Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143933.roa
File: AS143933.roa (raw, json)
Hash identifier: XN7khAzowEiObhkZB81CtJ7ky5Yj2SjVu9NUhHR/m/4=
Subject key identifier: 90:58:EC:72:6F:7D:33:0F:C8:15:0F:83:D4:DD:56:06:3D:E5:D5:2F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5B4575E0A05BAEC587B93C5AAAAE5EBE40D281CF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143933.roa
Signing time: Fri 22 May 2026 02:47:56 +0000
ROA not before: Fri 22 May 2026 02:42:56 +0000
ROA not after: Fri 21 May 2027 02:47:56 +0000
asID: 143933
IP address blocks: 240a:a503::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:45:75:e0:a0:5b:ae:c5:87:b9:3c:5a:aa:ae:5e:be:40:d2:81:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:56 2026 GMT
Not After : May 21 02:47:56 2027 GMT
Subject: CN=9058EC726F7D330FC8150F83D4DD56063DE5D52F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:68:eb:8e:53:63:1e:89:b8:71:cb:f4:83:
e1:35:7e:ef:f9:85:45:02:4e:e8:d0:af:8f:9d:f9:
b2:5c:32:3c:cd:db:02:87:fc:42:0e:fc:f3:b4:ef:
fe:ba:4a:b7:97:81:8b:16:f1:c2:93:b3:76:bf:8d:
55:23:7d:2c:3d:fa:d2:0b:f9:01:b2:bd:5b:83:f3:
28:14:38:14:e4:e8:47:f7:9c:b7:33:62:b8:fd:da:
7f:03:8d:04:cc:b3:5f:7d:40:97:ce:7f:3c:34:88:
c8:69:ab:e7:83:33:26:89:fc:d9:c4:7c:e7:a0:cb:
2f:31:55:d9:d8:25:ea:03:0b:96:14:df:57:c9:7c:
39:63:a0:b4:88:bb:85:b8:70:c7:db:1a:2b:0b:f0:
b2:d8:ea:f3:ae:12:32:15:e8:92:1f:85:12:e2:af:
32:d0:30:d7:4e:a1:be:01:3c:fa:ca:99:7c:50:29:
2f:8b:bd:6e:a0:73:d3:21:7e:0e:77:66:9e:ca:c5:
59:05:24:e9:5b:82:ec:fe:8e:2a:f3:07:01:84:8e:
c2:56:08:f0:19:2d:3f:fb:44:75:69:dc:01:05:ab:
34:13:d6:49:34:04:e8:71:bd:05:ae:e5:c5:01:b5:
ef:c8:c3:d6:ac:73:97:6d:6c:3d:ac:a9:27:76:b9:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:58:EC:72:6F:7D:33:0F:C8:15:0F:83:D4:DD:56:06:3D:E5:D5:2F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a503::/32
Signature Algorithm: sha256WithRSAEncryption
ac:56:e7:b0:f0:5b:9c:d2:d3:ae:e9:29:f8:d4:d0:09:c1:d9:
c5:b3:91:95:2d:79:83:5f:8c:fa:d4:95:a9:fb:37:83:37:73:
35:98:67:80:4a:be:af:28:76:14:1f:05:5e:91:4d:37:a6:1c:
e8:ad:31:a1:74:c3:41:80:52:7d:46:67:6c:12:58:2f:a1:d6:
2a:9b:4d:5e:01:4b:f0:8b:cf:b9:3b:72:28:1f:d8:ea:11:c9:
96:06:2e:65:50:34:7e:bb:d0:36:3b:9e:e7:f3:22:24:be:ed:
67:8a:b7:14:29:9e:36:34:7e:f1:8e:43:5e:39:bb:17:cd:aa:
fa:55:f3:b2:9a:ef:18:32:17:39:09:8b:84:3c:c1:e9:6d:d4:
18:54:c5:81:98:7f:bc:76:68:7e:87:d0:fc:0d:84:bc:53:bf:
1d:e9:11:81:e9:18:c6:d1:47:cc:93:86:6a:5e:b1:f4:a3:6f:
68:96:f8:d5:f0:42:c6:64:e3:ce:a9:05:29:0d:33:a5:39:24:
11:ec:2c:cb:05:26:b3:c4:63:10:08:7a:64:d3:fc:7a:94:df:
23:69:b4:a7:7a:a2:ca:1b:83:e8:0a:c0:fc:8c:7b:11:fe:ef:
e0:ec:39:bd:69:f3:f4:eb:5d:c7:2d:8e:f7:be:3c:e8:b3:4d:
66:35:7f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:18 2026 by rpki-client