Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143905.roa
File: AS143905.roa (raw, json)
Hash identifier: DwoQnINPHZDH5A8zOXsHjDvmwqytg518fajnOmwded4=
Subject key identifier: 1D:27:D5:40:A7:3A:A0:8E:CC:8D:00:EE:10:72:7D:4B:ED:8B:1F:7C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 473AF50D7376EACA5253E31E9EE11A7089905E8A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143905.roa
Signing time: Fri 22 May 2026 07:08:45 +0000
ROA not before: Fri 22 May 2026 07:03:45 +0000
ROA not after: Fri 21 May 2027 07:08:45 +0000
asID: 143905
IP address blocks: 240a:a4e7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:3a:f5:0d:73:76:ea:ca:52:53:e3:1e:9e:e1:1a:70:89:90:5e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:45 2026 GMT
Not After : May 21 07:08:45 2027 GMT
Subject: CN=1D27D540A73AA08ECC8D00EE10727D4BED8B1F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:03:ad:73:73:c1:f2:8e:c6:b0:1d:52:73:fc:
ae:f2:4f:b9:ea:25:23:6b:ee:e2:3e:07:bb:73:e0:
86:b6:3c:48:4b:d7:22:f4:82:ac:d3:6a:d6:ad:41:
9e:05:2e:ed:9e:81:3d:60:b9:73:6d:be:92:02:18:
7c:7a:9f:37:a1:11:ce:91:c6:80:1f:30:72:da:5b:
ec:f9:8b:89:59:aa:54:20:66:59:1f:1e:9b:1b:da:
ab:a5:28:7b:7f:f6:c4:87:f1:02:c5:14:da:be:9f:
5c:44:36:6d:19:42:66:9e:c0:c3:01:3f:a6:30:2d:
e6:3f:ab:45:9e:42:72:b1:09:0e:61:36:02:94:0c:
20:47:26:7d:a1:94:88:80:01:63:4e:7d:b4:f5:a6:
2f:e2:1c:d0:d0:cd:57:b4:19:28:f3:32:20:31:99:
ba:d7:5d:0b:64:77:e1:05:36:5a:af:ba:74:e2:75:
45:37:db:2a:41:25:4a:31:fe:f8:34:ae:53:02:b1:
37:db:14:37:f6:7b:06:d7:16:5c:a0:38:3e:1b:fd:
8b:cb:f3:b9:07:ac:0e:a5:d5:e6:dc:0c:c0:ff:ed:
8a:12:fb:16:26:2d:9a:c9:f3:d1:09:98:0b:80:c1:
fe:13:38:22:07:74:5b:e6:42:21:2b:50:bc:ce:af:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:27:D5:40:A7:3A:A0:8E:CC:8D:00:EE:10:72:7D:4B:ED:8B:1F:7C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143905.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4e7::/32
Signature Algorithm: sha256WithRSAEncryption
80:9c:81:ef:93:6a:d5:d4:d6:38:ca:65:b4:69:45:ba:34:f7:
fa:5c:78:0f:4d:dd:91:37:2a:f6:f9:8a:9d:0a:a2:76:06:54:
74:f1:a7:2b:16:4f:67:ed:b0:37:b8:72:44:2b:bc:0a:d9:c2:
40:f2:1a:d1:dc:69:6b:4d:b3:76:24:c2:5b:4b:19:a5:35:48:
89:43:9b:d4:09:10:1e:77:eb:70:4a:7d:09:c8:4c:3d:bb:71:
9a:b9:22:d0:3f:85:87:fb:c7:6d:4f:f7:43:b7:67:7e:de:fb:
d3:9e:d2:9d:2c:e8:09:3e:59:0f:a8:73:bc:1a:ed:1e:f5:52:
88:a1:f3:67:a6:48:86:17:0e:5e:07:38:1e:5d:f8:63:8e:5d:
70:9f:af:c3:30:78:e4:00:52:74:fd:19:c1:70:da:ad:58:b0:
db:93:1b:d2:d7:64:5c:2f:7e:83:18:35:db:61:b7:f4:91:21:
2c:60:8f:23:07:09:07:bc:0c:cc:8c:4f:20:ec:c6:a0:bd:4d:
3c:21:d0:8a:f9:57:a5:8c:55:09:11:03:bb:8d:37:23:e6:76:
94:c8:66:90:be:05:a7:83:dd:fb:d3:83:39:89:49:df:10:ee:
dd:86:b6:40:9a:3b:b2:83:8a:00:9a:f1:09:6b:42:f3:cb:f1:
ff:79:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:49 2026 by rpki-client