Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143927.roa
File: AS143927.roa (raw, json)
Hash identifier: I2UafD/38L0pDHdAs0SIuF+KIBDMbRmR3hqU7bUo1cA=
Subject key identifier: E3:2A:E6:BE:91:54:DD:2E:97:F1:FF:97:A6:AF:65:56:00:AB:7C:FF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 18174B63BD5C59F2A8B905CE37C5871F78A7B180
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143927.roa
Signing time: Mon 25 May 2026 06:28:35 +0000
ROA not before: Mon 25 May 2026 06:23:35 +0000
ROA not after: Mon 24 May 2027 06:28:35 +0000
asID: 143927
IP address blocks: 240a:a4fd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:17:4b:63:bd:5c:59:f2:a8:b9:05:ce:37:c5:87:1f:78:a7:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:35 2026 GMT
Not After : May 24 06:28:35 2027 GMT
Subject: CN=E32AE6BE9154DD2E97F1FF97A6AF655600AB7CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ad:45:ba:f0:3c:eb:ac:f8:5e:96:43:44:ff:
42:fd:15:2a:07:87:b2:e0:96:b1:9a:f9:62:91:20:
cf:39:11:9d:c5:9b:f1:74:6f:96:1f:72:b5:40:36:
80:f6:45:11:f0:a7:f3:d4:26:7d:a7:81:4d:57:1c:
11:a5:dd:db:92:11:36:f9:db:b4:43:93:bf:ab:22:
44:bd:cd:a4:46:b5:85:85:71:89:7d:97:90:ca:e7:
df:49:64:1f:fa:52:20:12:79:7c:89:66:79:47:eb:
3e:c4:0a:77:64:8b:bb:25:6f:b4:d5:89:d7:24:e0:
ed:13:7a:90:00:ce:f6:e5:b6:c1:68:8a:ba:e3:02:
56:d4:7f:ae:7f:24:9f:7c:27:03:47:49:aa:92:58:
fc:03:8a:08:26:71:63:6c:59:95:b9:c0:47:53:9b:
77:2d:55:f5:ce:2b:37:51:74:95:ac:58:5a:f0:cc:
a9:e7:45:a2:61:b4:06:fe:cc:48:97:1b:95:08:83:
81:e9:9b:9f:05:d3:2f:ae:f5:1f:42:ef:ce:b7:cc:
1e:0f:45:a4:04:a3:2e:7c:e8:f9:f1:8f:a8:3d:b9:
58:66:9c:ff:cd:8b:3c:39:40:e6:6b:e8:78:6a:77:
ab:35:e4:47:c5:86:b7:04:51:9c:29:ba:1e:16:fc:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2A:E6:BE:91:54:DD:2E:97:F1:FF:97:A6:AF:65:56:00:AB:7C:FF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143927.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4fd::/32
Signature Algorithm: sha256WithRSAEncryption
2f:6e:d7:35:d4:6d:28:3b:dc:cc:ae:64:df:6f:66:40:b1:48:
87:e6:f7:a7:b5:d3:9e:d5:25:67:71:77:b8:99:20:4f:df:a9:
5b:06:28:6f:16:ef:5a:49:99:6d:03:dc:f9:f3:5f:95:0b:e5:
b2:25:e7:d9:d7:61:db:a8:18:83:7e:9b:26:2e:c0:2e:d4:e4:
6b:84:74:05:02:6c:01:a7:e2:6a:ea:eb:4f:4e:a3:9d:52:ba:
e5:a0:05:03:2f:2b:a2:45:ee:54:81:03:78:2b:d7:70:a0:20:
87:07:0a:c4:13:88:63:30:b4:4b:05:e8:45:8e:3c:1c:7e:27:
ff:ff:0d:84:e2:55:e1:bc:d7:36:a4:d5:91:c2:df:2e:98:a5:
4a:df:c6:b3:70:8e:fd:ca:bc:c6:7b:11:84:16:11:e0:71:bb:
7f:8d:16:8f:40:ef:4f:8d:59:a4:0e:41:fa:33:19:9f:7c:d2:
2a:9b:86:a8:84:1e:cb:67:79:23:11:57:cc:19:7a:67:7b:0f:
ee:b9:78:a5:a3:e1:be:3c:d6:91:08:30:8b:82:fa:9c:9a:bb:
5e:2e:a7:16:cd:59:77:e6:18:f5:4c:20:b6:89:2b:5b:10:ed:
c7:b7:ec:23:de:d2:7c:39:86:87:33:70:89:63:45:aa:b7:f7:
9b:70:5e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:31 2026 by rpki-client