Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143932.roa
File: AS143932.roa (raw, json)
Hash identifier: riKnIx67LDOW38eFO9TqvkXxyhQZ/NPk1/yvqCs33YY=
Subject key identifier: DA:D6:80:7E:9D:FD:31:43:3D:70:7A:80:21:AF:45:76:FA:25:3F:28
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5DAB112952D0561E6EBD6724438428CBEBD2C6F8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143932.roa
Signing time: Mon 25 May 2026 01:38:31 +0000
ROA not before: Mon 25 May 2026 01:33:31 +0000
ROA not after: Mon 24 May 2027 01:38:31 +0000
asID: 143932
IP address blocks: 240a:a502::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ab:11:29:52:d0:56:1e:6e:bd:67:24:43:84:28:cb:eb:d2:c6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:31 2026 GMT
Not After : May 24 01:38:31 2027 GMT
Subject: CN=DAD6807E9DFD31433D707A8021AF4576FA253F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:46:d4:97:1f:1a:3a:e6:9c:3c:4c:ec:ee:29:
b6:58:63:ad:27:b3:06:72:90:4e:84:ec:62:64:8b:
7e:96:ed:07:90:76:27:c1:a5:93:e0:ee:92:c3:24:
e3:1a:24:2b:3a:10:0e:08:c7:11:19:e2:c3:ce:eb:
8f:19:50:3a:7c:51:86:01:15:20:a1:f3:d9:52:1d:
e7:23:a5:62:67:4d:6b:fd:4d:15:8b:9a:76:ea:3c:
82:11:9c:49:53:00:30:cb:ac:e8:f4:16:fc:55:a0:
62:bf:98:d8:86:67:f7:da:9d:45:f8:b9:a9:d5:a3:
a8:bf:db:96:fc:25:71:2d:26:84:4e:62:71:4b:72:
91:84:ad:0d:bb:f2:33:fb:b0:12:fc:f9:98:dd:a3:
b4:39:88:9d:76:38:ea:4c:b2:eb:61:f7:93:d9:df:
7f:f6:4c:5c:2e:1f:cf:08:f2:6f:c9:1b:ac:b0:ef:
48:eb:46:74:cc:47:3b:56:1e:59:bc:52:dd:32:5d:
87:0b:16:ca:9d:c5:a8:de:4c:78:d4:fa:45:74:cc:
8c:1b:25:11:89:c4:47:e0:36:6a:46:97:79:b5:e1:
78:50:03:b8:32:18:f1:f9:1e:b6:33:80:a5:dd:a7:
9c:04:7d:c9:39:22:57:0d:6a:b1:58:53:e0:e9:2a:
e7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D6:80:7E:9D:FD:31:43:3D:70:7A:80:21:AF:45:76:FA:25:3F:28
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a502::/32
Signature Algorithm: sha256WithRSAEncryption
aa:73:38:47:85:79:d8:72:35:4b:af:05:e2:f0:e6:e6:b1:d7:
c1:d7:15:43:3e:b7:86:e5:9a:67:73:08:c6:fe:48:29:14:83:
70:ee:73:84:2c:e9:8b:b5:2f:4a:68:3b:fd:c7:67:2d:de:05:
0e:28:73:0d:36:58:04:07:55:9d:cf:40:6f:67:dc:48:68:4a:
30:6f:fa:e7:22:07:2f:d9:92:05:e9:bf:fa:93:39:fa:9d:6b:
0f:68:36:66:f9:6a:34:6c:c3:d4:8e:f4:0b:4c:c1:59:17:53:
a5:e1:5c:6f:f2:18:ef:5a:5c:95:7b:84:7e:c5:3f:e2:73:ca:
59:c2:a9:7d:3b:70:19:e1:fc:12:bb:28:ea:e9:46:fa:f8:42:
d1:5f:c1:a4:a0:92:d2:4a:13:26:7e:35:5c:b2:69:ce:5b:5a:
b5:c4:99:73:88:f5:04:6b:da:42:16:7b:e0:78:a4:d8:ea:9d:
58:b3:e9:f8:bf:d8:c4:ef:3d:e0:6a:d8:68:25:c6:d9:5f:cf:
59:64:48:8d:03:6a:c7:d5:28:49:6c:8a:e4:a8:f8:a8:9f:80:
6d:c0:d8:aa:e8:53:6c:04:c9:ab:74:91:14:37:24:c8:fe:9b:
0a:bd:e6:4f:1a:1b:77:d8:6c:04:bc:8f:f1:ee:bc:2b:86:35:
be:08:78:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:49 2026 by rpki-client