Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143891.roa
File: AS143891.roa (raw, json)
Hash identifier: wIAq1teg0UpWcqPLLu9JTG535vAEN4GiViUSr1Kdg5k=
Subject key identifier: 96:71:25:9A:A3:9B:A1:99:99:F2:C7:AD:DE:9F:3A:D9:77:38:31:B6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 06B9576C5C00CB91F0E04116EE82F129C4274A21
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143891.roa
Signing time: Fri 22 May 2026 06:58:38 +0000
ROA not before: Fri 22 May 2026 06:53:38 +0000
ROA not after: Fri 21 May 2027 06:58:38 +0000
asID: 143891
IP address blocks: 240a:a4d9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b9:57:6c:5c:00:cb:91:f0:e0:41:16:ee:82:f1:29:c4:27:4a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:38 2026 GMT
Not After : May 21 06:58:38 2027 GMT
Subject: CN=9671259AA39BA19999F2C7ADDE9F3AD9773831B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:9b:10:48:d7:26:ce:24:de:10:ee:c8:6b:
52:81:06:c1:f3:ee:7e:f2:5b:00:b8:ce:b4:98:d4:
1a:ec:4f:9e:4d:bc:b1:df:dc:a9:46:d0:b8:f3:86:
10:42:50:48:0b:37:3b:29:84:d6:44:b1:f6:2d:73:
50:d9:e8:99:aa:cc:e4:60:5a:2d:00:e2:f2:93:18:
cf:c1:e5:41:b7:78:c9:d0:fb:42:e3:bb:98:fb:e8:
0d:86:b0:4f:81:5a:5d:30:1e:e7:6c:e1:0d:d2:80:
07:71:de:6d:5e:0d:14:97:e5:7e:41:be:70:e8:60:
d4:fc:d7:c4:49:f4:5e:2f:56:ed:9d:89:38:7e:48:
8f:89:7b:d6:e3:f9:ad:4d:08:d7:5a:13:66:ee:92:
b3:f1:41:08:03:1b:27:a7:c6:d1:1a:53:a0:99:ce:
97:5f:58:7c:3d:5b:56:c1:60:12:b4:33:65:29:d3:
7b:4d:b2:58:8f:2f:12:4d:e5:dd:5b:b5:78:56:77:
0e:90:ae:f0:70:6d:d2:2c:dd:a7:c3:ec:22:f0:25:
1a:db:93:71:02:eb:0a:e1:16:2a:a5:66:8a:a7:ae:
51:9a:04:8b:76:ca:8a:bf:48:20:5d:8b:0b:b5:6f:
fa:1b:fd:b9:55:8d:48:99:77:1c:e1:14:f1:e0:42:
03:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:71:25:9A:A3:9B:A1:99:99:F2:C7:AD:DE:9F:3A:D9:77:38:31:B6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143891.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4d9::/32
Signature Algorithm: sha256WithRSAEncryption
86:61:5c:cb:5e:92:3c:02:10:9b:3b:5f:86:59:48:e0:df:2d:
26:15:c8:21:b0:45:b1:22:bc:9a:78:1f:b4:6d:fa:c7:4c:03:
16:a5:8a:07:d5:77:f0:64:2f:e1:ed:f6:60:b2:99:fa:0a:db:
40:c1:59:dd:e9:44:5d:65:3d:e1:b3:1f:ee:be:84:09:92:ba:
5b:5f:52:c5:18:9e:e9:ce:22:f2:dc:38:57:11:e9:f7:6c:26:
87:1f:81:36:31:b0:7e:cf:7f:1c:2f:a3:15:bb:e7:df:37:e3:
5e:b5:16:08:84:56:12:41:2e:4d:9c:23:24:96:40:cd:b3:96:
69:61:a8:94:be:16:52:ef:ca:3a:99:4a:5e:08:b8:40:db:1c:
c2:32:f3:1e:2b:9e:76:46:27:8f:10:83:b7:0b:42:9b:34:9e:
26:40:f6:49:6e:b5:5c:b4:d4:07:79:5a:98:86:38:f9:dc:27:
c4:76:79:50:7c:65:0c:ca:cc:72:50:ab:ab:49:33:1e:e4:46:
ed:cc:0a:01:05:71:41:73:c7:cb:7f:15:0e:81:0f:24:bd:c4:
78:4d:33:41:98:0a:9f:17:ed:71:19:e4:9d:83:75:d1:18:27:
50:8f:3a:23:59:1a:eb:0e:45:09:1a:b7:ea:40:0f:af:18:c2:
5b:dc:9c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:23 2026 by rpki-client