Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143885.roa
File: AS143885.roa (raw, json)
Hash identifier: eAq2UqdVFE9lOjuG1vRwzzi/K7h/iswejWFPfDo5uC4=
Subject key identifier: A7:EE:41:B2:B1:C8:C3:0B:18:4F:EE:90:01:BE:83:5B:09:D7:33:B6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 39D1A66BBB47F7DDC3D8C809FF05DFFE23A87071
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143885.roa
Signing time: Fri 22 May 2026 04:26:43 +0000
ROA not before: Fri 22 May 2026 04:21:43 +0000
ROA not after: Fri 21 May 2027 04:26:43 +0000
asID: 143885
IP address blocks: 240a:a4d3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d1:a6:6b:bb:47:f7:dd:c3:d8:c8:09:ff:05:df:fe:23:a8:70:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:43 2026 GMT
Not After : May 21 04:26:43 2027 GMT
Subject: CN=A7EE41B2B1C8C30B184FEE9001BE835B09D733B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:a5:97:94:e3:78:2f:da:10:5b:76:b5:27:
88:95:d5:87:87:76:87:df:ff:b3:5d:af:e3:d0:bf:
ba:e4:12:70:98:2a:76:49:ba:fd:cf:bb:b3:ca:d3:
ea:92:45:4e:76:1e:10:14:ae:46:1d:db:a1:50:e9:
ca:23:0f:10:80:ad:e2:ff:e7:da:14:55:a6:3f:d9:
4e:c4:08:56:31:fb:7f:25:dc:18:a8:ca:b7:fd:f6:
0c:06:10:a5:9c:02:f3:90:31:73:85:9b:27:87:30:
6c:86:37:ea:04:b2:18:76:2b:9b:7d:74:d9:35:59:
70:97:f1:2e:b4:7e:5d:e7:31:94:94:f7:24:e8:fd:
3e:47:98:b2:a6:3c:3d:a9:70:c6:b1:5e:77:3e:a0:
aa:f5:c7:3f:6f:4f:98:04:1a:f1:1f:d4:3a:ad:41:
6f:9a:82:70:a1:d9:9c:39:01:2e:f1:25:f8:92:94:
61:78:65:4d:df:84:b0:26:ff:6e:02:e0:09:54:4f:
4c:47:82:d9:98:c6:4f:cb:3c:74:0f:e8:cf:31:34:
24:06:14:76:85:ac:6c:97:95:7b:70:ce:3d:ff:31:
2e:72:3c:b6:09:31:11:71:bb:36:3f:b9:dd:b6:c9:
0d:ee:ee:f4:8d:3b:7e:d0:60:f1:6a:f0:d7:02:96:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:41:B2:B1:C8:C3:0B:18:4F:EE:90:01:BE:83:5B:09:D7:33:B6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4d3::/32
Signature Algorithm: sha256WithRSAEncryption
4f:e6:5b:b7:cd:8f:9d:ab:e1:6c:e4:87:d6:ae:39:3e:b0:d1:
e8:a0:74:0c:17:b1:af:5b:37:90:01:c7:d8:13:25:c8:28:2f:
34:c4:f3:fd:53:0f:8d:60:c6:30:bc:99:17:7a:cf:b4:0a:ca:
18:b7:ea:79:34:8d:7e:d9:0e:58:8c:62:aa:14:e7:fb:2b:a2:
2f:bc:fe:01:65:a8:9e:3d:d8:59:ff:04:e2:29:42:54:3a:aa:
05:ee:98:64:b7:55:45:ff:ce:3b:33:87:00:ea:c7:f5:c7:e8:
f4:3a:db:83:34:f3:9d:22:4e:f0:05:91:49:b7:f6:88:da:bd:
85:51:40:32:40:90:f3:65:1f:94:32:3b:78:41:2f:e0:33:0e:
27:3a:4f:7f:b8:08:08:45:f9:20:6c:dc:8d:f3:62:60:65:c5:
f8:25:f2:6b:f9:70:55:74:89:07:65:41:3c:93:2c:87:64:82:
1c:ff:82:c3:ee:15:4b:c5:17:58:20:9f:b0:1a:f1:c0:9e:8a:
ec:b6:e5:42:32:d9:38:8a:5b:fe:61:83:a7:e1:77:b6:82:62:
4d:e4:9b:a4:4f:53:38:12:5e:3f:67:84:4c:28:e2:a3:c3:c6:
c5:e7:83:bc:37:ef:05:48:f1:e4:10:58:ba:9d:91:fc:74:3e:
71:86:76:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:48 2026 by rpki-client