Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143931.roa
File: AS143931.roa (raw, json)
Hash identifier: ZyUDQVMiZRO9PLBYJoW1Fv9rjB6HQjY9H7Qe0V2xHAw=
Subject key identifier: 22:3E:2B:85:37:BA:DD:2B:A5:CE:DF:6C:C7:35:E2:E8:21:D5:8D:E9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 198F03E66C5E982E70318A23FBA6411869012C12
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143931.roa
Signing time: Fri 22 May 2026 04:08:32 +0000
ROA not before: Fri 22 May 2026 04:03:32 +0000
ROA not after: Fri 21 May 2027 04:08:32 +0000
asID: 143931
IP address blocks: 240a:a501::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:8f:03:e6:6c:5e:98:2e:70:31:8a:23:fb:a6:41:18:69:01:2c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:32 2026 GMT
Not After : May 21 04:08:32 2027 GMT
Subject: CN=223E2B8537BADD2BA5CEDF6CC735E2E821D58DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3e:e7:f7:2d:ab:4c:84:eb:0c:46:ee:19:8f:
92:5c:af:be:84:25:c8:68:b3:79:60:bc:bd:31:e3:
f1:78:90:e0:0b:a9:11:fe:86:61:29:8b:29:3d:59:
f4:7f:c8:30:5e:64:22:f3:bc:03:0d:62:c3:19:b5:
98:ca:bd:5b:f8:9b:09:04:fc:46:14:73:7d:fc:b1:
8c:c1:96:dd:c6:28:eb:af:0e:9f:53:cb:e8:ca:9f:
8b:25:26:a4:b8:fe:5d:4a:a0:c5:d0:96:dd:29:50:
21:55:c1:2d:cb:c3:28:d5:2b:c0:b9:95:23:f5:28:
3a:f1:45:7a:14:da:ed:75:40:1a:5e:f2:ce:3e:73:
2d:d3:12:ad:68:cf:2b:29:b8:38:24:3c:76:59:06:
57:91:14:73:46:ca:0f:6c:ba:c8:7a:7e:44:59:ff:
9b:ea:99:91:98:74:77:0f:f8:3e:f2:bb:bc:f3:0b:
c9:a3:50:ce:1b:2c:c4:b3:a5:a6:2e:7a:fb:a9:5c:
ae:7e:fb:f2:95:c6:50:6c:d9:9e:03:f1:1c:61:25:
a1:cc:22:f4:5e:59:c3:b2:ad:ec:83:6c:52:59:e8:
4e:80:9a:16:21:46:9e:de:b5:ef:fd:5f:7b:34:1d:
54:cb:f7:75:6e:49:17:05:a5:bc:0b:8e:1b:20:40:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3E:2B:85:37:BA:DD:2B:A5:CE:DF:6C:C7:35:E2:E8:21:D5:8D:E9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a501::/32
Signature Algorithm: sha256WithRSAEncryption
ae:ad:92:7f:63:2a:29:a0:03:d6:ef:53:9a:c1:d8:9f:7a:74:
52:65:b0:0c:1f:4d:7e:ff:c6:6c:d7:9b:f0:e2:50:c5:32:af:
c0:9d:25:cb:33:07:44:74:e4:45:10:32:62:45:98:10:b7:2b:
5d:87:5f:fe:bc:3a:6f:fd:50:2b:db:be:09:f3:0c:7a:17:88:
dc:55:b1:bd:47:3f:17:c6:df:04:0f:e8:33:b2:08:1c:a1:54:
19:ad:5f:d6:f3:93:ad:9e:d1:96:02:f5:47:4b:29:ec:c7:d9:
44:31:54:bd:0f:c5:f0:f9:4e:27:93:20:f2:1b:9c:ab:2f:a2:
eb:e1:23:47:c9:69:62:e8:a8:9a:ac:e8:c4:84:25:94:06:51:
52:3d:1f:87:86:6e:24:c4:d5:6b:5e:f4:0c:08:88:ab:70:e5:
a0:21:99:cd:0f:e1:78:54:4f:0b:aa:f5:05:a7:05:5f:95:54:
a0:79:c9:df:88:fa:f5:71:8f:66:0b:81:59:2e:5b:47:27:13:
e0:3b:da:5d:24:03:27:b9:d5:69:fe:e3:a0:5b:f4:08:c0:d7:
90:0b:4f:9d:f3:a7:a3:53:36:21:0e:34:2b:0d:0c:34:3a:c9:
22:44:9f:70:04:26:f4:54:fd:f6:e9:db:92:e4:07:3e:fb:6a:
b0:8d:6d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:46 2026 by rpki-client