not After : May 25 06:13:01 2027 GMT
Subject: CN=5514FE754930D2366CE4C6F036AA373DBCFD423D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:48:6a:37:ec:78:61:e8:e8:1b:79:94:84:
09:aa:91:9a:4d:9f:65:e2:e6:cc:9d:c3:c5:73:53:
48:28:0f:b7:df:26:f9:74:74:6c:67:42:22:90:72:
53:a3:7b:e8:6b:20:75:12:c8:f4:e0:ca:66:8c:cb:
16:f6:36:19:9a:0c:d1:bc:99:2e:fb:b5:f4:a6:d2:
cc:0b:c2:7d:06:9f:56:bd:2a:16:af:5a:70:20:9b:
51:0e:2a:34:49:f9:47:24:2e:1e:e3:44:76:38:3c:
05:a4:2a:ad:59:74:1c:2f:8b:f6:a0:c6:1f:93:f1:
f1:59:23:c6:bc:03:21:1a:1c:1c:72:7d:0b:68:61:
bd:cd:e4:0e:de:79:13:a4:97:dc:7e:46:d7:d1:76:
c5:58:f0:27:cf:bc:ce:09:73:4e:a4:6b:10:96:67:
33:10:7e:80:25:05:81:2c:42:2b:ba:2a:6d:7a:0f:
34:d5:af:67:eb:40:ba:af:e8:7b:2a:0e:09:75:71:
5d:d9:61:7a:3a:45:16:85:c1:ec:a2:32:fd:b1:7a:
90:dc:ae:38:cf:8e:53:be:60:6f:ce:e5:54:d4:7e:
22:e2:07:36:b3:ad:ae:c8:b0:02:86:2a:39:92:3e:
3e:96:a7:ae:fb:08:6d:3c:67:82:6a:a5:6a:20:d0:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:14:FE:75:49:30:D2:36:6C:E4:C6:F0:36:AA:37:3D:BC:FD:42:3D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143884.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4d2::/32
Signature Algorithm: sha256WithRSAEncryption
30:9b:f1:6f:18:26:4e:e5:18:ba:5e:9e:31:7d:66:22:d0:47:
ce:91:c7:b5:fd:89:ec:73:7c:ed:a7:d5:c8:17:fd:9d:67:00:
eb:88:97:d3:57:c3:70:0e:c2:77:d5:cb:52:51:5b:38:96:ee:
73:30:54:a1:82:e4:27:29:bc:9c:e1:d5:f2:28:ba:1d:de:5c:
1b:a5:59:44:7f:57:1d:25:ee:f2:59:31:00:65:5c:c2:40:40:
d3:d9:d8:6d:c9:1b:98:c4:1a:d0:f6:76:49:35:08:b4:25:4f:
84:d2:6d:4f:44:d3:1d:75:90:ca:f3:be:5a:b2:f6:2b:37:e7:
6f:16:35:92:f8:cf:90:58:4d:27:90:df:04:60:4c:d0:56:20:
66:69:dd:09:aa:79:cf:ba:a9:da:57:8a:a7:07:a2:50:be:25:
34:8e:f8:1e:41:e0:b6:16:c4:7a:05:f7:14:dd:11:81:ca:06:
26:80:97:6f:98:1e:70:3a:77:96:c0:21:19:ae:07:08:25:f6:
5f:33:39:08:21:f7:0e:43:58:8a:6b:59:32:84:85:55:d1:3c:
e9:f8:b2:76:0a:2e:4a:bf:34:c4:b9:f0:0c:60:64:85:ee:2b:
d8:1d:b0:b1:ad:63:f5:96:df:2c:c5:81:5e:cf:6e:9f:a1:80:
4f:ab:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:24 2026 by rpki-client