Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143924.roa
File: AS143924.roa (raw, json)
Hash identifier: RU6GHYDEslIifR95lnmw8rFVKZgUMFu928MjzhHYf4c=
Subject key identifier: 40:3A:2A:B2:EB:EB:22:EC:20:0E:FF:76:9B:34:76:F8:D1:EF:F0:92
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2DC68790F84EA09E4DE9FD60D717318765FEA9D9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143924.roa
Signing time: Fri 22 May 2026 07:32:07 +0000
ROA not before: Fri 22 May 2026 07:27:07 +0000
ROA not after: Fri 21 May 2027 07:32:07 +0000
asID: 143924
IP address blocks: 240a:a4fa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c6:87:90:f8:4e:a0:9e:4d:e9:fd:60:d7:17:31:87:65:fe:a9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:07 2026 GMT
Not After : May 21 07:32:07 2027 GMT
Subject: CN=403A2AB2EBEB22EC200EFF769B3476F8D1EFF092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:f9:c0:21:8d:0c:25:fa:30:ab:f1:e7:d2:
a5:70:dd:a9:f2:57:30:50:8b:fd:4f:c5:37:ca:21:
e8:c3:f7:f4:18:9e:40:9a:8b:fb:dd:02:6e:4d:7f:
08:48:d8:9f:5a:b5:23:49:cf:b7:26:9f:f3:b3:5f:
d9:a2:34:d6:d4:1c:c5:6d:5b:2e:3f:eb:d7:32:63:
1f:e9:60:d6:d2:99:7f:17:be:0d:d9:e1:27:3c:87:
a5:a9:18:d6:cb:45:66:4e:f2:ee:a0:7e:87:e5:a5:
83:6d:b4:be:b8:d9:0f:d1:95:ac:5b:45:85:54:a3:
e5:bf:a5:7d:a9:7d:18:6a:5c:ea:7e:da:97:0a:bf:
9d:3b:1e:38:87:e6:dd:be:aa:53:4a:12:67:84:18:
c6:04:db:a8:a0:a3:4f:8e:39:e2:a7:3d:78:f4:51:
f6:fb:6d:b7:c4:14:47:21:32:68:fd:74:ab:a3:c5:
13:a9:1c:0e:68:da:71:27:cd:5d:a6:ae:4e:b5:96:
f6:f1:d9:30:85:78:fb:c0:04:ac:e2:dd:f3:24:ec:
7a:e0:ba:8a:eb:19:51:cf:68:ee:53:cb:03:31:21:
3f:59:03:e2:4d:57:3b:c4:1b:5f:54:49:b0:cd:fe:
1e:c1:9c:fb:14:97:4f:ba:23:00:f6:71:3b:c5:31:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3A:2A:B2:EB:EB:22:EC:20:0E:FF:76:9B:34:76:F8:D1:EF:F0:92
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143924.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4fa::/32
Signature Algorithm: sha256WithRSAEncryption
0d:c2:6f:ba:2d:91:a6:94:60:19:6e:4b:15:0d:bd:ab:aa:ef:
d2:e4:f2:a2:5b:1d:f0:58:db:cc:8c:0e:ae:30:61:67:5f:3d:
9e:6f:2a:c0:bf:8f:37:95:35:f8:ff:10:f3:e4:3c:49:48:cb:
f4:42:95:b1:39:39:41:df:35:78:13:6b:32:ed:0d:89:9e:b6:
c2:14:a1:3a:cb:93:f7:22:78:73:f4:40:b4:be:86:a7:97:d6:
60:8e:2b:d3:e3:43:1b:6b:fc:fa:95:e2:b6:13:3d:d1:76:c2:
b1:75:cf:09:77:56:b8:d0:62:23:fa:14:0f:dd:28:12:67:87:
fc:0c:50:48:9e:6e:1d:ae:cc:0b:4b:c9:bd:5f:44:65:b4:67:
3d:41:cc:42:d0:39:4d:f5:10:7f:47:46:08:7b:c9:3c:43:8f:
9b:6d:07:92:8f:ed:a4:87:fb:41:66:03:e2:a8:73:da:6f:1f:
80:a8:fb:4f:93:79:af:13:62:aa:1c:ee:85:74:1a:69:87:86:
c5:30:62:b8:ae:5c:4c:64:5f:6b:1d:41:b4:c2:bd:43:ef:8c:
d2:09:b4:8b:17:ad:73:3b:79:4f:1f:f1:95:ae:2c:ca:c6:58:
6f:cf:a9:f5:2f:fb:3c:c7:fa:04:3a:7b:94:8b:43:c7:67:bc:
a6:38:10:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:12 2026 by rpki-client