Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143899.roa
File: AS143899.roa (raw, json)
Hash identifier: 8TOGajPtVVzMWX6l04IkvlSy+i+qMexAJi5alINowCY=
Subject key identifier: FA:E3:FC:C9:01:22:AE:70:53:BB:44:F6:C7:A6:87:E0:EB:C2:F4:6D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5909570BA454575FA2FCBD46A94FEA362C397B5F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143899.roa
Signing time: Fri 22 May 2026 06:46:18 +0000
ROA not before: Fri 22 May 2026 06:41:18 +0000
ROA not after: Fri 21 May 2027 06:46:18 +0000
asID: 143899
IP address blocks: 240a:a4e1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:09:57:0b:a4:54:57:5f:a2:fc:bd:46:a9:4f:ea:36:2c:39:7b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:18 2026 GMT
Not After : May 21 06:46:18 2027 GMT
Subject: CN=FAE3FCC90122AE7053BB44F6C7A687E0EBC2F46D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:da:ee:5d:25:69:13:90:c3:ec:29:81:a1:
f1:31:8a:6b:29:1c:03:49:d3:f8:d9:c4:d4:70:28:
07:6d:c8:75:3f:ca:e3:96:8c:c2:82:01:c2:fb:36:
86:cc:d0:cf:30:08:51:e9:38:b3:af:ea:c5:db:02:
33:9e:d6:b7:c3:a5:80:1c:18:55:cd:fa:eb:5a:47:
0e:b7:67:dc:dd:f4:b8:1d:76:c7:aa:0b:0f:9e:85:
df:40:19:2b:55:8a:1b:a4:66:b1:7d:da:18:cc:88:
7e:a5:fd:53:3b:94:dd:83:36:4e:76:0b:d5:c0:f7:
e2:68:10:b8:29:7c:86:11:3a:f2:86:fc:31:d0:35:
34:68:66:75:a5:96:a2:1b:be:fd:2d:80:dc:50:69:
99:4b:de:cd:e7:e7:13:66:70:ec:a8:6c:14:b5:3d:
f7:dd:85:4e:39:91:d1:b0:cf:26:74:85:04:c6:c8:
7b:f3:b7:fe:b6:a7:4a:c9:66:99:c9:37:bb:78:99:
48:fc:19:fe:6d:1a:9e:f4:12:41:53:60:59:6b:b5:
1c:d9:51:26:c1:2b:80:c7:93:74:6a:95:67:92:00:
9c:8c:57:d6:af:ff:ef:f7:4c:bb:3f:e2:c1:d8:f7:
d8:7b:06:af:01:7f:09:3e:3d:0c:cf:96:61:18:88:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E3:FC:C9:01:22:AE:70:53:BB:44:F6:C7:A6:87:E0:EB:C2:F4:6D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4e1::/32
Signature Algorithm: sha256WithRSAEncryption
b9:bc:e8:7c:f4:ca:bc:da:7c:81:f5:7a:0e:20:97:90:74:15:
2b:6b:68:34:97:eb:17:bd:4a:4d:21:43:58:67:e7:a1:32:9c:
f6:44:31:7c:33:83:78:3e:fa:cd:73:02:8b:58:e2:88:66:e8:
f3:0d:01:f0:99:c5:8b:79:57:01:d6:18:18:94:6b:ef:49:d0:
01:80:d9:63:53:03:e1:7e:8a:bd:ea:8e:a4:c0:d3:2c:38:92:
f3:66:de:af:68:57:ab:d5:e9:35:3e:0d:cc:8b:d9:8c:8c:e5:
0f:46:5c:80:ce:e3:85:29:96:1a:e8:bb:c8:aa:c3:1f:91:c2:
3f:f5:39:b4:57:f1:8d:2d:0c:49:c8:aa:55:b6:13:82:1d:6a:
04:c2:2e:6e:13:0e:56:98:83:15:79:76:27:f4:00:3a:9d:85:
17:e0:8b:7e:7f:01:81:f5:6b:7b:e3:54:ea:fb:48:8e:2e:40:
93:5a:07:d5:69:bd:25:a6:22:01:67:da:82:b2:9a:41:43:f0:
d0:69:0f:ca:fe:ce:f4:9e:f5:d9:a7:0b:8f:55:9c:81:c6:fa:
f3:f3:ce:69:a4:8f:5e:5a:7b:aa:00:40:c2:b2:13:b6:8c:9d:
a7:39:86:cf:b6:2c:34:5e:ad:08:70:c1:bb:74:85:71:d0:ff:
ec:4c:dd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:13 2026 by rpki-client