Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143913.roa
File: AS143913.roa (raw, json)
Hash identifier: jzi78FJgfdva3LD+lKPeKlBtnhSfzMTF5WmUt9tvs94=
Subject key identifier: CA:DB:CB:7D:A1:21:1C:80:8F:D5:4E:F3:12:42:85:83:B9:9C:C5:11
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 04CEF4332F09737B23962F1D6E764F4598E527AE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143913.roa
Signing time: Tue 26 May 2026 02:35:02 +0000
ROA not before: Tue 26 May 2026 02:30:02 +0000
ROA not after: Tue 25 May 2027 02:35:02 +0000
asID: 143913
IP address blocks: 240a:a4ef::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ce:f4:33:2f:09:73:7b:23:96:2f:1d:6e:76:4f:45:98:e5:27:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:02 2026 GMT
Not After : May 25 02:35:02 2027 GMT
Subject: CN=CADBCB7DA1211C808FD54EF312428583B99CC511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:1f:98:41:f7:72:8b:90:36:66:5f:7e:d1:
a2:7e:aa:8b:14:cc:94:f4:f1:16:49:32:93:69:7c:
d2:79:2e:f9:59:0c:43:be:a3:36:63:6a:4c:25:7d:
18:e8:2b:13:83:85:61:74:f9:51:85:f1:db:1f:38:
83:e7:a1:8b:c2:bd:ce:4d:16:62:99:9f:63:4a:1d:
41:34:0b:e0:34:96:9e:6c:d6:79:2c:10:6f:ce:a7:
54:0f:f1:40:af:fb:28:71:a7:ab:e5:1f:b5:af:1c:
3d:2b:58:19:97:a6:1b:b9:5c:43:54:0c:2b:a8:93:
c2:8e:43:b5:70:b8:49:66:9b:4b:8f:08:87:6b:81:
0c:1c:df:e4:6d:f6:63:94:b0:b6:4f:c5:5a:30:a8:
64:c4:a6:ac:4b:70:dd:77:f0:dc:38:a4:f2:29:64:
31:28:59:f1:ba:f3:92:46:c0:fa:34:fa:bb:58:08:
a3:07:b2:1d:c1:2e:71:c7:f8:ab:87:84:c6:84:8d:
eb:b8:09:cf:2e:bf:f2:31:83:61:d0:0a:b0:3f:3e:
f5:b3:c1:06:05:00:3b:24:9b:97:93:e2:12:2d:37:
d0:2a:99:6a:0a:b8:77:a0:2f:2e:38:f3:5d:5d:5e:
a4:8b:75:c4:74:03:5e:25:06:a1:06:df:23:d8:85:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DB:CB:7D:A1:21:1C:80:8F:D5:4E:F3:12:42:85:83:B9:9C:C5:11
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4ef::/32
Signature Algorithm: sha256WithRSAEncryption
b7:bc:d0:19:05:46:ee:e3:e8:9b:c3:24:a7:c0:37:e8:8f:10:
ff:da:40:19:20:36:89:58:e4:01:ca:76:f9:c0:1e:03:19:c3:
f5:05:7b:b6:79:0a:b2:6e:48:ee:b6:b0:f1:fc:60:b8:2e:bd:
d2:97:a2:11:25:f7:47:97:5c:5b:b4:6f:08:fd:45:d4:eb:9a:
de:5f:f9:e6:b5:ce:44:1e:4c:ba:38:4e:4f:de:72:d7:1f:b9:
83:57:b0:a1:1e:ae:47:4e:07:18:e3:ab:f2:08:80:f2:c5:ad:
0b:6f:c0:64:40:0d:39:e2:e0:5b:f2:f5:56:b7:2f:d9:d7:a7:
a2:56:a9:e7:85:b1:57:86:3c:ed:05:4e:81:c2:87:37:bc:5f:
68:c6:fc:ca:8f:6e:ae:f2:07:f6:58:42:a5:28:bd:ee:19:45:
e1:bc:8d:73:c7:f7:20:7d:f6:42:03:08:c3:c2:d7:d7:7b:e3:
04:67:e2:3e:48:e5:65:37:a8:4a:a5:f0:8d:3c:b1:4d:ad:5b:
b0:7a:fa:0c:50:73:5b:c2:40:c9:d0:d4:cb:8a:eb:44:ab:58:
23:cb:98:16:07:55:af:c5:ce:08:53:ba:bf:47:fc:a4:18:62:
04:24:69:55:c0:03:3c:23:82:39:dd:f4:18:39:ce:24:73:d7:
cb:00:03:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:20 2026 by rpki-client