Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143908.roa
File: AS143908.roa (raw, json)
Hash identifier: 5dv9J7FchJ8xFjwbCymNrtxhWvROiAn6BS/cQ9ETaKY=
Subject key identifier: 6B:37:68:EA:9B:7A:49:C7:8B:BA:C8:B8:AB:33:27:DA:71:32:68:B8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 629A9F31222E5A7EFE087A77EB54958257E27597
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143908.roa
Signing time: Tue 26 May 2026 03:16:59 +0000
ROA not before: Tue 26 May 2026 03:11:59 +0000
ROA not after: Tue 25 May 2027 03:16:59 +0000
asID: 143908
IP address blocks: 240a:a4ea::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:9a:9f:31:22:2e:5a:7e:fe:08:7a:77:eb:54:95:82:57:e2:75:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:59 2026 GMT
Not After : May 25 03:16:59 2027 GMT
Subject: CN=6B3768EA9B7A49C78BBAC8B8AB3327DA713268B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:a9:92:40:11:5c:02:7b:e9:78:b5:87:50:
ec:e2:cd:16:64:8c:45:80:bf:35:92:80:03:26:81:
d0:c2:48:10:79:f4:22:29:cf:26:98:f8:ff:95:a5:
f9:f0:2d:1f:c4:04:9f:e4:22:cf:69:14:f0:dd:e3:
7d:90:75:b9:ba:73:a4:13:ff:f8:82:f0:9a:24:1f:
96:0e:96:52:38:d0:e6:63:37:5f:f1:bc:d5:8d:37:
ed:0c:a3:58:30:62:11:c1:06:e0:7d:6f:5f:04:b4:
eb:6f:46:d4:cc:da:0f:fd:86:6e:5d:f4:cb:65:49:
e1:27:8a:1b:fa:0b:e9:fc:7f:16:e6:c9:82:f8:ae:
77:fd:85:6c:eb:89:5b:70:02:a5:da:5d:ab:19:d2:
2b:4c:23:31:c0:d0:73:35:9f:27:da:88:e2:cb:44:
99:cf:19:bf:08:de:3f:f4:a3:bc:7e:a4:29:b4:48:
a0:f3:71:f2:b6:4e:f8:18:e5:f1:f1:86:4f:6a:18:
db:55:f6:2b:be:9f:c9:5f:30:4b:9e:39:a8:8f:f2:
99:aa:2c:57:6a:09:95:6c:ff:d8:f4:42:36:28:37:
82:fb:4e:7a:0e:cf:a8:c5:8f:8d:74:91:67:9a:cd:
91:d0:57:0c:3f:01:24:39:b5:19:4d:93:7f:70:e1:
a7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:37:68:EA:9B:7A:49:C7:8B:BA:C8:B8:AB:33:27:DA:71:32:68:B8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143908.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4ea::/32
Signature Algorithm: sha256WithRSAEncryption
4f:51:aa:8c:e5:71:1a:c2:e9:99:c2:d6:c5:00:48:3a:64:bd:
8c:88:ec:e7:fe:bc:a3:ae:14:ab:10:82:7d:37:2d:22:5b:ed:
a8:5c:e1:c7:72:50:42:46:31:14:36:14:15:01:81:4c:c9:02:
5b:01:3a:bc:0e:ee:be:b5:9c:57:48:54:c8:7f:d9:d2:b9:33:
7b:5b:48:9f:11:d3:e4:12:ad:ab:4e:6b:d9:94:f4:6d:83:a1:
b6:c5:ac:b9:45:40:d6:72:88:9e:2c:07:bc:44:55:77:91:ff:
f8:7f:53:d4:3a:95:f6:0b:b8:c3:80:2d:6f:bf:1c:ad:e1:75:
97:48:30:62:1e:9a:de:6f:81:b8:05:4c:fa:0e:01:d6:05:0e:
98:86:a2:16:3d:a3:be:97:24:cd:ea:27:eb:69:c5:9c:dc:ef:
5d:53:04:74:51:0b:cc:06:e3:a0:58:3a:8d:9a:88:29:cf:03:
38:b1:90:46:e7:d0:38:3c:63:b7:2a:dc:17:c8:51:11:c9:70:
2f:19:c3:c6:d2:bd:d7:bf:8f:32:dd:5a:96:a1:86:83:59:42:
a7:6a:bf:fc:59:a7:1c:18:b9:64:4d:ed:76:8e:28:23:d6:5d:
6c:54:ce:3a:c5:30:a8:01:f1:fc:0b:a5:8a:6c:f9:6c:30:d6:
24:4b:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:27 2026 by rpki-client