Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143925.roa
File: AS143925.roa (raw, json)
Hash identifier: Iltql+Abx8hwdiqzmsyUmuvguZ9Gmb/awVcg5qxPzo0=
Subject key identifier: 35:CE:A8:90:48:AB:96:32:86:64:59:81:C5:BF:0B:E5:2D:F6:92:0F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0DB682B6CC7A31D63C8739701790527268128278
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143925.roa
Signing time: Fri 22 May 2026 06:46:05 +0000
ROA not before: Fri 22 May 2026 06:41:05 +0000
ROA not after: Fri 21 May 2027 06:46:05 +0000
asID: 143925
IP address blocks: 240a:a4fb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b6:82:b6:cc:7a:31:d6:3c:87:39:70:17:90:52:72:68:12:82:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:05 2026 GMT
Not After : May 21 06:46:05 2027 GMT
Subject: CN=35CEA89048AB963286645981C5BF0BE52DF6920F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0d:4e:eb:49:5f:46:24:f5:15:7e:60:7f:19:
35:2a:83:23:1d:cc:97:ae:60:2c:f8:d4:1b:12:63:
d1:05:82:8a:20:c2:71:4c:60:81:7c:75:b6:37:ec:
be:05:e5:59:4b:7f:e2:91:89:a3:4b:12:84:66:b0:
03:a9:55:67:43:6b:3e:bc:f9:b3:84:83:72:83:26:
96:0d:35:4b:b9:da:10:fa:50:0e:44:86:3e:d2:c7:
80:a0:f0:96:40:a1:d5:ef:ef:ac:e8:d5:e4:ae:de:
36:a0:13:e7:5f:6e:67:45:5b:e2:40:6e:96:44:ec:
1c:ad:0b:82:45:ac:1b:9c:70:9a:e8:db:8d:28:d5:
1a:58:7b:2b:dc:2b:31:24:9a:20:72:c5:a0:ca:60:
01:07:7c:27:56:b1:23:21:b4:82:3a:05:d4:48:12:
a6:83:05:3b:9f:e1:62:7f:91:4d:f2:11:e1:22:40:
67:76:70:4a:c3:90:ae:a5:e8:94:ea:e7:bf:e8:6b:
37:b8:03:46:ea:92:c5:39:88:07:c1:3c:ec:80:75:
1a:c2:c9:19:0f:6d:42:aa:39:81:8f:8f:38:51:ce:
0b:c2:84:a0:6c:15:79:0e:94:e5:f5:18:2b:55:bc:
8b:27:b9:d9:62:da:9e:c2:73:a1:ce:9b:db:41:33:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CE:A8:90:48:AB:96:32:86:64:59:81:C5:BF:0B:E5:2D:F6:92:0F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143925.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4fb::/32
Signature Algorithm: sha256WithRSAEncryption
74:e6:7f:e1:6b:dc:c2:3b:98:a8:8a:2b:cc:e2:6e:4f:cc:eb:
b4:85:7a:55:25:de:6d:d9:54:e5:41:bd:d7:2a:3b:57:1e:e6:
8c:23:9b:07:ec:a5:ff:fc:e0:23:7d:cd:1b:3f:4b:d8:4e:a9:
6c:66:af:6e:85:43:aa:1d:f4:d1:1b:7e:9c:8f:a2:ce:3c:16:
1c:b8:3f:5e:0c:6b:86:8e:b2:a8:53:71:f8:b0:8a:31:64:25:
92:88:ad:33:b4:72:79:16:f6:e7:eb:af:ac:b2:18:4f:88:e1:
70:b2:aa:cd:db:31:f2:ea:ea:30:fe:50:c8:8a:fc:b3:54:52:
96:9a:6b:04:fb:56:38:7f:5d:c1:97:d7:62:b6:76:09:17:cb:
df:00:7a:e2:20:df:c0:c4:c4:ff:e8:53:89:66:e2:5a:50:43:
d3:b0:84:62:ed:b7:51:20:b2:70:54:b3:67:d0:e5:d1:89:e6:
31:17:f1:3b:12:0e:1e:66:5e:6c:d1:68:c7:9c:af:3c:d6:5f:
fb:8e:65:b2:b4:dd:05:b8:d4:f8:2c:cb:78:e0:56:45:6b:38:
0d:09:7e:68:bc:d0:0a:0c:3c:26:97:52:17:24:f8:c4:c1:d3:
49:9c:5a:4a:ea:6f:fc:a9:53:ad:a9:da:5b:6d:34:29:1d:a7:
bd:f1:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:54 2026 by rpki-client