Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143929.roa
File: AS143929.roa (raw, json)
Hash identifier: V9DIUgECIpyLo6LBrE+Uu0E5Nj7PyqZz5Adf19OOh0M=
Subject key identifier: 85:84:74:27:C3:75:74:5C:77:30:69:41:6A:C8:26:B2:63:D5:2A:0A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 112BD1196E3D7CCA8734E1ECB1ADC76DD1BC2119
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143929.roa
Signing time: Mon 25 May 2026 01:38:22 +0000
ROA not before: Mon 25 May 2026 01:33:22 +0000
ROA not after: Mon 24 May 2027 01:38:22 +0000
asID: 143929
IP address blocks: 240a:a4ff::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:2b:d1:19:6e:3d:7c:ca:87:34:e1:ec:b1:ad:c7:6d:d1:bc:21:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:22 2026 GMT
Not After : May 24 01:38:22 2027 GMT
Subject: CN=85847427C375745C773069416AC826B263D52A0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:a7:9e:5f:7e:c0:b2:09:68:a1:b4:af:4d:
73:54:20:d6:8d:8c:f4:52:c7:9d:66:68:da:0f:02:
e7:74:d1:6f:96:79:2f:d1:5b:d3:59:b1:76:32:12:
0f:23:52:ab:35:3a:8b:39:5b:de:f4:2b:5c:93:34:
a9:ff:30:6e:ea:e9:21:94:23:a0:40:39:52:e1:98:
49:da:56:69:7a:b4:83:9f:95:78:82:9b:f4:02:a4:
49:e0:00:43:90:5a:1d:b2:e0:03:8f:18:d1:16:ed:
b2:bc:9c:ba:26:9a:b8:61:af:69:3e:b0:5a:24:44:
eb:94:2b:64:b4:4a:bd:f5:8e:14:13:5e:09:83:2b:
7f:f1:57:11:23:74:03:e1:c1:7b:fb:e4:7e:7d:07:
a8:ac:68:a6:c1:5e:c0:54:5e:f4:e5:2a:97:b7:72:
bc:59:d9:29:eb:76:99:b7:c2:9e:7b:f3:0c:d8:b5:
20:8b:51:a6:e1:ca:c1:ed:02:53:70:60:bd:85:6d:
68:6d:ba:d9:4c:55:e6:57:fe:ba:44:6e:3a:aa:3f:
71:1b:7a:7a:3f:1c:c7:96:13:d7:ff:2f:b5:7c:ef:
01:c8:99:04:91:18:0f:42:ee:a1:2e:27:48:40:25:
40:c6:b9:1c:85:88:82:f8:a8:bd:db:7c:bd:45:56:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:84:74:27:C3:75:74:5C:77:30:69:41:6A:C8:26:B2:63:D5:2A:0A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143929.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a4ff::/32
Signature Algorithm: sha256WithRSAEncryption
1d:8f:87:65:ae:64:1a:5e:b9:e5:62:1f:4f:23:cb:7f:82:55:
b2:fd:9c:86:f7:74:ef:c6:10:c4:3c:7c:b6:14:25:70:b6:05:
03:47:b8:49:82:ef:43:70:b6:19:70:7a:db:48:9e:3c:2f:5e:
08:1f:08:ee:53:69:b5:48:6e:c9:85:87:d0:70:f7:64:1e:45:
f2:06:95:33:63:cb:a7:4b:18:53:00:7b:10:74:0d:f7:4a:d9:
0e:27:e5:0e:fc:ad:b1:ee:ef:09:b6:4c:8f:65:33:d7:ec:42:
56:e7:18:85:ae:1a:23:9f:20:0a:da:27:88:97:ed:e0:d8:f7:
e3:a9:6a:72:02:6c:40:e1:89:f1:42:b7:48:54:dd:0d:6d:2f:
83:27:71:b6:37:c1:35:52:82:de:76:02:48:47:94:30:71:bc:
70:3b:b9:7f:73:f8:10:6e:e3:c5:1f:1e:fe:0a:3a:20:79:ca:
84:82:25:2c:7d:9c:18:58:6e:c1:c8:4f:ed:d0:2b:8f:4e:f0:
75:9c:8d:ef:cc:8e:2d:e6:dc:ff:70:4a:66:81:09:cd:92:90:
6d:44:20:6b:5f:89:ba:40:8c:a0:43:05:39:03:63:f6:d1:60:
90:23:96:a1:24:c3:20:ff:74:26:4e:24:16:a1:3c:97:4a:51:
f5:3d:41:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:48 2026 by rpki-client