Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143889.roa
File: AS143889.roa (raw, json)
Hash identifier: PJfjqLNAAhQUjT0Vnj2+hE3naPANk3LhYITFtBN4BOs=
Subject key identifier: 96:6A:73:F2:6C:72:FF:D8:75:7D:DD:84:28:27:F5:2D:82:F6:0A:7E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 77F28C969DCCE928968223EB925B9E1C370E52CA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143889.roa
Signing time: Tue 26 May 2026 03:16:59 +0000
ROA not before: Tue 26 May 2026 03:11:59 +0000
ROA not after: Tue 25 May 2027 03:16:59 +0000
asID: 143889
IP address blocks: 240a:a4d7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f2:8c:96:9d:cc:e9:28:96:82:23:eb:92:5b:9e:1c:37:0e:52:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:59 2026 GMT
Not After : May 25 03:16:59 2027 GMT
Subject: CN=966A73F26C72FFD8757DDD842827F52D82F60A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:14:f8:e4:af:ae:7c:0a:56:f7:94:4d:76:
4a:11:4a:58:33:82:85:f2:cf:16:14:17:a0:bd:68:
ec:b3:e6:59:42:0d:87:73:1a:ce:a5:de:be:cb:d6:
3e:0a:f1:ca:97:c2:4a:eb:59:a9:55:8b:b2:73:ab:
1f:95:e1:10:78:17:92:d3:20:d9:77:da:87:54:43:
2f:fa:9a:ff:f4:b0:19:e3:c4:70:76:4a:97:22:d5:
97:e1:af:c9:e2:6a:93:92:5c:f9:ee:e7:41:db:15:
fe:4b:08:be:60:25:a8:9b:c9:41:28:5f:1b:9b:ad:
d0:5c:78:e1:34:81:26:8f:67:0b:4b:43:2c:8f:44:
47:9c:ad:4a:96:fa:ae:15:e0:fe:0a:2a:3b:ba:9d:
15:70:2b:f2:2f:ca:7e:99:73:59:d4:5c:47:61:f0:
7e:97:3d:79:2b:55:fb:6f:85:bb:f1:00:db:16:f1:
4e:eb:71:1c:31:1f:da:c8:76:f2:13:18:8f:10:50:
4c:ab:d6:75:ec:69:b2:42:a2:f7:06:15:93:e8:58:
02:0f:c9:fb:bc:45:8d:eb:74:f6:d5:77:9c:4c:9b:
17:3d:81:fd:b7:9e:65:9a:10:c5:80:e7:07:ef:ff:
81:e8:2d:f6:fa:ea:63:e4:4e:ed:63:f2:88:23:dd:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6A:73:F2:6C:72:FF:D8:75:7D:DD:84:28:27:F5:2D:82:F6:0A:7E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143889.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4d7::/32
Signature Algorithm: sha256WithRSAEncryption
9a:ff:80:56:08:ae:2b:81:ac:e2:99:62:ce:9e:6d:b7:c3:da:
4f:06:cf:e3:80:83:2a:f3:0f:78:8a:00:9c:69:db:ec:b6:6d:
21:61:b5:05:09:2a:f7:fe:06:b5:6d:1f:24:86:10:25:b9:4a:
0a:02:62:23:ec:42:b4:dc:bf:c0:27:79:79:ac:bc:13:d9:06:
3e:a0:69:50:c3:2b:b5:a5:37:92:b2:d2:b1:03:1a:d2:04:e8:
3a:ba:91:4b:e0:d4:41:3f:73:e6:14:eb:6e:86:b4:72:60:75:
e0:ad:fd:8d:f9:77:cf:b2:b9:6d:6b:2e:4e:88:b0:c2:5e:b6:
ec:c6:9a:bd:39:1e:33:a2:5f:38:14:94:53:b9:9f:38:b7:a7:
7b:07:53:a9:a2:5d:9f:0a:eb:b6:5e:66:12:57:ff:58:67:f6:
45:66:19:8c:fe:73:08:b9:b8:af:06:00:6e:68:01:0c:e8:2c:
60:15:54:3a:96:f3:55:f0:e6:7c:57:a1:58:05:f6:6f:0d:88:
d8:c0:4f:e0:04:5d:eb:3e:c9:d1:14:65:79:31:84:35:df:12:
4d:a6:07:59:1d:36:db:46:a0:a6:78:0a:f2:e2:7d:f0:b7:ea:
a1:70:82:d9:67:e9:d0:9f:10:68:d9:ef:23:27:af:9c:bc:c5:
53:9f:43:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:35 2026 by rpki-client