Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143904.roa
File: AS143904.roa (raw, json)
Hash identifier: MtbyKwxeCGZqwZqxAOQ+jcmcgmmtoEcgliDqGAC8Rp4=
Subject key identifier: 61:B0:E7:B6:64:8E:8B:31:95:8F:43:E3:D4:2E:01:78:1D:1D:A8:B9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5688047F4FA3A14D70632EA15D93CCC3CE6E2059
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143904.roa
Signing time: Fri 22 May 2026 07:25:04 +0000
ROA not before: Fri 22 May 2026 07:20:04 +0000
ROA not after: Fri 21 May 2027 07:25:04 +0000
asID: 143904
IP address blocks: 240a:a4e6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:88:04:7f:4f:a3:a1:4d:70:63:2e:a1:5d:93:cc:c3:ce:6e:20:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:04 2026 GMT
Not After : May 21 07:25:04 2027 GMT
Subject: CN=61B0E7B6648E8B31958F43E3D42E01781D1DA8B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:30:d6:b8:16:8f:92:94:0a:df:4c:fd:76:
6f:67:19:ca:04:9f:7a:58:a9:2e:1c:a4:f4:c6:78:
6d:57:c5:50:ef:a2:72:2b:17:c3:49:95:5b:8e:9c:
49:de:03:d8:56:34:fd:41:ae:3c:7e:bb:24:ff:91:
82:04:de:1b:6b:f4:c6:84:1f:1e:15:0e:12:31:cb:
b7:fb:9d:fb:c6:40:b2:08:63:0f:a6:f6:42:26:55:
62:46:ac:35:ff:60:19:7c:17:65:61:b2:6b:05:64:
30:e9:49:08:1c:f1:3a:1e:8b:79:8f:12:3c:3d:0d:
60:f0:5f:72:68:ec:fe:62:f3:9a:02:ba:e4:bf:b5:
b2:12:09:eb:06:b7:63:d7:eb:4a:7b:8f:7f:9a:54:
60:8d:6a:26:d3:e8:80:52:19:06:a4:01:7a:80:97:
78:33:51:9a:e5:f9:aa:de:6d:8f:14:48:f9:8d:99:
13:6e:aa:90:a3:10:64:df:cc:94:0c:f7:71:72:ac:
01:86:bd:d9:bb:cf:4f:37:41:81:10:d0:ac:9c:e5:
72:c0:b4:64:39:8d:d5:a7:c2:de:52:3b:c9:13:9a:
28:d4:dd:2d:0c:c4:9b:eb:7d:a6:ed:aa:d4:a6:43:
97:a7:9f:d3:6d:e8:dc:ea:a6:d6:c0:ce:9b:aa:ef:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B0:E7:B6:64:8E:8B:31:95:8F:43:E3:D4:2E:01:78:1D:1D:A8:B9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143904.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4e6::/32
Signature Algorithm: sha256WithRSAEncryption
45:9f:77:cd:9e:45:f0:87:4b:33:f9:79:34:91:74:0a:b3:aa:
ed:25:54:20:e0:e8:b4:83:7b:6c:73:e2:a8:49:b3:fa:49:33:
48:06:ad:2c:47:a8:20:ef:94:37:a6:6f:ad:d6:cf:e1:89:47:
7b:c9:5b:78:bc:6e:9a:87:0c:58:44:d4:0e:49:5a:c2:08:b4:
81:fb:53:6b:a5:e7:6f:8b:97:05:ed:57:f4:e2:2a:4d:eb:c7:
57:a9:94:66:dc:d6:68:94:78:db:ca:eb:14:ca:45:da:66:7d:
6e:b4:70:a3:cc:00:65:3f:73:2e:77:92:ed:00:67:fb:22:08:
bb:f1:1d:02:4f:3b:c7:94:80:6f:fc:20:e6:86:f1:37:83:2b:
e7:87:6d:fd:27:c2:b8:cd:0a:5a:c4:ad:11:cf:ea:d2:e0:2b:
4e:9e:f2:a8:c2:97:39:c6:ee:1b:97:cf:bc:e5:ad:d1:59:96:
e3:d9:3c:8b:74:62:43:ed:cd:00:37:07:6b:e9:69:1d:f3:4d:
6e:7f:80:b6:7d:1f:f0:13:90:6e:78:1b:c6:8e:7e:29:0c:f8:
b8:ab:78:3c:0a:9a:fb:ce:b4:ab:24:93:99:4d:7a:3d:e8:a0:
15:cb:4a:b4:28:8b:07:52:35:3f:ce:ce:5d:df:02:d4:95:e9:
23:5b:40:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:36 2026 by rpki-client